This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer (raw, json) Hash identifier: KTwvD+hB4ff1M4Mp8ooLpA2g98LDRf3YEdDrygkeKCs= Subject key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79106175CC3A085DF667980F9FB91919 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8257 AS: 8290 AS: 8778 AS: 12426 AS: 31679 AS: 43451 AS: 52139 IP: 31.24.176.0/21 IP: 78.41.168.0/21 IP: 81.92.248.0/21 IP: 84.16.32.0/19 IP: 85.135.128.0/17 IP: 91.222.104.0/22 IP: 93.174.176.0/21 IP: 176.61.192.0/18 IP: 178.253.128.0/18 IP: 185.22.212.0/22 IP: 185.28.144.0/22 IP: 185.37.240.0/22 IP: 185.69.48.0/22 IP: 185.77.144.0/22 IP: 185.134.212.0/22 IP: 185.165.36.0/22 IP: 185.213.144.0/22 IP: 185.234.248.0/22 IP: 188.112.64.0/18 IP: 188.121.160.0/19 IP: 193.93.72.0 -- 193.93.74.255 IP: 195.28.64.0/19 IP: 195.28.128.0/19 IP: 195.80.160.0/19 IP: 212.55.224.0/19 IP: 217.145.192.0/20 IP: 2a00:9060::/32 IP: 2a02:dd8::/29 IP: 2a03:a200::/32 IP: 2a06:f000::/29 IP: 2a0b:8940::/29 IP: 2a0b:f100::/29 IP: 2a0d:3700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:61:75:cc:3a:08:5d:f6:67:98:0f:9f:b9:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:08:62:29:91:95:22:61:5e:eb:2d:28:46: 35:9c:74:15:fd:b7:ae:6f:01:d6:21:b3:fa:b7:0c: e7:90:aa:d4:2d:81:b2:f0:f9:33:19:92:d4:f9:d6: 81:41:cc:c9:c9:8e:46:cd:3c:34:af:3f:2e:cb:fb: 8c:64:2b:10:3f:e1:11:0c:8e:eb:b2:81:91:e9:5f: 84:3d:c3:0b:22:f3:87:1f:25:72:e3:2b:61:b7:74: be:da:f5:d8:ca:82:8f:5a:15:04:51:d9:15:6b:99: 3a:f6:8b:c1:2a:1c:bd:ab:e9:83:9a:9a:58:bb:f8: 7c:d3:da:be:13:34:eb:76:c5:c9:74:b3:15:7a:f3: 06:55:1e:5a:88:26:f3:32:9e:d4:b1:a8:78:72:c6: f5:4d:74:a2:bb:4c:69:20:8d:53:4b:ea:f5:37:8e: 8e:fe:e3:d0:3f:6b:8f:d4:8a:37:75:ca:f7:3e:45: 7e:34:5c:68:04:5c:ca:8f:15:7a:5e:ea:b9:25:21: 81:eb:d2:eb:6a:fb:eb:a6:0b:c3:84:55:0a:65:5e: f4:ca:e1:06:ed:3e:86:44:eb:1d:92:e3:52:94:23: fb:6b:09:4e:1a:ef:65:8f:48:5c:87:c9:93:db:39: d5:d6:bc:88:9c:be:37:89:aa:8d:ee:89:2c:08:05: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.176.0/21 78.41.168.0/21 81.92.248.0/21 84.16.32.0/19 85.135.128.0/17 91.222.104.0/22 93.174.176.0/21 176.61.192.0/18 178.253.128.0/18 185.22.212.0/22 185.28.144.0/22 185.37.240.0/22 185.69.48.0/22 185.77.144.0/22 185.134.212.0/22 185.165.36.0/22 185.213.144.0/22 185.234.248.0/22 188.112.64.0/18 188.121.160.0/19 193.93.72.0-193.93.74.255 195.28.64.0/19 195.28.128.0/19 195.80.160.0/19 212.55.224.0/19 217.145.192.0/20 IPv6: 2a00:9060::/32 2a02:dd8::/29 2a03:a200::/32 2a06:f000::/29 2a0b:8940::/29 2a0b:f100::/29 2a0d:3700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8257 8290 8778 12426 31679 43451 52139 Signature