This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer File: bj7iuEACCKfupFBg9LeoPEPo3nw.cer (raw, json) Hash identifier: lDczwRv7ghafgTLSoA4S47wRZcyUSwYzOKyYWiZSOpc= Subject key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E6596781EA0D953BDA8E0F3D208B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205234 IP: 91.201.32.0/22 IP: 2a0c:66c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e6:59:67:81:ea:0d:95:3b:da:8e:0f:3d:20:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:f2:56:bd:28:ec:b4:8d:bb:7f:5e:1b:5b: cb:ae:7d:25:98:5e:4d:32:14:c7:2f:76:81:35:fb: 5c:dc:d7:1d:7a:27:f6:d7:58:a8:4c:ab:09:cd:52: 0f:82:5b:24:7d:eb:fa:fb:86:c6:a3:a0:83:13:7d: 8b:50:42:b0:2c:2c:34:81:6c:f2:5a:25:8c:5c:5f: a3:6c:ed:1c:d0:30:b9:51:86:4b:ca:d0:1a:5b:42: 24:fc:9a:cd:75:b4:69:76:58:e3:1f:d3:73:79:26: c6:b9:3c:57:48:15:98:fe:71:ec:b7:9a:87:03:58: 02:04:c0:53:d7:e2:44:e0:dc:c6:80:5c:8a:81:91: a9:b1:66:fe:d5:57:79:3c:da:cb:10:74:36:9f:fd: fe:5b:0a:d6:12:06:de:15:27:21:38:c6:71:2f:36: 02:f6:61:27:20:3d:ec:ff:2e:61:98:9d:92:56:3d: ad:28:5b:92:64:b1:a0:16:43:5a:ee:b2:f5:d5:a6: ac:51:b8:77:c7:8e:d4:41:63:84:94:24:22:e6:cc: b4:98:10:6b:ab:99:e5:96:e3:12:fb:96:ec:07:26: 27:6a:60:d3:51:60:28:4f:75:a8:80:16:4e:3a:0b: 4e:e7:f9:84:02:e1:74:5f:43:18:e0:e3:80:7a:58: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.32.0/22 IPv6: 2a0c:66c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205234 Signature Algorithm: sha256WithRSAEncryption 0b:7d:74:22:c8:bc:31:b4:f2:e8:29:0c:e9:d6:ae:a5:ba:f9: 2d:9e:4d:d1:ab:01:5d:a0:6e:5e:8d:6b:eb:82:e6:d8:b3:22: 69:11:6d:78:56:5f:c2:c6:07:3c:61:6f:53:16:8c:e8:ca:e6: 38:98:87:30:69:df:42:34:a4:d8:33:62:4f:c8:b1:3a:eb:bb: 2f:13:78:ea:20:cb:99:7d:16:b5:93:ad:8e:0b:1b:65:9e:0e: b5:d7:f8:17:a4:59:c2:aa:f4:20:ed:fa:34:2f:69:76:1b:e4: 5c:e0:36:99:50:39:19:63:d4:c1:fb:26:1c:3d:7b:1c:10:ff: 09:0d:e9:c8:a0:4a:56:74:e3:c6:82:88:5a:da:27:31:01:e6: 8b:2f:54:ff:f2:dc:56:6c:ff:5f:95:55:35:be:06:14:06:8c: e3:48:a6:01:1a:a7:3b:2c:a7:17:ae:e6:88:6a:ff:64:85:ee: 00:c9:f6:fb:a0:0c:57:3b:c4:0e:01:1b:14:fc:be:6c:55:3e: 4e:18:d4:65:f2:4d:cd:3b:7a:36:0c:36:28:96:d1:77:1a:cf: aa:63:eb:02:bc:a4:25:55:30:6b:a5:81:f0:9e:5a:28:ea:58: cf:d6:a2:65:01:73:b8:00:d6:9d:6a:ad:39:b7:5b:85:74:bb: ea:61:5e:0e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WOZZZ4HqDZU72o4PPSCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTNlZTJiODQwMDIwOGE3ZWVhNDUwNjBmNGI3YTgzYzQzZThkZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3zyVr0o7LSNu39eG1vLrn0lmF5N MhTHL3aBNftc3Ncdeif211ioTKsJzVIPglskfev6+4bGo6CDE32LUEKwLCw0gWzy WiWMXF+jbO0c0DC5UYZLytAaW0Ik/JrNdbRpdljjH9NzeSbGuTxXSBWY/nHst5qH A1gCBMBT1+JE4NzGgFyKgZGpsWb+1Vd5PNrLEHQ2n/3+WwrWEgbeFSchOMZxLzYC 9mEnID3s/y5hmJ2SVj2tKFuSZLGgFkNa7rL11aasUbh3x47UQWOElCQi5sy0mBBr q5nlluMS+5bsByYnamDTUWAoT3WogBZOOgtO5/mEAuF0X0MY4OOAelil5QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG4+4rhAAgin7qRQYPS3qDxD6N58MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2U0ZjJk Yi02ZjQ2LTQ3NjEtYWRmZS03MzI3ZGY2YmRkMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZTRmMmRi LTZmNDYtNDc2MS1hZGZlLTczMjdkZjZiZGQxMC8xL2JqN2l1RUFDQ0tmdXBGQmc5 TGVvUEVQbzNudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCW8kgMA0EAgACMAcDBQAqDGbAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMhsjANBgkqhkiG9w0BAQsFAAOCAQEAC310Isi8MbTy 6CkM6daupbr5LZ5N0asBXaBuXo1r64Lm2LMiaRFteFZfwsYHPGFvUxaM6MrmOJiH MGnfQjSk2DNiT8ixOuu7LxN46iDLmX0WtZOtjgsbZZ4Otdf4F6RZwqr0IO36NC9p dhvkXOA2mVA5GWPUwfsmHD17HBD/CQ3pyKBKVnTjxoKIWtonMQHmiy9U//LcVmz/ X5VVNb4GFAaM40imARqnOyynF67miGr/ZIXuAMn2+6AMVzvEDgEbFPy+bFU+ThjU ZfJNzTt6Ngw2KJbRdxrPqmPrArykJVUwa6WB8J5aKOpYz9aiZQFzuADWnWqtObdb hXS76mFeDg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:59 2026 by rpki-client