This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer File: bMI2cPl4nALYO6fC5-TG6e3lL3o.cer (raw, json) Hash identifier: trcuDjmbHd4caOw0WZijGSmGYYg50XcYjyZfkuLwNJI= Subject key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA48194378A1D9E19F7556A98F987FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43200 AS: 203424 IP: 81.26.32.0/19 IP: 147.12.32.0/19 IP: 185.45.176.0/22 IP: 195.181.128.0/19 IP: 213.128.160.0/19 IP: 217.116.80.0/20 IP: 2a02:2c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:81:94:37:8a:1d:9e:19:f7:55:6a:98:f9:87:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:66:59:ef:3c:38:68:c9:2a:a5:df:a5:e2: ce:b9:9b:5a:a8:c0:c1:cd:e5:67:16:f0:cf:71:08: 9d:68:88:42:fd:f7:0f:5f:46:3c:8c:f4:6f:56:34: b1:fd:5d:76:2a:6f:33:d6:bb:33:9e:20:00:fe:03: 1b:5e:0b:62:0c:1c:d3:37:65:d4:6d:d7:3d:1f:be: c7:d8:33:52:57:01:45:20:1b:07:21:a1:9a:7c:2c: 14:72:29:f3:71:53:a9:06:24:40:65:cf:cc:22:2f: 6e:62:d3:d2:6f:73:d5:4e:20:80:f4:92:3e:56:19: e7:74:60:fa:fe:34:c5:af:fb:7c:be:6f:50:c9:dc: 0b:2e:25:3f:8e:5c:c5:35:fc:de:fb:ac:4d:16:98: 16:1a:aa:e7:d4:d1:30:00:f5:34:bf:3b:2b:d6:17: eb:ed:f5:32:51:f3:47:df:4d:5e:19:56:32:31:e9: 31:c2:e0:8f:5c:81:8c:a9:6b:08:f3:7b:5a:29:80: 29:1f:07:75:78:07:07:0d:22:99:39:10:28:2a:fe: b6:da:bc:a1:7d:be:39:5a:68:3a:2d:60:75:03:bc: b8:ab:48:b9:94:b9:99:6d:b1:93:1c:48:14:cb:96: a0:65:e6:c7:25:4b:23:2d:92:e5:43:33:14:e9:12: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.26.32.0/19 147.12.32.0/19 185.45.176.0/22 195.181.128.0/19 213.128.160.0/19 217.116.80.0/20 IPv6: 2a02:2c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43200 203424 Signature Algorithm: sha256WithRSAEncryption 41:ed:4d:28:d9:cc:fc:f6:05:92:5f:5a:41:55:b6:ad:d2:ba: fb:ea:8b:58:bb:dd:4b:9b:56:6f:ba:28:62:52:1c:16:8c:77: 1a:b2:ea:c7:8f:56:84:1b:d3:3b:cb:24:c8:d0:aa:d5:f6:81: c3:b5:53:13:1e:f2:bd:e7:ca:81:16:4b:d9:4e:ef:f7:a1:03: 4b:48:a4:ef:ce:0a:33:12:c6:71:06:ae:a9:85:26:15:84:5e: 4e:4e:40:46:28:11:11:3b:6b:fb:09:2f:80:7b:c1:6a:d1:e5: f0:6e:2b:63:08:36:12:58:f9:d0:9b:93:c4:cb:4c:0e:f9:ea: e1:5d:2a:af:57:c8:f4:74:ed:67:19:a4:44:da:49:a0:4f:2f: 9a:9d:56:e0:e5:44:c3:b2:43:e7:4e:be:29:05:4b:54:ea:20: ad:01:01:0a:4e:58:51:66:25:83:17:07:fe:2d:9a:ba:0f:8b: 60:55:b8:5f:83:cf:53:bf:b3:46:da:09:09:9b:d7:f7:91:78: 6a:6d:ee:13:81:90:85:97:63:cc:3a:c3:37:74:c0:3a:1f:32: df:42:ae:6e:7a:94:37:45:8d:c4:b1:d6:22:6b:08:03:a4:0c: 78:45:24:64:d0:2e:00:ca:98:84:4e:28:24:7c:25:06:49:f2: 75:99:4e:38 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt7pIGUN4odnhn3VWqY+Yf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2MyMzY3MGY5Nzg5YzAyZDgzYmE3YzJlN2U0YzZlOWVkZTUyZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N5mWe88OGjJKqXfpeLOuZtaqMDB zeVnFvDPcQidaIhC/fcPX0Y8jPRvVjSx/V12Km8z1rszniAA/gMbXgtiDBzTN2XU bdc9H77H2DNSVwFFIBsHIaGafCwUcinzcVOpBiRAZc/MIi9uYtPSb3PVTiCA9JI+ VhnndGD6/jTFr/t8vm9QydwLLiU/jlzFNfze+6xNFpgWGqrn1NEwAPU0vzsr1hfr 7fUyUfNH301eGVYyMekxwuCPXIGMqWsI83taKYApHwd1eAcHDSKZORAoKv622ryh fb45Wmg6LWB1A7y4q0i5lLmZbbGTHEgUy5agZebHJUsjLZLlQzMU6RLFowIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFGzCNnD5eJwC2Dunwufkxunt5S96MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzlmZDIw ZS0zNGQ3LTQ5NDktYTMwNy05MDg3ZTBmZjNkMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvOWZkMjBl LTM0ZDctNDk0OS1hMzA3LTkwODdlMGZmM2QzNi8xL2JNSTJjUGw0bkFMWU82ZkM1 LVRHNmUzbEwzby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQFURogAwQFkwwgAwQCuS2wAwQFw7WAAwQF1YCg AwQE2XRQMA0EAgACMAcDBQMqAiwAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCo wAIDAxqgMA0GCSqGSIb3DQEBCwUAA4IBAQBB7U0o2cz89gWSX1pBVbat0rr76otY u91Lm1ZvuihiUhwWjHcasurHj1aEG9M7yyTI0KrV9oHDtVMTHvK958qBFkvZTu/3 oQNLSKTvzgozEsZxBq6phSYVhF5OTkBGKBERO2v7CS+Ae8Fq0eXwbitjCDYSWPnQ m5PEy0wO+erhXSqvV8j0dO1nGaRE2kmgTy+anVbg5UTDskPnTr4pBUtU6iCtAQEK TlhRZiWDFwf+LZq6D4tgVbhfg89Tv7NG2gkJm9f3kXhqbe4TgZCFl2PMOsM3dMA6 HzLfQq5uepQ3RY3EsdYiawgDpAx4RSRk0C4AypiETigkfCUGSfJ1mU44 -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:36 2026 by rpki-client