This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer (raw, json) Hash identifier: 5FMohlvjn7MOCU4itPx7tMBvvxqLEAavWEFs4ZHbhto= Subject key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DE561BAFC79C4C12374FED01F8B84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42894 IP: 131.237.0.0/16 IP: 144.43.0.0/16 IP: 145.12.0.0/16 IP: 145.31.0.0/16 IP: 145.45.0.0/16 IP: 145.50.0.0/16 IP: 145.69.0.0/16 IP: 194.104.116.0/22 IP: 2a13:e080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e5:61:ba:fc:79:c4:c1:23:74:fe:d0:1f:8b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:ff:9c:50:e0:92:7e:9c:79:e9:d0:29:bd: a0:32:b0:01:1a:0e:38:7c:53:f1:74:ad:23:dd:9a: 9c:60:68:ba:bb:67:ca:2a:42:f5:89:1a:b5:f0:13: ca:0d:2d:66:fb:72:4c:40:ac:fa:07:3d:2a:16:30: 04:a7:c5:01:d8:e6:10:1a:82:68:45:9e:62:f7:c5: 57:82:33:22:a6:8d:03:23:75:de:c9:6c:20:31:15: 6c:51:9c:b9:c6:d7:97:b3:c9:3c:99:a9:84:43:97: 8d:45:41:fa:7f:36:4a:2a:41:59:c9:7b:33:24:d4: fe:6d:96:58:f5:f9:a6:e5:b3:1d:25:d7:84:16:6c: 9a:e7:ee:fa:0a:bf:e2:7c:6c:93:16:ff:0e:32:cf: ed:31:ea:fb:07:fc:c2:f7:4f:ea:a2:78:1a:a8:12: a9:1f:ff:e5:25:f9:28:84:99:65:1d:e4:7a:82:62: 16:3b:89:89:64:4b:72:0c:8e:49:dd:1f:b0:d4:82: 88:22:64:70:3e:20:45:df:46:f2:5e:f4:c1:6c:a0: 9d:9b:1a:c0:4e:b2:2c:fc:5a:09:0e:74:da:7e:88: 44:15:d3:1d:59:25:6f:f9:43:71:3b:40:b0:8c:ae: 0c:0e:cd:ee:22:88:f3:e9:5c:b0:e2:25:ac:00:04: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.237.0.0/16 144.43.0.0/16 145.12.0.0/16 145.31.0.0/16 145.45.0.0/16 145.50.0.0/16 145.69.0.0/16 194.104.116.0/22 IPv6: 2a13:e080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42894 Signature Algorithm: sha256WithRSAEncryption 1b:36:2a:bf:25:93:d6:cc:e7:9f:26:43:8d:10:e8:68:63:6b: 30:9a:40:76:1a:09:c1:58:ae:cc:ed:58:3a:18:c6:29:8c:5c: 02:a0:b1:6f:62:09:9f:33:47:2e:52:4e:1b:16:58:fd:d5:08: 27:f5:f2:95:f1:26:4b:7a:75:a9:25:53:8a:4e:65:68:ae:21: d3:71:8e:38:da:61:f8:9d:9a:3c:c5:3b:78:09:14:cf:af:77: 5e:6c:f7:82:43:c2:90:bd:29:05:a7:8b:ad:80:48:d9:b4:83: a7:c4:e9:5f:b9:0b:a8:88:63:a5:58:18:67:2b:33:c8:5a:04: e6:f7:00:13:70:ff:31:b2:be:6f:49:7d:ed:9d:2f:10:61:a1: d7:93:50:66:7d:a2:60:e6:a7:5f:fd:59:ec:2e:ea:2c:e6:d9: 78:27:65:67:2e:3e:31:f2:de:70:ef:4d:be:a7:94:7c:62:11: 01:47:40:ce:07:d4:66:75:17:a2:36:61:40:a4:6c:6d:a1:40: 7d:f7:db:8c:66:13:53:dc:06:ab:f5:36:2b:3b:ae:42:c4:54: 74:69:0b:75:14:18:32:be:6e:84:5f:2b:b6:68:91:ec:03:2d: 75:df:15:03:b2:d7:f6:8b:90:cb:ec:d8:1a:d4:c3:12:dc:33: 55:f7:02:d4 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt5feVhuvx5xMEjdP7QH4uEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDA2OWUxOWUxMmMxMDQwMDRlOGI0Yjc1ZjhhNzc4OWI3ZTExMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDv/nFDgkn6ceenQKb2gMrABGg44 fFPxdK0j3ZqcYGi6u2fKKkL1iRq18BPKDS1m+3JMQKz6Bz0qFjAEp8UB2OYQGoJo RZ5i98VXgjMipo0DI3XeyWwgMRVsUZy5xteXs8k8mamEQ5eNRUH6fzZKKkFZyXsz JNT+bZZY9fmm5bMdJdeEFmya5+76Cr/ifGyTFv8OMs/tMer7B/zC90/qongaqBKp H//lJfkohJllHeR6gmIWO4mJZEtyDI5J3R+w1IKIImRwPiBF30byXvTBbKCdmxrA TrIs/FoJDnTafohEFdMdWSVv+UNxO0CwjK4MDs3uIojz6Vyw4iWsAAT23wIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFG0GnhnhLBBABOi0t1+Kd4m34ROWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2NmNjRm Ni0wNzg5LTQzZTMtYmQ2Yi03YmZmMjk2YzZiMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvY2Y2NGY2 LTA3ODktNDNlMy1iZDZiLTdiZmYyOTZjNmIwMi8xL2JRYWVHZUVzRUVBRTZMUzNY NHAzaWJmaEU1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUF BwEHAQH/BEIwQDAvBAIAATApAwMAg+0DAwCQKwMDAJEMAwMAkR8DAwCRLQMDAJEy AwMAkUUDBALCaHQwDQQCAAIwBwMFACoT4IAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAKeOMA0GCSqGSIb3DQEBCwUAA4IBAQAbNiq/JZPWzOefJkONEOhoY2swmkB2 GgnBWK7M7Vg6GMYpjFwCoLFvYgmfM0cuUk4bFlj91Qgn9fKV8SZLenWpJVOKTmVo riHTcY442mH4nZo8xTt4CRTPr3debPeCQ8KQvSkFp4utgEjZtIOnxOlfuQuoiGOl WBhnKzPIWgTm9wATcP8xsr5vSX3tnS8QYaHXk1BmfaJg5qdf/VnsLuos5tl4J2Vn Lj4x8t5w702+p5R8YhEBR0DOB9RmdReiNmFApGxtoUB999uMZhNT3Aar9TYrO65C xFR0aQt1FBgyvm6EXyu2aJHsAy113xUDstf2i5DL7Nga1MMS3DNV9wLU -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:05 2026 by rpki-client