This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer (raw, json) Hash identifier: pl6rlDz27ZNeSZRiFMCgGIqwzcbHQ29awAdAvd6R9IM= Subject key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC91D3B639B3E6EE24FC9F2B31F3E63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213642 IP: 2a14:8500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1d:3b:63:9b:3e:6e:e2:4f:c9:f2:b3:1f:3e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d005198b74572a156ab63f23085897bd3ccd41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:c7:94:72:e2:50:ff:d4:67:0d:68:24:99: 24:97:d8:bb:e3:29:79:90:69:b8:f6:e2:98:ec:39: 3d:86:06:b2:2c:da:8a:5d:55:3e:c7:64:ce:5d:00: 36:b1:80:69:78:65:91:72:e1:5f:94:bf:f5:38:ab: d6:6f:d0:8e:09:a9:ad:87:4f:96:41:02:fd:19:af: c7:fb:70:2e:37:d0:f1:d8:ca:6e:da:a2:7e:2f:6c: 40:57:e2:a4:4e:94:ee:42:68:22:3d:aa:02:aa:ae: 8a:e6:00:8b:88:da:22:35:26:9e:6b:09:aa:ea:3e: 7c:22:47:93:9d:7f:69:5b:57:39:b8:8e:37:f5:a4: cb:3d:6e:c4:52:b7:4b:36:bd:ea:fe:a0:1c:45:fb: 6f:2e:5b:a0:2a:72:86:ec:75:89:54:ce:50:c9:dc: a7:d8:0f:fa:c7:31:04:69:68:91:de:c9:a8:04:b8: ce:ac:e5:8c:50:8a:d5:f4:38:01:22:da:8f:d6:cd: 70:55:34:26:9a:6b:ec:1b:e7:c6:0f:3f:3d:38:0a: 8e:43:80:0d:5b:fe:05:6a:32:fb:5f:6e:d2:d1:0e: 49:d4:f5:e1:f8:2f:94:62:0b:58:b1:dd:40:c7:6f: a1:77:79:95:25:d3:24:ce:69:28:63:19:b6:fa:12: 9c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:8500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213642 Signature Algorithm: sha256WithRSAEncryption 02:5c:e2:56:b1:66:5a:fe:16:ad:e7:8e:cd:bb:dd:5c:87:17: 10:6f:3f:04:d9:39:b2:2e:55:5c:e7:8d:27:eb:22:aa:7e:a8: 27:15:cc:bf:1c:bf:1b:28:0a:7d:34:49:b0:b4:22:da:ac:b9: ab:8d:60:1a:2b:9f:9d:b8:3e:6d:0c:38:62:0c:73:b5:52:7e: 52:17:80:b2:1b:cb:40:3a:0c:c1:ec:37:ac:a6:d7:62:ec:75: c8:5c:18:ad:5e:04:d4:e4:43:73:3c:86:ee:9e:e1:6d:10:08: f9:7f:6d:74:39:0f:04:7d:c8:56:48:3f:b3:be:5d:b3:2c:a0: 47:a5:f5:b7:55:78:8b:02:4b:71:84:31:7f:d7:52:1f:ab:92: 20:50:15:de:7c:cd:b9:82:b0:87:57:56:5b:1f:10:c8:99:b9: 48:03:5b:80:7b:6d:2a:ed:d0:d4:0c:e7:9d:99:5f:7c:9a:72: d4:19:bb:63:5f:f0:57:4b:14:42:fe:5e:65:6a:1c:02:0d:3b: 26:5b:f3:4f:17:24:89:e4:43:11:ec:7d:89:4c:61:9e:4c:49: 5a:b6:66:65:83:1a:12:0d:1d:af:94:37:8b:7b:bd:72:06:a0: de:76:b1:66:57:61:62:89:ab:20:e0:37:b0:a9:87:c1:05:90: b4:27:26:27 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt6yR07Y5s+buJPyfKzHz5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDAwNTE5OGI3NDU3MmExNTZhYjYzZjIzMDg1ODk3YmQzY2NkNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoavHlHLiUP/UZw1oJJkkl9i74yl5 kGm49uKY7Dk9hgayLNqKXVU+x2TOXQA2sYBpeGWRcuFflL/1OKvWb9COCamth0+W QQL9Ga/H+3AuN9Dx2Mpu2qJ+L2xAV+KkTpTuQmgiPaoCqq6K5gCLiNoiNSaeawmq 6j58IkeTnX9pW1c5uI439aTLPW7EUrdLNr3q/qAcRftvLlugKnKG7HWJVM5Qydyn 2A/6xzEEaWiR3smoBLjOrOWMUIrV9DgBItqP1s1wVTQmmmvsG+fGDz89OAqOQ4AN W/4FajL7X27S0Q5J1PXh+C+UYgtYsd1Ax2+hd3mVJdMkzmkoYxm2+hKc9wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFG0AUZi3RXKhVqtj8jCFiXvTzNQbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzk3NWYz Yy1hZjRhLTQzN2ItODliMS0yODRlNTEyM2UyOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvOTc1ZjNj LWFmNGEtNDM3Yi04OWIxLTI4NGU1MTIzZTI5Zi8xL2JRQlJtTGRGY3FGV3EyUHlN SVdKZTlQTTFCcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhSFADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQoowDQYJKoZIhvcNAQELBQADggEBAAJc4laxZlr+Fq3njs273VyHFxBvPwTZ ObIuVVznjSfrIqp+qCcVzL8cvxsoCn00SbC0ItqsuauNYBorn524Pm0MOGIMc7VS flIXgLIby0A6DMHsN6ym12LsdchcGK1eBNTkQ3M8hu6e4W0QCPl/bXQ5DwR9yFZI P7O+XbMsoEel9bdVeIsCS3GEMX/XUh+rkiBQFd58zbmCsIdXVlsfEMiZuUgDW4B7 bSrt0NQM552ZX3yactQZu2Nf8FdLFEL+XmVqHAINOyZb808XJInkQxHsfYlMYZ5M SVq2ZmWDGhINHa+UN4t7vXIGoN52sWZXYWKJqyDgN7Cph8EFkLQnJic= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:10 2026 by rpki-client