This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.cer (raw, json)
Hash identifier: DottrVNS8cHm/Xf3I+84RXiK1Qw48vONqxlsEcPRt1U=
Subject key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80D78FC69AEF439E4C305EC137837C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 34958
AS: 35189
IP: 193.43.215.0/24
IP: 193.189.147.0/24
IP: 2001:67c:25e8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:d7:8f:c6:9a:ef:43:9e:4c:30:5e:c1:37:83:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:5d:d3:28:3e:d3:4c:d3:d1:3d:d7:77:02:
9a:fe:2b:8b:67:6b:b7:87:9c:11:ef:83:11:f6:d5:
7e:c4:5d:32:83:e2:55:46:3f:2b:9c:e1:64:d0:a7:
75:b7:5a:57:b3:7a:14:05:aa:95:66:9c:bf:9d:71:
6a:10:59:78:48:6a:27:06:8a:67:ef:e5:b8:1b:65:
17:a6:39:f8:a3:78:69:f8:fd:68:74:24:7c:e2:e8:
15:7b:ae:b9:de:f1:ff:16:09:ea:b0:b8:03:8a:69:
f8:b4:e3:59:4a:0e:23:04:58:b0:36:ca:02:3e:ad:
34:ab:30:11:6a:63:cf:ba:9c:10:80:49:65:f2:9f:
b8:03:4d:6c:9d:9d:a9:f6:f4:8a:4a:0f:6a:a7:fc:
b9:fa:1f:c1:82:c2:aa:e6:1d:11:76:f0:f0:fb:4a:
4f:1c:6f:93:c9:75:17:3b:57:04:2f:62:22:9a:90:
87:6b:f8:86:01:a9:50:d2:57:5b:8d:38:24:36:2e:
d2:bf:55:92:91:21:99:fb:45:c2:27:ef:fc:18:e6:
92:9f:f4:8c:13:98:d0:c6:b6:c2:f0:9a:6c:39:1b:
19:6e:99:7d:12:28:f4:8d:4f:da:61:fd:7c:9f:91:
b0:aa:90:3b:7a:94:a6:e8:86:c8:d0:31:97:12:46:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.215.0/24
193.189.147.0/24
IPv6:
2001:67c:25e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34958
35189
Signature Algorithm: sha256WithRSAEncryption
1e:ed:49:b4:e7:51:45:e8:16:ea:fa:f2:94:9f:6c:82:51:a7:
12:11:ea:cf:f0:c9:99:2d:de:da:10:96:69:60:1e:27:80:26:
e8:c3:74:e4:92:bd:47:e5:bb:86:d3:0f:c6:c7:da:29:24:45:
29:f2:2f:75:8f:72:e3:58:f6:d2:b0:cb:50:f7:da:66:c3:d4:
92:f5:e0:32:f4:24:47:54:98:69:4e:82:17:b4:04:4c:bb:cf:
df:f1:1b:86:16:14:55:f6:30:2c:7c:ad:b2:36:a8:b8:75:2a:
ee:30:b4:6b:a9:0a:1e:e1:59:d5:ef:e5:90:bd:8b:72:3d:19:
9f:d7:59:53:8f:60:a1:07:db:5f:b1:67:7a:55:26:75:af:51:
ab:89:73:11:ec:dd:ae:4f:75:df:28:c4:58:8a:a2:a0:e1:c4:
32:85:85:17:97:9d:bd:85:20:8f:0b:5f:b3:51:d9:ca:21:c5:
c7:cd:71:00:3f:1f:b9:71:43:03:5a:ac:f9:7b:d6:aa:bd:2a:
54:a9:1a:b2:37:a3:f2:f5:d2:ae:f2:ba:bf:08:e3:0a:6d:78:
31:27:33:fa:15:88:a8:f9:0f:03:0c:43:f2:a7:b4:80:34:ce:
d9:00:7e:70:b6:4d:db:e2:3c:93:3d:18:06:6d:68:76:1c:a0:
15:e7:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:41:35 2026 by rpki-client