This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer File: bzxUCLL2cjP2DWP3SaxIPrZq58g.cer (raw, json) Hash identifier: 3C7XlyDA+n/YLcYMxXyrUBuFGSKtOQdgj8XwOYZWF90= Subject key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA72AE974919530B772585F76633B34 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198672 IP: 37.230.32.0/21 IP: 185.59.128.0/22 IP: 2a00:baa0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2a:e9:74:91:95:30:b7:72:58:5f:76:63:3b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:9b:4e:73:3b:d8:3b:71:89:01:eb:ef:06: 8f:01:1d:c9:35:c4:e3:ad:c4:16:d9:f7:e9:68:62: ad:a0:b3:56:d1:7a:63:1f:62:86:15:d8:fd:f8:ed: c1:5c:a0:97:1b:ee:35:9e:6a:07:91:48:2a:bb:22: 9d:b8:72:4e:6f:fc:5f:84:07:7c:9e:f9:27:75:b3: 8b:36:f6:b4:28:02:81:7f:d9:6d:40:a6:37:32:38: f2:b6:37:54:83:09:6d:b4:41:32:b5:6d:ac:dc:2e: 9e:a7:9b:b9:11:5f:4f:fe:3a:8a:2b:07:dc:60:1a: 58:90:44:4c:3b:18:9d:cf:59:1a:c7:a3:05:83:9e: 70:be:6a:ce:5c:9d:a2:ca:de:71:7b:e1:e8:e8:6b: f3:04:ef:5e:6a:72:6a:82:c5:d0:cd:33:e4:1a:1c: b3:4d:cf:0e:f0:77:ef:e8:24:f1:ec:b0:30:e9:3a: 7f:73:a4:d0:41:1b:97:7c:19:08:7f:53:ca:0d:7f: 61:c1:fc:1d:8c:e4:76:ef:b5:22:64:31:dc:fd:df: 83:9b:48:0a:9a:bd:01:24:c7:6d:50:84:27:f0:8b: 99:ac:01:86:ae:27:35:90:41:41:eb:52:b1:33:47: fc:34:45:6c:c2:76:a0:55:e3:9c:bc:cc:c5:93:67: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.32.0/21 185.59.128.0/22 IPv6: 2a00:baa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198672 Signature Algorithm: sha256WithRSAEncryption 35:cb:b5:50:c7:f7:da:76:b5:ea:ea:23:7d:99:11:62:d6:81: fc:99:cf:10:e3:e1:68:e6:d6:e3:66:fc:98:b8:24:c8:6f:ea: c6:0f:d4:f6:76:72:aa:cb:ea:9e:ed:c1:73:73:ab:93:b0:5f: 62:06:52:13:32:79:84:27:e0:57:d4:a6:5d:e0:d7:bd:0d:1e: 8a:59:4d:9d:b0:ee:9b:3d:7e:80:e5:eb:c3:f0:86:1d:2d:85: bf:92:25:44:d8:e8:f5:bf:bd:f3:ca:78:c1:71:37:49:f6:bb: 7d:15:9b:60:11:0f:b6:eb:60:5e:82:d1:f6:1c:31:3d:7f:6c: e8:d3:1b:46:4a:3c:d4:db:3d:ab:b5:cc:25:45:87:d9:65:da: a1:00:97:03:fe:6f:2a:c7:d4:d8:9e:65:9d:c7:cf:7c:b3:6a: 46:a4:c7:ee:3a:80:f6:9b:bb:14:cc:75:cd:fd:30:55:fd:32: f4:b0:bd:5e:a7:22:9a:c2:5f:9c:75:ac:61:01:3a:70:ec:bd: f7:61:54:51:fd:34:f1:57:8f:7b:22:90:00:13:ad:b7:64:69: 3d:2c:cc:57:73:7f:7b:d0:19:b1:46:5d:9c:8e:11:c9:7b:bc: b3:8d:ab:4f:d2:74:37:41:49:44:3a:19:d7:23:18:c7:ac:9e: 2c:e0:a7:3f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pyrpdJGVMLdyWF92Yzs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjNjNTQwOGIyZjY3MjMzZjYwZDYzZjc0OWFjNDgzZWI2NmFlN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YWbTnM72DtxiQHr7waPAR3JNcTj rcQW2ffpaGKtoLNW0XpjH2KGFdj9+O3BXKCXG+41nmoHkUgquyKduHJOb/xfhAd8 nvkndbOLNva0KAKBf9ltQKY3MjjytjdUgwlttEEytW2s3C6ep5u5EV9P/jqKKwfc YBpYkERMOxidz1kax6MFg55wvmrOXJ2iyt5xe+Ho6GvzBO9eanJqgsXQzTPkGhyz Tc8O8Hfv6CTx7LAw6Tp/c6TQQRuXfBkIf1PKDX9hwfwdjOR277UiZDHc/d+Dm0gK mr0BJMdtUIQn8IuZrAGGric1kEFB61KxM0f8NEVswnagVeOcvMzFk2eJswIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFG88VAiy9nIz9g1j90msSD62aufIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzk2NDg0 OC0xMDI4LTRkMjItOTM0NS0xOGYzNGE3ZGJkZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOTY0ODQ4 LTEwMjgtNGQyMi05MzQ1LTE4ZjM0YTdkYmRkOS8xL2J6eFVDTEwyY2pQMkRXUDNT YXhJUHJacTU4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJeYgAwQCuTuAMA0EAgACMAcDBQAqALqgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMIEDANBgkqhkiG9w0BAQsFAAOCAQEANcu1 UMf32na16uojfZkRYtaB/JnPEOPhaObW42b8mLgkyG/qxg/U9nZyqsvqnu3Bc3Or k7BfYgZSEzJ5hCfgV9SmXeDXvQ0eillNnbDumz1+gOXrw/CGHS2Fv5IlRNjo9b+9 88p4wXE3Sfa7fRWbYBEPtutgXoLR9hwxPX9s6NMbRko81Ns9q7XMJUWH2WXaoQCX A/5vKsfU2J5lncfPfLNqRqTH7jqA9pu7FMx1zf0wVf0y9LC9XqcimsJfnHWsYQE6 cOy992FUUf008VePeyKQABOtt2RpPSzMV3N/e9AZsUZdnI4RyXu8s42rT9J0N0FJ RDoZ1yMYx6yeLOCnPw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:06 2026 by rpki-client