This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer (raw, json) Hash identifier: A5auIjIKK1hxUlNLteXZrBda25O1kVuh5p4/O2stBjw= Subject key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12D36EC2A301B8727EED57B65B00FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215512 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d3:6e:c2:a3:01:b8:72:7e:ed:57:b6:5b:00:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:ed:9d:0d:cd:31:8b:77:28:af:f2:a3:fc: 0d:fd:85:0b:63:8e:a8:c6:71:2c:aa:45:e3:c4:32: a5:60:71:54:81:cf:c4:69:49:33:70:80:9b:3f:26: 8f:b1:95:61:b4:ed:04:43:68:42:eb:d7:95:3e:cc: 55:29:d4:a9:e8:59:96:32:09:13:de:ae:9e:78:22: a2:d7:43:da:d7:58:21:6e:da:1b:ea:14:5b:38:59: 1e:8c:cd:2c:a7:5a:d2:44:6e:98:ba:db:fb:97:9c: d6:63:74:77:4a:b0:78:71:d0:f4:ca:a9:08:a5:f7: 2e:1c:78:d5:f7:3d:59:ba:83:52:0c:60:a5:8b:d5: eb:1e:5a:cd:7e:38:e0:ce:93:35:55:0b:22:7f:d2: 5f:bd:31:80:43:fb:d1:a6:90:4c:0c:32:2f:21:3d: 7d:e7:5b:5d:4f:a5:86:f0:73:47:60:87:6d:e4:9b: 8e:aa:ea:ef:b1:e1:f7:c0:a7:26:19:9e:ae:9a:37: 1f:90:3c:62:f5:e3:d5:9c:56:6a:df:a9:64:0d:ac: 13:ad:37:96:70:42:dc:89:7a:da:53:83:55:fa:c7: a7:b8:4a:f9:3d:1d:b5:63:b4:73:38:4a:a1:fc:cd: 44:88:17:d7:de:7d:83:1c:a0:53:45:f9:2b:4b:bd: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215512 Signature Algorithm: sha256WithRSAEncryption 1a:9a:55:2a:6f:18:f5:02:3b:01:8c:5b:f9:a4:33:13:51:ed: 59:9d:e0:a1:78:9d:21:08:f8:c6:a9:3b:f5:51:9a:fb:53:33: 6f:b1:79:a4:cd:5c:50:38:96:03:15:10:44:1c:2b:62:09:50: 74:ce:1f:05:b7:f8:fe:2d:ab:18:58:80:5f:66:42:be:6d:9e: 30:1e:a1:7a:15:33:eb:2f:58:f8:b7:81:f9:3e:4c:56:67:1f: 44:3f:ce:26:35:2a:ee:f2:63:55:61:b1:59:c7:55:03:0e:54: 40:4d:99:84:bc:95:f0:f4:6a:f8:69:0b:89:36:6d:34:6b:0e: 15:10:ca:62:34:8a:30:58:f1:3c:37:bb:5e:7e:77:46:aa:fd: 60:6b:c5:77:54:33:cf:2e:d2:c4:6f:f2:ef:5e:8e:e8:fe:37: 56:62:e1:0d:0c:b2:27:60:07:ea:ba:7b:03:81:cb:08:86:56: 95:be:4d:8d:4d:6a:f7:bc:72:73:4b:fe:1d:78:32:6d:d2:99: e1:51:15:9f:64:e1:59:4c:f3:73:a8:14:c6:db:a6:4c:85:a3: e9:ea:d2:e6:c5:93:b0:4f:06:40:54:15:31:9b:d8:f3:b0:46: 30:a3:aa:1d:8e:4a:6f:b7:d9:58:9d:d7:75:c6:50:a0:c9:03: dc:bc:45:14 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8EtNuwqMBuHJ+7Ve2WwD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTY4YzFiOTBlNDVmOTFiYWI4ZDYwNzg4ZWVkMjVjYjRhMDEwZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuftnQ3NMYt3KK/yo/wN/YULY46o xnEsqkXjxDKlYHFUgc/EaUkzcICbPyaPsZVhtO0EQ2hC69eVPsxVKdSp6FmWMgkT 3q6eeCKi10Pa11ghbtob6hRbOFkejM0sp1rSRG6Yutv7l5zWY3R3SrB4cdD0yqkI pfcuHHjV9z1ZuoNSDGCli9XrHlrNfjjgzpM1VQsif9JfvTGAQ/vRppBMDDIvIT19 51tdT6WG8HNHYIdt5JuOqurvseH3wKcmGZ6umjcfkDxi9ePVnFZq36lkDawTrTeW cELciXraU4NV+senuEr5PR21Y7RzOEqh/M1EiBfX3n2DHKBTRfkrS73U1wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFG5owbkORfkbq41geI7tJctKAQ/oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2JiYWNh MS1mNTU3LTQxMDQtYjVmYS0xNzQwNjMwZmNjNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYmJhY2Ex LWY1NTctNDEwNC1iNWZhLTE3NDA2MzBmY2M0NS8xL2JtakJ1UTVGLVJ1cmpXQjRq dTBseTBvQkQtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJ2DANBgkqhkiG9w0BAQsFAAOCAQEAGppVKm8Y9QI7 AYxb+aQzE1HtWZ3goXidIQj4xqk79VGa+1Mzb7F5pM1cUDiWAxUQRBwrYglQdM4f Bbf4/i2rGFiAX2ZCvm2eMB6hehUz6y9Y+LeB+T5MVmcfRD/OJjUq7vJjVWGxWcdV Aw5UQE2ZhLyV8PRq+GkLiTZtNGsOFRDKYjSKMFjxPDe7Xn53Rqr9YGvFd1Qzzy7S xG/y716O6P43VmLhDQyyJ2AH6rp7A4HLCIZWlb5NjU1q97xyc0v+HXgybdKZ4VEV n2ThWUzzc6gUxtumTIWj6erS5sWTsE8GQFQVMZvY87BGMKOqHY5Kb7fZWJ3XdcZQ oMkD3LxFFA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:15 2026 by rpki-client