This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer File: BSQGb4Zs826cup6b5vkCZNo3Lz4.cer (raw, json) Hash identifier: mGt0GuPetqZiUht0yuL7fL7t/m1iW/Fe41CfHy3AyVo= Subject key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A9C185912B636D81EE92044EF3C30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.87.64.0/22 IP: 2a0d:9d80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9c:18:59:12:b6:36:d8:1e:e9:20:44:ef:3c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0524066f866cf36e9cba9e9be6f90264da372f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:33:64:74:ca:34:7f:d6:c9:49:06:54:ad: 1f:8f:36:4a:57:55:6f:38:58:a9:b8:94:21:30:2a: f0:9e:27:1c:f6:82:fa:20:65:e6:34:68:2a:6f:9e: 5e:0c:71:ef:b1:4d:5c:91:e5:9e:0e:30:00:a8:6e: 42:e5:8f:4e:78:88:b1:ea:0d:21:42:da:30:e1:e8: 96:49:25:e4:cc:80:66:71:fa:7d:b3:3a:62:f7:86: 23:00:17:24:08:57:22:15:48:c3:15:e7:a5:36:d0: 19:85:86:41:33:9a:f4:d4:e1:99:33:6f:56:ca:cc: bd:0c:2b:0c:35:bb:c4:ae:c8:14:c8:c4:88:77:3f: 54:4a:de:37:90:09:ed:41:ca:71:7d:3f:39:5b:0a: 14:cc:cc:18:32:92:70:49:59:34:0d:17:96:50:99: bd:76:c3:2e:32:97:8f:27:24:b9:29:20:ab:35:35: c5:3a:d4:7a:26:fe:8a:58:a1:b4:b9:ca:63:21:d4: 2f:7a:b2:65:a1:b0:6c:8c:37:6c:68:2b:7e:d8:0c: d0:09:19:b8:4c:6c:a6:3b:07:e5:2c:b9:b0:ae:21: 0b:a9:44:2a:70:5e:09:c7:5c:2e:c2:d3:d3:cc:c0: 64:9d:0f:0e:e1:ec:80:86:52:bf:5e:e5:2f:1e:75: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.64.0/22 IPv6: 2a0d:9d80::/32 Signature Algorithm: sha256WithRSAEncryption 4f:5a:a0:8e:eb:c7:b4:9d:34:ca:dc:dd:60:1c:88:0a:ec:40: 5c:48:cc:a4:63:ce:0b:bd:26:24:04:c7:7e:88:ef:eb:6c:7c: bf:3a:57:24:d4:2e:04:fe:4c:e7:dc:03:3d:a3:ab:71:f4:fe: 8c:2c:02:4e:43:30:88:5f:42:b1:d9:6b:a5:19:e3:e4:42:ec: f0:5c:a9:35:fd:68:8e:d7:6c:81:bd:b9:35:e5:ab:c1:40:1c: b5:e3:a4:a2:14:53:1c:92:23:c9:b8:f4:d9:90:28:cb:3a:5f: 9f:f5:02:fe:9e:18:7b:80:2d:c7:ac:28:41:06:ef:dd:32:fc: a7:0b:e1:2a:b9:04:43:4a:e7:b7:08:41:7d:1d:3d:5d:29:ac: a8:e1:28:46:fa:93:32:47:70:2b:ae:15:43:20:35:17:b9:ad: cb:47:5a:b6:ed:a7:67:1a:03:cb:a8:5c:7d:b6:cf:b5:1a:9f: 33:04:0a:5c:f9:25:2a:08:3a:15:99:08:ca:3d:d5:fd:87:c7: 5d:9b:3f:ff:54:d4:eb:31:a7:22:c3:8e:a3:e2:3e:ca:7e:28: 1a:68:22:c0:0a:a6:f4:ca:44:50:1e:74:6b:bc:f6:8e:54:1e: db:b7:1c:58:c6:b0:0f:52:21:4f:f6:d5:ab:11:98:9b:7e:00: 10:d6:4e:52 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WpwYWRK2Ntge6SBE7zwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTI0MDY2Zjg2NmNmMzZlOWNiYTllOWJlNmY5MDI2NGRhMzcyZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pMzZHTKNH/WyUkGVK0fjzZKV1Vv OFipuJQhMCrwnicc9oL6IGXmNGgqb55eDHHvsU1ckeWeDjAAqG5C5Y9OeIix6g0h Qtow4eiWSSXkzIBmcfp9szpi94YjABckCFciFUjDFeelNtAZhYZBM5r01OGZM29W ysy9DCsMNbvErsgUyMSIdz9USt43kAntQcpxfT85WwoUzMwYMpJwSVk0DReWUJm9 dsMuMpePJyS5KSCrNTXFOtR6Jv6KWKG0ucpjIdQverJlobBsjDdsaCt+2AzQCRm4 TGymOwflLLmwriELqUQqcF4Jx1wuwtPTzMBknQ8O4eyAhlK/XuUvHnVbdwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAUkBm+GbPNunLqem+b5AmTaNy8+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzIxNzQ1 MS1lMWZiLTRjYzYtODE2NS04MDRjNDY3OTA5M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvMjE3NDUx LWUxZmItNGNjNi04MTY1LTgwNGM0Njc5MDkzZi8xL0JTUUdiNFpzODI2Y3VwNmI1 dmtDWk5vM0x6NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVdAMA0EAgACMAcDBQAqDZ2AMA0GCSqGSIb3 DQEBCwUAA4IBAQBPWqCO68e0nTTK3N1gHIgK7EBcSMykY84LvSYkBMd+iO/rbHy/ Olck1C4E/kzn3AM9o6tx9P6MLAJOQzCIX0Kx2WulGePkQuzwXKk1/WiO12yBvbk1 5avBQBy146SiFFMckiPJuPTZkCjLOl+f9QL+nhh7gC3HrChBBu/dMvynC+EquQRD Sue3CEF9HT1dKayo4ShG+pMyR3ArrhVDIDUXua3LR1q27adnGgPLqFx9ts+1Gp8z BApc+SUqCDoVmQjKPdX9h8ddmz//VNTrMaciw46j4j7KfigaaCLACqb0ykRQHnRr vPaOVB7btxxYxrAPUiFP9tWrEZibfgAQ1k5S -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:43 2026 by rpki-client