This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
File:                     bkif4cfiCgsMY4QsRcFsV2MXhdM.cer (raw, json)
Hash identifier:          DottrVNS8cHm/Xf3I+84RXiK1Qw48vONqxlsEcPRt1U=
Subject key identifier:   6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7C80D78FC69AEF439E4C305EC137837C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 02:19:37 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 34958
                          AS: 35189
                          IP: 193.43.215.0/24
                          IP: 193.189.147.0/24
                          IP: 2001:67c:25e8::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:d7:8f:c6:9a:ef:43:9e:4c:30:5e:c1:37:83:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 02:19:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:5d:d3:28:3e:d3:4c:d3:d1:3d:d7:77:02:
                    9a:fe:2b:8b:67:6b:b7:87:9c:11:ef:83:11:f6:d5:
                    7e:c4:5d:32:83:e2:55:46:3f:2b:9c:e1:64:d0:a7:
                    75:b7:5a:57:b3:7a:14:05:aa:95:66:9c:bf:9d:71:
                    6a:10:59:78:48:6a:27:06:8a:67:ef:e5:b8:1b:65:
                    17:a6:39:f8:a3:78:69:f8:fd:68:74:24:7c:e2:e8:
                    15:7b:ae:b9:de:f1:ff:16:09:ea:b0:b8:03:8a:69:
                    f8:b4:e3:59:4a:0e:23:04:58:b0:36:ca:02:3e:ad:
                    34:ab:30:11:6a:63:cf:ba:9c:10:80:49:65:f2:9f:
                    b8:03:4d:6c:9d:9d:a9:f6:f4:8a:4a:0f:6a:a7:fc:
                    b9:fa:1f:c1:82:c2:aa:e6:1d:11:76:f0:f0:fb:4a:
                    4f:1c:6f:93:c9:75:17:3b:57:04:2f:62:22:9a:90:
                    87:6b:f8:86:01:a9:50:d2:57:5b:8d:38:24:36:2e:
                    d2:bf:55:92:91:21:99:fb:45:c2:27:ef:fc:18:e6:
                    92:9f:f4:8c:13:98:d0:c6:b6:c2:f0:9a:6c:39:1b:
                    19:6e:99:7d:12:28:f4:8d:4f:da:61:fd:7c:9f:91:
                    b0:aa:90:3b:7a:94:a6:e8:86:c8:d0:31:97:12:46:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.215.0/24
                  193.189.147.0/24
                IPv6:
                  2001:67c:25e8::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34958
                  35189

    Signature Algorithm: sha256WithRSAEncryption
         1e:ed:49:b4:e7:51:45:e8:16:ea:fa:f2:94:9f:6c:82:51:a7:
         12:11:ea:cf:f0:c9:99:2d:de:da:10:96:69:60:1e:27:80:26:
         e8:c3:74:e4:92:bd:47:e5:bb:86:d3:0f:c6:c7:da:29:24:45:
         29:f2:2f:75:8f:72:e3:58:f6:d2:b0:cb:50:f7:da:66:c3:d4:
         92:f5:e0:32:f4:24:47:54:98:69:4e:82:17:b4:04:4c:bb:cf:
         df:f1:1b:86:16:14:55:f6:30:2c:7c:ad:b2:36:a8:b8:75:2a:
         ee:30:b4:6b:a9:0a:1e:e1:59:d5:ef:e5:90:bd:8b:72:3d:19:
         9f:d7:59:53:8f:60:a1:07:db:5f:b1:67:7a:55:26:75:af:51:
         ab:89:73:11:ec:dd:ae:4f:75:df:28:c4:58:8a:a2:a0:e1:c4:
         32:85:85:17:97:9d:bd:85:20:8f:0b:5f:b3:51:d9:ca:21:c5:
         c7:cd:71:00:3f:1f:b9:71:43:03:5a:ac:f9:7b:d6:aa:bd:2a:
         54:a9:1a:b2:37:a3:f2:f5:d2:ae:f2:ba:bf:08:e3:0a:6d:78:
         31:27:33:fa:15:88:a8:f9:0f:03:0c:43:f2:a7:b4:80:34:ce:
         d9:00:7e:70:b6:4d:db:e2:3c:93:3d:18:06:6d:68:76:1c:a0:
         15:e7:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:41:35 2026 by rpki-client