This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer File: BEiJahxKydgBvx1rIL3vWXTVtPY.cer (raw, json) Hash identifier: BgOdWbvtERbFaMo0XiLViL64F7ESpTNbZbIicTXfTs8= Subject key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C123380F2626167278E1EEEED8FB6FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.145.37.0/24 IP: 78.138.61.0/24 IP: 2a13:5340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:33:80:f2:62:61:67:27:8e:1e:ee:ed:8f:b6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:24:30:c3:b9:9c:0a:d7:01:56:09:72:86: 37:5a:f2:2e:a8:d6:b9:19:07:2b:09:87:1f:8c:8d: 1f:16:95:09:86:67:2f:d9:cc:cc:df:6b:cd:84:93: 6f:0b:ea:fa:b8:95:bb:47:69:37:9f:3b:91:84:42: a7:cd:a1:fc:80:af:29:69:10:59:ea:34:08:8b:be: 52:4b:94:cd:b4:cf:ef:67:60:c4:98:3c:da:fe:57: 08:38:40:bf:ae:29:ac:a0:b3:58:36:0a:e0:45:6a: 12:c8:7b:e2:ff:d3:9f:ac:69:cb:ef:4c:12:cc:3f: 18:cb:26:7c:15:15:ff:d6:f9:b9:2e:a9:69:9d:9e: 5a:23:0f:cb:e2:26:9d:d2:c7:05:8b:59:21:8d:89: 2b:9a:89:9d:d1:1e:c1:8f:11:00:06:a3:8f:da:f0: 84:83:22:f8:a7:cf:a0:2f:6b:2e:27:4a:1e:62:11: 2e:32:c0:92:37:20:6e:2e:73:d2:0a:68:fc:17:69: 26:9c:03:2b:44:1e:a0:d8:03:3a:b6:ea:03:61:3d: 78:bc:33:b7:bf:a3:eb:8c:c1:69:b3:a1:61:aa:14: 9d:24:59:ee:70:d0:e4:89:98:29:bc:a5:f8:59:d9: f4:27:b1:ff:17:e4:74:75:6c:b8:b2:85:92:9a:f3: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.37.0/24 78.138.61.0/24 IPv6: 2a13:5340::/29 Signature Algorithm: sha256WithRSAEncryption 74:d4:4f:db:5e:fe:71:3a:23:59:d9:c2:48:24:09:ea:7b:b8: 21:e2:6e:fd:a7:a4:13:ef:3d:2e:ee:b5:d8:72:56:b3:a9:fd: 98:4e:1b:31:42:e0:d6:c7:62:d9:51:07:1e:b4:66:75:e8:3d: e0:37:2b:8b:8b:9e:52:45:cc:2f:54:20:34:e9:36:27:4d:af: 02:24:bc:0f:76:56:05:a3:d6:12:55:dc:24:c9:25:96:65:eb: 6c:4e:ca:0b:e2:39:a7:71:cd:cb:88:7a:49:d9:13:bd:d7:20: ac:03:c3:b0:d6:d2:ee:b4:34:b5:97:43:98:db:c1:07:9f:32: 74:cb:20:6a:06:66:4d:57:84:d1:c7:5b:7d:11:49:a7:c7:2d: 14:a3:9a:a9:35:34:80:50:05:c2:bb:29:f0:f9:d0:d9:86:34: dd:6f:43:92:68:02:c6:50:0e:c0:8f:99:78:16:45:0e:ca:87: 51:a0:ba:1b:c3:c0:1a:03:e4:17:e6:3b:56:d8:8d:39:0c:71: 6c:96:c0:90:db:fa:62:ed:ee:6d:8b:3c:3a:bd:cf:38:4d:06: 63:82:59:51:30:66:54:18:52:49:8e:fb:b1:ef:2d:32:bb:b7: e8:b9:50:2d:e8:68:a6:39:91:47:d4:52:94:de:e7:1e:ce:26: 9a:47:87:0e -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8EjOA8mJhZyeOHu7tj7b8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDQ4ODk2YTFjNGFjOWQ4MDFiZjFkNmIyMGJkZWY1OTc0ZDViNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZokMMO5nArXAVYJcoY3WvIuqNa5 GQcrCYcfjI0fFpUJhmcv2czM32vNhJNvC+r6uJW7R2k3nzuRhEKnzaH8gK8paRBZ 6jQIi75SS5TNtM/vZ2DEmDza/lcIOEC/rimsoLNYNgrgRWoSyHvi/9OfrGnL70wS zD8YyyZ8FRX/1vm5LqlpnZ5aIw/L4iad0scFi1khjYkrmomd0R7BjxEABqOP2vCE gyL4p8+gL2suJ0oeYhEuMsCSNyBuLnPSCmj8F2kmnAMrRB6g2AM6tuoDYT14vDO3 v6PrjMFps6FhqhSdJFnucNDkiZgpvKX4Wdn0J7H/F+R0dWy4soWSmvM3XQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFARIiWocSsnYAb8dayC971l01bT2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2Q0NDI2 Yi1hZDI1LTQ0ZjEtOThhZi1iY2RkMTM0OTUyOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDQ0MjZi LWFkMjUtNDRmMS05OGFmLWJjZGQxMzQ5NTI5MS8xL0JFaUphaHhLeWRnQnZ4MXJJ TDN2V1hUVnRQWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQALZElAwQAToo9MA0EAgACMAcDBQMqE1NAMA0G CSqGSIb3DQEBCwUAA4IBAQB01E/bXv5xOiNZ2cJIJAnqe7gh4m79p6QT7z0u7rXY clazqf2YThsxQuDWx2LZUQcetGZ16D3gNyuLi55SRcwvVCA06TYnTa8CJLwPdlYF o9YSVdwkySWWZetsTsoL4jmncc3LiHpJ2RO91yCsA8Ow1tLutDS1l0OY28EHnzJ0 yyBqBmZNV4TRx1t9EUmnxy0Uo5qpNTSAUAXCuynw+dDZhjTdb0OSaALGUA7Aj5l4 FkUOyodRoLobw8AaA+QX5jtW2I05DHFslsCQ2/pi7e5tizw6vc84TQZjgllRMGZU GFJJjvux7y0yu7fouVAt6GimOZFH1FKU3uceziaaR4cO -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:40 2026 by rpki-client