Algorithm: sha256WithRSAEncryption 97:13:6a:19:93:c4:44:12:a4:eb:82:64:80:1b:01:91:62:b2: cf:ec:c6:19:54:01:fe:53:25:70:29:75:c5:6d:a4:18:30:cc: 73:05:bc:9e:79:56:23:ff:57:39:18:cf:91:f6:82:13:5f:48: e2:72:ea:ee:7b:58:73:ba:31:1e:77:43:b8:2f:9d:5b:b8:ae: c9:55:8c:2b:b1:56:ef:3f:e4:f8:67:c6:96:ba:8b:47:30:b2: 6c:fb:77:d0:67:3e:21:9e:2c:34:1f:04:66:68:fc:22:e0:12: aa:9d:63:fe:65:3e:2f:ab:58:d2:42:78:b4:23:af:94:71:af: ff:c2:5f:0b:ba:a1:39:97:e9:01:0e:f5:98:d8:43:8b:fd:96: 12:01:0b:a3:d0:c5:97:86:ba:87:14:a9:60:5c:a0:4c:9a:5f: 61:ac:56:ac:01:a7:ae:6a:ba:71:de:4c:be:99:dd:e7:b5:d6: 83:75:55:c3:de:23:1b:b2:2b:3b:b8:38:7f:55:4d:c3:91:56: 4f:3b:a6:35:fd:52:6e:f1:18:b2:8a:a7:24:6c:30:db:da:88: b9:d5:e0:64:1f:2f:a1:aa:74:f9:41:29:1b:d4:47:96:cd:9f: fc:fd:f2:36:36:81:e7:c7:c0:4d:7a:63:d7:5e:3a:b8:b1:c0: 3a:e9:45:43 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgISAZt5EGF1zDoIXfZnmA+fuRkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGEyYWUyY2QwOTQzMzMwMThjNDFkYWFmYjQ3NGM2Y2ZhODBkMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzUIYimRlSJhXustKEY1nHQV/beu bwHWIbP6twznkKrULYGy8PkzGZLU+daBQczJyY5GzTw0rz8uy/uMZCsQP+ERDI7r soGR6V+EPcMLIvOHHyVy4ytht3S+2vXYyoKPWhUEUdkVa5k69ovBKhy9q+mDmppY u/h809q+EzTrdsXJdLMVevMGVR5aiCbzMp7Usah4csb1TXSiu0xpII1TS+r1N46O /uPQP2uP1Io3dcr3PkV+NFxoBFzKjxV6Xuq5JSGB69LravvrpgvDhFUKZV70yuEG 7T6GROsdkuNSlCP7awlOGu9lj0hch8mT2znV1ryInL43iaqN7oksCAUnAQIDAQAB o4IDlTCCA5EwHQYDVR0OBBYEFASirizQlDMwGMQdqvtHTGz6gNB9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzYzNGEx Mi1lNThjLTQ1NWMtODkzMy02ZTZlOGQ5MzAzZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNjM0YTEy LWU1OGMtNDU1Yy04OTMzLTZlNmU4ZDkzMDNlOS8xL0JLS3VMTkNVTXpBWXhCMnEt MGRNYlBxQTBIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIH6BggrBgEF BQcBBwEB/wSB6jCB5zCBqwQCAAEwgaQDBAMfGLADBANOKagDBANRXPgDBAVUECAD BAdVh4ADBAJb3mgDBANdrrADBAawPcADBAay/YADBAK5FtQDBAK5HJADBAK5JfAD BAK5RTADBAK5TZADBAK5htQDBAK5pSQDBAK51ZADBAK56vgDBAa8cEADBAW8eaAw DAMEA8FdSAMEAMFdSgMEBcMcQAMEBcMcgAMEBcNQoAMEBdQ34AMEBNmRwDA3BAIA AjAxAwUAKgCQYAMFAyoCDdgDBQAqA6IAAwUDKgbwAAMFAyoLiUADBQMqC/EAAwUD Kg03ADAzBggrBgEFBQcBCAEB/wQkMCKgIDAeAgIgQQICIGICAiJKAgIwigICe78C AwCpuwIDAMurMA0GCSqGSIb3DQEBCwUAA4IBAQCXE2oZk8REEqTrgmSAGwGRYrLP 7MYZVAH+UyVwKXXFbaQYMMxzBbyeeVYj/1c5GM+R9oITX0jicurue1hzujEed0O4 L51buK7JVYwrsVbvP+T4Z8aWuotHMLJs+3fQZz4hniw0HwRmaPwi4BKqnWP+ZT4v q1jSQni0I6+Uca//wl8LuqE5l+kBDvWY2EOL/ZYSAQuj0MWXhrqHFKlgXKBMml9h rFasAaeuarpx3ky+md3ntdaDdVXD3iMbsis7uDh/VU3DkVZPO6Y1/VJu8Riyiqck bDDb2oi51eBkHy+hqnT5QSkb1EeWzZ/8/fI2NoHnx8BNemPXXjq4scA66UVD -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:31 2026 by rpki-client