This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer File: bQ1uHM2JDfL16cFF7LpGiZzOs70.cer (raw, json) Hash identifier: +EF8Vl+fo3CXEqrrsJB9jG3C7f/CfKnrQGINHjOQ9AY= Subject key identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECFF701A44C7E1EE8583F5280E22F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206210 IP: 193.39.136.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ff:70:1a:44:c7:e1:ee:85:83:f5:28:0e:22:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ab:31:cf:6d:b2:a2:71:e7:9d:c3:45:59:19: f3:d7:48:08:f6:b1:8a:ae:f0:23:bf:75:4e:da:fd: 6f:bb:38:d1:31:d2:fb:06:ba:fe:c0:86:7d:2c:68: dd:d4:21:a5:20:70:ce:0d:94:b8:c8:d7:96:b4:27: 6f:d5:b7:31:e7:5f:dd:25:0e:1b:ff:4c:27:96:76: bc:60:e2:9b:d9:43:92:be:5e:a7:ca:2d:cc:69:8d: 1f:be:2e:30:df:9d:39:cb:d1:d0:60:6c:71:3c:dc: cc:a8:9f:e4:3b:22:c4:78:f0:d4:56:6d:07:e2:eb: 36:d3:3e:23:49:ae:0c:14:22:09:99:d0:cc:c7:3a: 5f:70:23:98:c1:83:0a:80:5e:e0:90:a6:0e:b3:99: 42:27:e1:1f:73:03:e1:f7:4f:7d:75:8b:65:e5:25: 23:7d:4a:f9:ec:db:16:37:a5:51:b2:26:36:4e:37: a9:3e:95:44:ce:58:fd:97:a6:15:0a:52:ac:5d:e9: 6e:24:99:24:6e:10:ea:67:0c:0e:eb:0a:a3:29:03: c7:13:b7:e1:90:70:02:eb:0f:a5:75:5a:3f:b0:e1: 3a:f8:8f:a6:e8:4e:59:1d:f5:98:07:bf:46:e5:c6: 52:a0:ae:d9:a7:2f:9d:fe:7d:46:ae:e7:b6:9c:76: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.136.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206210 Signature Algorithm: sha256WithRSAEncryption 15:da:6e:09:1d:e1:67:7f:60:9d:9c:81:e3:87:36:7f:fd:e7: 2b:88:20:b0:61:df:c2:59:5b:26:cc:fd:42:64:a1:3a:97:5f: 6e:31:e1:98:81:33:34:20:00:ab:d4:44:a8:83:35:52:20:d1: bb:91:6b:33:57:50:18:c2:31:6f:c7:1a:01:76:a8:d8:47:60: 52:61:b7:24:f4:86:c0:5c:a3:48:e2:1f:a7:e8:b2:8f:97:c1: 20:3e:64:1f:bd:5a:66:de:88:e3:4e:7e:cd:8b:a7:2b:b9:28: f9:5d:d1:80:1e:e5:75:4b:1f:04:ec:33:f8:80:32:3b:34:04: 87:f3:ee:9e:9b:cf:d9:34:cb:3b:f2:fb:e9:7b:c3:ea:53:a0: 09:e8:1b:fc:d3:c3:f4:f6:bd:21:28:6c:ac:65:b4:31:73:98: 9a:95:01:88:7b:a1:70:55:a0:9c:bc:59:31:03:e5:64:98:02: 1a:d6:da:c3:46:7b:0a:a9:25:03:39:fc:f1:55:a6:ae:29:ff: 57:bb:d7:1a:09:39:c7:46:65:ae:de:17:41:30:36:e8:6d:b2: 8e:28:46:05:e4:15:4f:22:47:b0:7f:40:a4:18:2e:67:e9:17: f3:f9:3d:5a:96:a0:c3:41:a5:57:f8:76:e7:78:d9:bd:01:b5: 92:7b:b1:ad -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57P9wGkTH4e6Fg/UoDiLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDBkNmUxY2NkODkwZGYyZjVlOWMxNDVlY2JhNDY4OTljY2ViM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqsxz22yonHnncNFWRnz10gI9rGK rvAjv3VO2v1vuzjRMdL7Brr+wIZ9LGjd1CGlIHDODZS4yNeWtCdv1bcx51/dJQ4b /0wnlna8YOKb2UOSvl6nyi3MaY0fvi4w3505y9HQYGxxPNzMqJ/kOyLEePDUVm0H 4us20z4jSa4MFCIJmdDMxzpfcCOYwYMKgF7gkKYOs5lCJ+EfcwPh9099dYtl5SUj fUr57NsWN6VRsiY2TjepPpVEzlj9l6YVClKsXeluJJkkbhDqZwwO6wqjKQPHE7fh kHAC6w+ldVo/sOE6+I+m6E5ZHfWYB79G5cZSoK7Zpy+d/n1Grue2nHaOOQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFG0NbhzNiQ3y9enBRey6RomczrO9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzI3NzE1 NC1lZmJhLTQ4ZWQtYmIwYy02NTBiNzBiYWQ3YTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMjc3MTU0 LWVmYmEtNDhlZC1iYjBjLTY1MGI3MGJhZDdhOS8xL2JRMXVITTJKRGZMMTZjRkY3 THBHaVp6T3M3MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSeIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMlgjANBgkqhkiG9w0BAQsFAAOCAQEAFdpuCR3hZ39gnZyB44c2f/3nK4ggsGHf wllbJsz9QmShOpdfbjHhmIEzNCAAq9REqIM1UiDRu5FrM1dQGMIxb8caAXao2Edg UmG3JPSGwFyjSOIfp+iyj5fBID5kH71aZt6I405+zYunK7ko+V3RgB7ldUsfBOwz +IAyOzQEh/PunpvP2TTLO/L76XvD6lOgCegb/NPD9Pa9IShsrGW0MXOYmpUBiHuh cFWgnLxZMQPlZJgCGtbaw0Z7CqklAzn88VWmrin/V7vXGgk5x0Zlrt4XQTA26G2y jihGBeQVTyJHsH9ApBguZ+kX8/k9Wpagw0GlV/h253jZvQG1knuxrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:52 2026 by rpki-client