This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer File: BDaS8qHRvHb_f50pCRvtoIt7yWw.cer (raw, json) Hash identifier: OVEALBl6B47iNFM5R8+9bZ2Jaktm4xh5fBzP3G/j7B4= Subject key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C127431EB8A32AC3298DBC109B7C3F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.234.104.0/22 IP: 2a0d:1300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:74:31:eb:8a:32:ac:32:98:db:c1:09:b7:c3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:a5:9c:d1:6d:a5:77:c2:42:95:a5:23:8e: 77:65:fb:ca:60:b1:aa:fd:32:2d:cf:0a:43:63:c7: b0:36:7d:98:e5:0e:a9:21:c7:4d:1e:e5:d4:47:5c: 89:46:76:51:5b:8d:7c:2d:dd:ea:80:8f:39:0b:73: 2a:26:60:df:f4:a8:6a:37:02:44:65:8d:64:69:46: 66:9a:ac:cd:f2:36:5d:6e:ea:15:95:c0:6e:c4:62: 7b:a5:29:e4:4f:1f:f9:3e:e9:c1:33:30:07:77:0e: f3:31:b4:d8:b7:d0:5f:41:61:73:36:2b:be:48:a1: 9c:98:49:4c:6f:62:ec:e4:6c:68:25:00:f4:de:2a: cb:1f:f7:ca:8b:97:a7:cd:99:fd:c6:05:f4:22:1f: 03:b8:0f:80:5f:1f:7b:01:14:00:8d:cd:89:7e:26: fe:43:08:2c:24:7e:27:e4:8a:91:b3:2f:00:e3:1f: c6:01:6c:63:d8:20:48:68:28:07:29:a9:4b:97:b7: b9:f0:21:9c:ac:22:d3:7a:88:87:fc:0f:b6:4c:bd: ac:36:84:57:dd:7b:eb:4e:cd:04:4f:b8:36:96:9b: f7:1a:30:4e:d1:ca:ef:7f:b3:57:52:f0:2a:e3:47: c9:97:01:83:9b:cd:72:d2:dc:7c:c1:b7:4a:0e:e5: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.104.0/22 IPv6: 2a0d:1300::/29 Signature Algorithm: sha256WithRSAEncryption ab:90:6c:da:aa:c5:0f:ec:6f:84:91:9c:18:7c:2c:24:c2:60: 4c:aa:10:f5:c5:76:89:76:59:5b:8a:2b:80:bd:da:90:7e:16: c7:24:8d:9a:32:7a:ce:df:e9:be:f2:eb:09:2e:29:92:3e:6a: c9:69:72:93:a7:e6:6d:bf:e0:d9:ba:b8:32:24:c0:f1:fa:06: 62:ac:ae:f4:97:de:8c:f7:c3:e0:14:f8:64:79:86:13:a7:d2: a5:b2:17:dd:5f:c8:75:8d:c9:1d:99:46:d8:a3:31:a9:e2:77: 4e:37:fc:54:d8:9a:56:ee:5d:f3:d6:9e:d3:c7:89:1a:51:fb: 1d:e4:d8:58:70:72:40:ac:37:c3:7b:91:31:ca:ae:46:e7:06: 9b:b4:bd:8b:90:05:d9:21:e3:00:74:44:64:43:48:cd:ad:8f: db:44:8f:e2:f9:b2:ed:d9:e0:f5:b0:a8:30:b1:92:43:2d:69: 80:85:41:fc:65:f2:59:d6:cd:c9:91:fc:e4:83:92:5d:3d:57: bc:8f:c4:86:b8:c4:45:e2:df:d0:2d:e4:c8:f0:a9:7f:06:d5: d0:f0:fb:ae:0d:05:42:10:0f:77:92:c6:0c:c3:38:08:da:94: 80:35:02:71:b5:52:32:42:39:86:52:aa:4f:b0:ce:96:0f:3d: 11:fa:52:c9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8EnQx64oyrDKY28EJt8PzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDM2OTJmMmExZDFiYzc2ZmY3ZjlkMjkwOTFiZWRhMDhiN2JjOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbOlnNFtpXfCQpWlI453ZfvKYLGq /TItzwpDY8ewNn2Y5Q6pIcdNHuXUR1yJRnZRW418Ld3qgI85C3MqJmDf9KhqNwJE ZY1kaUZmmqzN8jZdbuoVlcBuxGJ7pSnkTx/5PunBMzAHdw7zMbTYt9BfQWFzNiu+ SKGcmElMb2Ls5GxoJQD03irLH/fKi5enzZn9xgX0Ih8DuA+AXx97ARQAjc2Jfib+ QwgsJH4n5IqRsy8A4x/GAWxj2CBIaCgHKalLl7e58CGcrCLTeoiH/A+2TL2sNoRX 3XvrTs0ET7g2lpv3GjBO0crvf7NXUvAq40fJlwGDm81y0tx8wbdKDuUkjQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAQ2kvKh0bx2/3+dKQkb7aCLe8lsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyL2M2ZTIx Ny0wM2ZmLTQzOTYtYWRmZS0yNTVmMGM1MWJiZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvYzZlMjE3 LTAzZmYtNDM5Ni1hZGZlLTI1NWYwYzUxYmJlMC8xL0JEYVM4cUhSdkhiX2Y1MHBD UnZ0b0l0N3lXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuepoMA0EAgACMAcDBQMqDRMAMA0GCSqGSIb3 DQEBCwUAA4IBAQCrkGzaqsUP7G+EkZwYfCwkwmBMqhD1xXaJdllbiiuAvdqQfhbH JI2aMnrO3+m+8usJLimSPmrJaXKTp+Ztv+DZurgyJMDx+gZirK70l96M98PgFPhk eYYTp9KlshfdX8h1jckdmUbYozGp4ndON/xU2JpW7l3z1p7Tx4kaUfsd5NhYcHJA rDfDe5Exyq5G5wabtL2LkAXZIeMAdERkQ0jNrY/bRI/i+bLt2eD1sKgwsZJDLWmA hUH8ZfJZ1s3Jkfzkg5JdPVe8j8SGuMRF4t/QLeTI8Kl/BtXQ8PuuDQVCEA93ksYM wzgI2pSANQJxtVIyQjmGUqpPsM6WDz0R+lLJ -----END CERTIFICATE-----Generated at Mon Jan 26 05:11:20 2026 by rpki-client