This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer (raw, json) Hash identifier: jEfjlL15MY/cFfA7G84x5B76h6KD2M7xhF0gpMMp1eY= Subject key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A97C8CCDF3FD3EB90D7E8C1FC977F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44143 IP: 37.19.104.0/21 IP: 77.243.16.0/20 IP: 95.86.4.0 -- 95.86.11.255 IP: 95.86.48.0/21 IP: 95.86.60.0/22 IP: 185.37.24.0/22 IP: 188.120.96.0 -- 188.120.119.255 IP: 194.110.216.0/24 IP: 198.143.176.0/21 IP: 2a00:61c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:97:c8:cc:df:3f:d3:eb:90:d7:e8:c1:fc:97:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:28:ee:4b:da:88:fe:59:3e:3d:fd:b8:98:7a: f7:8d:b9:e6:c8:c2:4d:d7:fc:9f:6f:41:1d:db:31: e4:ae:bb:85:32:ea:ab:52:44:09:23:d8:e7:cf:e3: 32:8b:a8:57:05:0e:6f:07:a4:5e:85:cb:0f:8b:9a: 03:ed:87:34:cc:07:dd:d3:b4:3a:30:fa:b2:af:2d: 8a:1c:cd:ea:0a:41:b9:25:d0:5f:ef:11:47:a8:86: 85:96:c6:d6:fc:4e:2f:85:ca:4a:42:6b:dc:d2:03: 66:d8:3b:62:f5:7b:8e:44:ca:89:00:d1:16:91:cc: 9e:43:78:7d:91:35:21:ed:2b:2f:20:b4:d1:16:05: ae:d1:11:57:19:df:c8:57:2b:fc:22:d3:64:21:60: 5b:49:bf:fd:2c:40:33:f2:9c:55:02:c2:43:1c:d3: 92:e1:81:c9:5b:3c:b3:42:28:a1:bd:88:cf:ea:15: e1:98:81:39:c8:db:bd:dc:68:58:83:46:73:86:ab: 7b:9e:8a:aa:16:29:19:86:94:56:a7:d2:6d:6f:d1: 74:f6:24:4f:02:48:b3:06:78:f3:77:43:ca:8f:a6: 74:f0:69:36:79:3d:de:56:d6:0b:ad:fb:ba:ca:e4: f1:b3:ca:02:94:52:c5:de:0d:e9:48:ab:8a:29:21: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.19.104.0/21 77.243.16.0/20 95.86.4.0-95.86.11.255 95.86.48.0/21 95.86.60.0/22 185.37.24.0/22 188.120.96.0-188.120.119.255 194.110.216.0/24 198.143.176.0/21 IPv6: 2a00:61c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44143 Signature Algorithm: sha256WithRSAEncryption ab:52:bf:06:66:2d:26:80:b3:fa:0f:3a:c5:6f:eb:6b:86:07: 9c:58:c4:b5:fb:38:b3:95:dc:c3:7f:6a:0b:90:71:c3:69:21: 3f:06:52:5f:66:55:36:5f:ca:6b:5c:fd:70:0f:7d:12:d5:9a: cf:c6:f6:23:13:39:a4:8d:b5:9c:e1:4c:dd:6e:71:6f:19:4c: c2:f0:64:72:c2:86:3c:4e:b0:7c:17:62:58:16:f3:3a:dc:48: f1:6f:b9:38:30:c7:76:90:2b:94:be:cd:57:d8:18:81:75:62: 7c:80:69:bb:5a:f0:68:67:2a:e2:ba:23:6b:b3:4a:fd:c5:70: 1b:24:62:82:ea:af:89:a9:92:05:f3:5c:27:4f:ed:4e:b9:54: 92:1f:b8:c9:cc:15:d1:3f:cb:dc:e1:fb:4a:c1:8b:20:c1:e9: af:c8:f3:18:81:84:14:33:39:3d:db:79:7b:c6:54:3b:22:0c: 9a:64:d6:ff:1c:6c:63:b5:80:18:7b:69:5e:10:3d:05:83:1a: f8:ef:65:f3:f8:3b:2f:2f:1d:45:e3:4d:26:6a:8d:4c:99:7e: 82:18:c1:49:c9:7c:83:eb:46:46:a5:ed:15:73:ff:e7:45:58: ea:4a:af:25:ac:0b:4c:8c:34:48:54:52:00:63:f8:be:bc:c8: 9f:e7:19:fb -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZt6WpfIzN8/0+uQ1+jB/Jd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTYwODgzYWFlNDkxZTVmYjc3M2E5MjY0MDE5ZmY0Zjg4OGQ1Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ijuS9qI/lk+Pf24mHr3jbnmyMJN 1/yfb0Ed2zHkrruFMuqrUkQJI9jnz+Myi6hXBQ5vB6RehcsPi5oD7Yc0zAfd07Q6 MPqyry2KHM3qCkG5JdBf7xFHqIaFlsbW/E4vhcpKQmvc0gNm2Dti9XuORMqJANEW kcyeQ3h9kTUh7SsvILTRFgWu0RFXGd/IVyv8ItNkIWBbSb/9LEAz8pxVAsJDHNOS 4YHJWzyzQiihvYjP6hXhmIE5yNu93GhYg0Zzhqt7noqqFikZhpRWp9Jtb9F09iRP AkizBnjzd0PKj6Z08Gk2eT3eVtYLrfu6yuTxs8oClFLF3g3pSKuKKSHaQQIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFG5giDquSR5ft3OpJkAZ/0+IjVylMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2Q4ZTA5 Ni00MzEwLTQyYjktYmQyMC1iNTYwMmQzZGE4YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvZDhlMDk2 LTQzMTAtNDJiOS1iZDIwLWI1NjAyZDNkYThhNi8xL2JtQ0lPcTVKSGwtM2M2a21R Qm5fVDRpTlhLVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG4GCCsGAQUF BwEHAQH/BF8wXTBMBAIAATBGAwQDJRNoAwQETfMQMAwDBAJfVgQDBAJfVggDBANf VjADBAJfVjwDBAK5JRgwDAMEBbx4YAMEA7x4cAMEAMJu2AMEA8aPsDANBAIAAjAH AwUDKgBhwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMArG8wDQYJKoZIhvcNAQEL BQADggEBAKtSvwZmLSaAs/oPOsVv62uGB5xYxLX7OLOV3MN/aguQccNpIT8GUl9m VTZfymtc/XAPfRLVms/G9iMTOaSNtZzhTN1ucW8ZTMLwZHLChjxOsHwXYlgW8zrc SPFvuTgwx3aQK5S+zVfYGIF1YnyAabta8GhnKuK6I2uzSv3FcBskYoLqr4mpkgXz XCdP7U65VJIfuMnMFdE/y9zh+0rBiyDB6a/I8xiBhBQzOT3beXvGVDsiDJpk1v8c bGO1gBh7aV4QPQWDGvjvZfP4Oy8vHUXjTSZqjUyZfoIYwUnJfIPrRkal7RVz/+dF WOpKryWsC0yMNEhUUgBj+L68yJ/nGfs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:15 2026 by rpki-client