This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer File: bYAjo4F9UCFR-9BIRKfDw17pm0M.cer (raw, json) Hash identifier: jJwRQuLCt8e/3/eFAGgdudoqULJPopE13+cCdBG+t8g= Subject key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA3D6ED9651B05A72F303D64689C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207223 IP: 185.162.116.0/22 IP: 185.179.64.0/22 IP: 2a0a:e000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a3:d6:ed:96:51:b0:5a:72:f3:03:d6:46:89:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:01:30:87:bd:9f:00:5d:d8:b4:87:34:df: ca:3b:08:b5:7e:59:27:53:c5:59:db:0b:f4:c8:76: 9b:bf:44:44:fa:a8:ae:2a:3c:78:ab:6c:ab:83:cc: 0e:99:43:76:8a:40:38:28:20:45:bf:a3:ae:8c:54: 4a:c4:55:89:86:21:c3:37:db:47:52:73:aa:46:30: d8:00:5a:54:9c:0d:27:de:6a:c5:7e:82:8e:9b:33: 5e:86:aa:7b:e7:23:d0:19:20:fd:e1:ed:c2:f1:45: 34:96:32:0b:14:fa:67:fc:07:91:16:c2:51:7c:18: 75:64:20:15:51:00:f9:f6:63:f1:3d:63:40:d9:e8: 3f:b1:19:4e:3a:ef:c3:38:40:65:6d:f0:d5:14:5b: af:27:de:a9:a9:a7:d0:d0:89:20:92:71:5e:4e:26: 92:be:db:3a:83:0e:e1:bb:3e:c8:7d:f4:61:bd:87: c3:60:74:45:d6:4d:7a:f8:35:c5:73:86:bf:ea:99: e3:c8:a6:3c:0b:50:a9:2a:cd:e2:08:04:1f:67:3b: b1:8c:6f:c2:e8:e7:bc:d2:6b:74:3a:64:b8:4b:51: e9:48:e6:2f:8b:9a:ea:9e:fc:1a:94:5e:31:6b:df: 35:30:14:92:91:f5:61:3f:05:44:9b:76:f4:ac:d6: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.116.0/22 185.179.64.0/22 IPv6: 2a0a:e000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207223 Signature Algorithm: sha256WithRSAEncryption b0:d1:a3:b5:4e:5d:34:28:6e:88:10:27:37:b4:d0:14:bf:cd: 73:14:b7:f3:20:36:f5:ce:ba:ea:c7:62:00:d6:ac:11:d3:e4: 83:30:dd:88:80:d2:57:e8:56:3c:2c:61:be:ce:cb:3e:0d:6c: e0:13:c6:e7:68:20:7e:e0:11:a8:0d:b1:8b:78:e7:1d:ad:a9: a2:94:54:c9:34:b3:1c:87:8f:f1:37:bf:0c:a1:46:08:03:2b: c6:7f:4b:ae:81:6a:ed:56:50:7d:90:a1:da:56:6d:c6:ac:8b: 08:8e:5f:7e:9f:6d:6a:73:3c:73:6d:1f:68:36:37:7a:0d:a0: d8:76:04:3e:60:89:71:43:a2:1f:de:9b:fb:f2:80:48:89:a9: 5a:52:f8:2a:aa:12:3b:35:28:a9:c2:45:a5:e9:a6:3d:d4:fc: 89:5c:8e:ec:45:d9:f7:de:0b:08:2f:f5:7c:bb:83:7c:90:44: 65:21:40:b4:21:e7:a7:61:50:a0:5d:e6:82:ca:ee:6a:37:25: cb:f6:3b:23:04:9c:6e:8f:c8:e1:35:b7:7a:18:06:46:91:de: a7:7f:82:29:ab:49:bf:da:51:67:d2:96:6c:c0:bd:66:5d:59: 33:a4:5a:6d:fd:50:43:58:e9:12:2c:3e:43:8b:18:e3:67:94: 67:f3:5d:ca -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yqPW7ZZRsFpy8wPWRonIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDgwMjNhMzgxN2Q1MDIxNTFmYmQwNDg0NGE3YzNjMzVlZTk5YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVgBMIe9nwBd2LSHNN/KOwi1flkn U8VZ2wv0yHabv0RE+qiuKjx4q2yrg8wOmUN2ikA4KCBFv6OujFRKxFWJhiHDN9tH UnOqRjDYAFpUnA0n3mrFfoKOmzNehqp75yPQGSD94e3C8UU0ljILFPpn/AeRFsJR fBh1ZCAVUQD59mPxPWNA2eg/sRlOOu/DOEBlbfDVFFuvJ96pqafQ0IkgknFeTiaS vts6gw7huz7IffRhvYfDYHRF1k16+DXFc4a/6pnjyKY8C1CpKs3iCAQfZzuxjG/C 6Oe80mt0OmS4S1HpSOYvi5rqnvwalF4xa981MBSSkfVhPwVEm3b0rNZEBwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzRkOTQy NC0wNmU4LTRiYzYtYjVlYS1iNTA5NDQ5MTNhYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvNGQ5NDI0 LTA2ZTgtNGJjNi1iNWVhLWI1MDk0NDkxM2FiZi8xL2JZQWpvNEY5VUNGUi05QklS S2ZEdzE3cG0wTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuaJ0AwQCubNAMA0EAgACMAcDBQMqCuAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMpdzANBgkqhkiG9w0BAQsFAAOCAQEAsNGj tU5dNChuiBAnN7TQFL/NcxS38yA29c666sdiANasEdPkgzDdiIDSV+hWPCxhvs7L Pg1s4BPG52ggfuARqA2xi3jnHa2popRUyTSzHIeP8Te/DKFGCAMrxn9LroFq7VZQ fZCh2lZtxqyLCI5ffp9tanM8c20faDY3eg2g2HYEPmCJcUOiH96b+/KASImpWlL4 KqoSOzUoqcJFpemmPdT8iVyO7EXZ994LCC/1fLuDfJBEZSFAtCHnp2FQoF3mgsru ajcly/Y7IwScbo/I4TW3ehgGRpHep3+CKatJv9pRZ9KWbMC9Zl1ZM6Rabf1QQ1jp Eiw+Q4sY42eUZ/Ndyg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:40 2026 by rpki-client