This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer File: bcXjzvXaXn_fw2TF1aBALTpnhtw.cer (raw, json) Hash identifier: y61VMXfy5BwRNIBu9v7ym10b6wSsVx7bnm1OgOke9jQ= Subject key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B25FFFE40158761C8AADF2EC81DCA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206550 IP: 185.182.112.0/22 IP: 2a0a:ec80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:25:ff:fe:40:15:87:61:c8:aa:df:2e:c8:1d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:af:94:e3:6f:e0:f0:68:88:23:93:4a:a5: 2c:e5:84:e4:19:7c:d7:7a:e9:83:91:d9:9f:ea:81: e5:a5:c5:33:cd:d2:4a:3c:0f:a5:65:49:a2:39:15: 5a:28:f2:e9:aa:17:c6:f6:c1:a6:46:cd:5e:dc:c9: c0:10:2b:76:34:89:1b:c9:b6:34:54:18:c1:01:7e: 4d:c0:d9:0c:38:0e:c7:32:7f:db:b0:9d:38:74:64: 0f:01:86:2b:7b:2a:78:d2:3b:c6:73:69:91:28:42: 60:ba:f0:23:85:3a:92:a5:d7:90:63:5e:61:40:d6: 78:f0:3c:00:16:5c:02:f0:55:98:2d:c3:45:db:8c: 8d:6d:79:26:47:67:b1:aa:83:c9:7a:72:57:9d:c5: 87:75:09:cd:73:00:0c:cc:02:bd:21:af:ac:0a:77: 3f:4c:0d:f7:61:78:ee:c1:ce:f3:dc:05:e2:16:8d: 90:03:cb:69:00:84:d2:61:e3:09:00:d3:4f:6b:63: ee:ad:f4:49:91:79:4e:23:46:ef:65:95:75:c5:6e: c3:f7:f8:cf:36:0a:b4:4c:3d:31:0f:1a:77:cc:a1: 13:05:16:fa:d8:8a:b6:95:98:4f:a3:a7:60:e7:ed: b2:e3:37:bb:b1:09:db:71:8f:84:7a:54:a0:bc:dd: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.112.0/22 IPv6: 2a0a:ec80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206550 Signature Algorithm: sha256WithRSAEncryption 97:c9:1f:06:bd:c4:28:1b:81:3b:e5:50:cb:cc:f1:d1:e6:77: d2:a9:fb:25:2d:8e:5d:79:4c:d1:6b:46:7c:0c:d9:e5:04:75: 75:5e:29:35:b5:f5:77:ca:68:ee:91:aa:84:0b:d6:96:73:9b: 84:16:c0:7c:e1:35:b8:cc:a6:f2:d1:45:c1:79:7d:48:65:68: d7:03:15:b3:4d:5d:99:e9:07:e5:c4:42:bf:77:f7:7b:c0:18: 11:df:0d:cf:a3:af:82:2c:ce:25:18:76:ee:57:df:58:9a:b1: c6:f8:21:7e:31:4f:20:62:3b:4e:02:fc:39:41:ef:63:14:46: cd:31:4d:6d:5d:d9:ef:9f:a0:d7:d8:90:e2:39:67:93:fd:2b: a5:d5:91:85:39:a5:2e:ae:08:e9:43:e1:a8:a0:82:42:ca:72: ee:b4:d2:d3:35:09:1a:7b:00:3b:57:5d:a7:86:ee:46:a2:01: 3e:d5:8a:5c:a9:dc:d0:62:ec:5d:d1:8f:b5:c3:15:de:b2:aa: fe:c4:36:84:d1:3b:a4:54:d9:1d:d7:5e:f4:9a:00:54:25:90: 58:27:28:55:4d:9f:c5:5f:b1:3d:b9:73:d5:80:7d:3d:3f:b5: bc:1f:fe:6a:e0:cf:5f:bb:64:30:03:9f:34:e8:c8:87:a5:0d: 21:e7:c6:81 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WyX//kAVh2HIqt8uyB3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGM1ZTNjZWY1ZGE1ZTdmZGZjMzY0YzVkNWEwNDAyZDNhNjc4NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIqvlONv4PBoiCOTSqUs5YTkGXzX eumDkdmf6oHlpcUzzdJKPA+lZUmiORVaKPLpqhfG9sGmRs1e3MnAECt2NIkbybY0 VBjBAX5NwNkMOA7HMn/bsJ04dGQPAYYreyp40jvGc2mRKEJguvAjhTqSpdeQY15h QNZ48DwAFlwC8FWYLcNF24yNbXkmR2exqoPJenJXncWHdQnNcwAMzAK9Ia+sCnc/ TA33YXjuwc7z3AXiFo2QA8tpAITSYeMJANNPa2PurfRJkXlOI0bvZZV1xW7D9/jP Ngq0TD0xDxp3zKETBRb62Iq2lZhPo6dg5+2y4ze7sQnbcY+EelSgvN2dtQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG3F48712l5/38NkxdWgQC06Z4bcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2NjNzdh Ni0yYjBlLTRjZGQtODgyNi1jZGNjOTY2MDdiOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvY2M3N2E2 LTJiMGUtNGNkZC04ODI2LWNkY2M5NjYwN2I5YS8xL2JjWGp6dlhhWG5fZncyVEYx YUJBTFRwbmh0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubZwMA0EAgACMAcDBQMqCuyAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMm1jANBgkqhkiG9w0BAQsFAAOCAQEAl8kfBr3EKBuB O+VQy8zx0eZ30qn7JS2OXXlM0WtGfAzZ5QR1dV4pNbX1d8po7pGqhAvWlnObhBbA fOE1uMym8tFFwXl9SGVo1wMVs01dmekH5cRCv3f3e8AYEd8Nz6OvgizOJRh27lff WJqxxvghfjFPIGI7TgL8OUHvYxRGzTFNbV3Z75+g19iQ4jlnk/0rpdWRhTmlLq4I 6UPhqKCCQspy7rTS0zUJGnsAO1ddp4buRqIBPtWKXKnc0GLsXdGPtcMV3rKq/sQ2 hNE7pFTZHdde9JoAVCWQWCcoVU2fxV+xPblz1YB9PT+1vB/+auDPX7tkMAOfNOjI h6UNIefGgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:10 2026 by rpki-client