This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer File: BVFgW2dezk4PznF1rjGpP6gnK6Y.cer (raw, json) Hash identifier: DkSYUR0+swqPGNuy+LdOky89Ke6iHqoyqL5TEzk32Gk= Subject key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1595E3AEAC8893490EF00531B3DEF1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42303 IP: 5.35.184.0/21 IP: 45.84.240.0/22 IP: 46.182.200.0/21 IP: 62.56.208.0/21 IP: 77.72.96.0/21 IP: 85.208.44.0/22 IP: 94.127.32.0/21 IP: 151.236.200.0/21 IP: 185.55.8.0/22 IP: 185.104.12.0/22 IP: 185.153.212.0/22 IP: 185.226.56.0/22 IP: 193.149.178.0/23 IP: 194.179.136.0/22 IP: 213.170.145.0/24 IP: 2a02:470::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:95:e3:ae:ac:88:93:49:0e:f0:05:31:b3:de:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:21:71:15:33:06:70:eb:f3:3c:e4:23:e4: d0:4f:ba:f2:d1:a1:a0:d9:c8:00:94:6a:f9:93:bb: 85:64:c0:c1:df:33:5d:3a:ec:46:4a:c2:84:3e:c0: 85:ed:7e:98:5b:96:52:a1:fe:ba:62:a7:b4:ba:eb: e3:7a:ba:eb:9a:31:dc:e5:5c:b3:23:62:c4:86:3b: a3:82:3c:96:17:0e:26:ae:13:62:70:49:ae:67:ac: 17:86:7f:5a:d4:cc:5b:80:8e:ba:7a:23:f4:0a:a2: c6:e0:da:31:65:18:ae:38:02:84:ad:f6:61:37:e0: c8:f8:76:66:1d:d3:fe:ec:e9:3c:8c:82:11:8f:99: 24:4d:d4:1d:45:66:8d:9d:39:15:60:a4:9b:91:bb: f5:d8:42:8a:c3:1b:b5:4b:c1:7d:66:89:33:d4:c7: 7d:9c:c9:bf:b8:cb:87:6b:3d:a8:ab:e1:ea:7d:a8: 91:0e:75:26:0d:61:e1:2c:b5:7a:9f:76:cd:38:9a: a0:b8:7f:c4:66:bf:65:f0:9f:a5:20:3a:d8:12:e1: 57:5c:a9:ac:bb:31:8a:81:4d:86:a1:9a:37:b8:2f: 42:65:a2:2a:15:17:c8:2a:2c:12:9b:8c:80:a0:65: 4a:3d:e2:e8:0f:3a:65:3a:43:58:ad:a4:f7:19:83: 14:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.184.0/21 45.84.240.0/22 46.182.200.0/21 62.56.208.0/21 77.72.96.0/21 85.208.44.0/22 94.127.32.0/21 151.236.200.0/21 185.55.8.0/22 185.104.12.0/22 185.153.212.0/22 185.226.56.0/22 193.149.178.0/23 194.179.136.0/22 213.170.145.0/24 IPv6: 2a02:470::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42303 Signature Algorithm: sha256WithRSAEncryption 44:e0:09:9b:63:24:05:71:ed:b7:26:3f:a7:d8:aa:95:57:84: 19:a2:db:46:47:90:06:9e:f7:e7:3a:09:03:40:e4:d8:8c:4a: 69:ba:a8:f3:db:59:5d:7b:bb:f9:94:38:5d:68:e2:a1:ba:5e: 79:7f:9f:06:91:22:9f:23:71:a8:7b:cf:d8:4a:3e:38:56:6e: dd:02:95:0a:bc:e6:c0:9e:4a:25:a9:21:cc:63:f9:86:fb:42: 2e:6e:a0:f1:c9:ba:d6:77:90:d3:98:4c:eb:e1:3c:fe:d9:d4: e8:8c:5c:3a:d0:68:59:d9:a6:72:eb:a1:63:e2:d5:4e:a7:3e: 85:25:56:92:b8:71:b4:ae:37:93:e4:68:11:fe:79:2b:d6:ce: 5a:77:eb:43:20:18:d1:cf:57:02:c7:59:cd:ca:f5:f1:89:e6: 00:30:1b:15:b3:d2:53:5b:a9:0f:6b:e2:5a:4f:ed:9b:2a:ea: c2:11:d1:70:70:d6:a4:45:4a:91:0d:31:24:cd:f7:f3:a5:f8: 0d:4e:0f:63:bc:39:d7:a3:9d:3b:21:d5:b4:22:36:5b:4c:37: 42:ba:fb:61:b2:7d:c6:bf:6d:5f:d9:c9:56:6a:a2:db:ad:bd: 0f:cd:5d:b7:b3:65:32:90:b1:ca:cd:fb:e2:fd:46:c3:07:ce: 1c:5c:fb:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt/FZXjrqyIk0kO8AUxs97xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTUxNjA1YjY3NWVjZTRlMGZjZTcxNzVhZTMxYTkzZmE4MjcyYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlYhcRUzBnDr8zzkI+TQT7ry0aGg 2cgAlGr5k7uFZMDB3zNdOuxGSsKEPsCF7X6YW5ZSof66Yqe0uuvjerrrmjHc5Vyz I2LEhjujgjyWFw4mrhNicEmuZ6wXhn9a1MxbgI66eiP0CqLG4NoxZRiuOAKErfZh N+DI+HZmHdP+7Ok8jIIRj5kkTdQdRWaNnTkVYKSbkbv12EKKwxu1S8F9Zokz1Md9 nMm/uMuHaz2oq+HqfaiRDnUmDWHhLLV6n3bNOJqguH/EZr9l8J+lIDrYEuFXXKms uzGKgU2GoZo3uC9CZaIqFRfIKiwSm4yAoGVKPeLoDzplOkNYraT3GYMUEwIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFAVRYFtnXs5OD85xda4xqT+oJyumMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzI4ZWE0 NS03ZDMwLTQ2ZGYtOGYyYS0wNzc5ZjQ4ZWNlYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMjhlYTQ1 LTdkMzAtNDZkZi04ZjJhLTA3NzlmNDhlY2VhMC8xL0JWRmdXMmRlems0UHpuRjFy akdwUDZnbks2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwYAQCAAEwWgMEAwUjuAMEAi1U8AMEAy62yAMEAz440AMEA01I YAMEAlXQLAMEA15/IAMEA5fsyAMEArk3CAMEArloDAMEArmZ1AMEArniOAMEAcGV sgMEAsKziAMEANWqkTANBAIAAjAHAwUDKgIEcDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMApT8wDQYJKoZIhvcNAQELBQADggEBAETgCZtjJAVx7bcmP6fYqpVXhBmi 20ZHkAae9+c6CQNA5NiMSmm6qPPbWV17u/mUOF1o4qG6Xnl/nwaRIp8jcah7z9hK PjhWbt0ClQq85sCeSiWpIcxj+Yb7Qi5uoPHJutZ3kNOYTOvhPP7Z1OiMXDrQaFnZ pnLroWPi1U6nPoUlVpK4cbSuN5PkaBH+eSvWzlp360MgGNHPVwLHWc3K9fGJ5gAw GxWz0lNbqQ9r4lpP7Zsq6sIR0XBw1qRFSpENMSTN9/Ol+A1OD2O8OdejnTsh1bQi NltMN0K6+2Gyfca/bV/ZyVZqotutvQ/NXbezZTKQscrN++L9RsMHzhxc+4s= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:03 2026 by rpki-client