This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer File: BVYYphlfHsrLCFztOwoaF8YqLPo.cer (raw, json) Hash identifier: 88kRBC30pwje4g28WtzcWud44iYErtRiyCItKV2o+Bc= Subject key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B7F576C8FA3EAE994EB1C3F26C581 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201602 IP: 31.187.104.0/21 IP: 134.19.168.0/21 IP: 185.66.24.0/22 IP: 185.203.104.0/22 IP: 188.241.140.0/23 IP: 2a02:e380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7f:57:6c:8f:a3:ea:e9:94:eb:1c:3f:26:c5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:d0:0a:cb:29:33:89:34:77:be:4b:58:f2: f5:f1:1e:ca:9f:77:ce:87:ae:95:ba:ac:8a:2a:70: b5:7e:a8:00:53:0e:94:88:bf:5e:cf:18:d2:ff:28: 1b:5a:27:4d:c2:9b:f7:58:fc:9e:e7:44:b7:da:6e: 37:75:47:c7:72:0c:f2:4b:7a:3d:c8:e8:dc:09:86: 35:11:b1:14:ce:03:2e:1f:2d:64:d1:e0:d7:c5:6a: c0:75:21:c9:bf:7f:66:50:1a:a3:37:05:c7:73:47: 3a:ec:ee:2e:b6:71:1c:37:ee:76:03:fa:7d:6e:70: c5:2d:8e:de:7f:59:82:d8:c1:4e:fc:85:e7:b3:e4: ea:71:84:83:a1:d4:dc:c2:e3:24:a6:d7:ac:20:76: cb:30:8e:37:1c:5f:0e:2b:dd:a0:d1:a1:a6:89:2a: 07:f6:30:c5:66:79:ff:b1:06:af:a8:ca:02:c0:02: 1d:78:38:19:26:a4:e9:2a:d5:fc:86:9d:00:60:64: 5d:51:fa:36:a7:40:25:bf:2d:72:83:ac:b5:64:ed: 27:b6:f9:ac:57:58:b5:f5:fa:e3:47:8e:55:37:8b: 9a:d6:cf:10:b7:e0:69:1f:8a:21:02:2b:7e:3d:bd: f5:8e:65:04:c2:66:94:fe:20:d4:22:7c:91:17:a4: 27:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.104.0/21 134.19.168.0/21 185.66.24.0/22 185.203.104.0/22 188.241.140.0/23 IPv6: 2a02:e380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201602 Signature Algorithm: sha256WithRSAEncryption 60:a4:d3:b6:75:e1:a9:ad:57:76:4a:bb:03:4c:19:f9:11:25: 07:d8:5d:76:ea:a4:3d:99:55:82:df:15:a6:c8:bd:9e:3e:c5: 4b:4c:96:14:07:0a:fa:0d:8d:5e:8b:85:47:69:60:ca:3e:44: 5e:9b:96:40:d8:9a:1f:2b:bc:37:ff:98:d7:3f:5c:a9:c2:ab: 7d:db:91:1f:cc:dc:28:92:28:71:d8:6f:b4:e6:08:8c:0f:49: 7f:60:d1:c8:5a:cf:c1:24:25:f0:0d:f9:8a:dd:19:90:69:42: 69:4e:09:00:de:08:ea:af:2d:ae:e4:d1:77:8a:c7:31:ae:e9: 8f:f6:c4:26:96:d7:0a:21:7d:b7:95:89:3a:e2:3d:cf:8a:61: fe:f2:d1:fa:0e:05:4a:28:b6:3c:83:be:bb:bc:96:ee:56:ee: f1:5e:57:b3:e4:9c:d2:7a:e5:ca:32:59:e2:03:a7:33:a3:a0: 4c:11:0c:1f:31:fc:80:ee:b1:99:33:86:53:9b:fc:da:74:2a: 28:e7:52:aa:8a:81:2e:69:ee:16:39:58:04:6c:92:ee:2f:bd: c8:6a:8b:c3:e6:65:cd:71:1a:03:c6:98:91:c5:f5:b3:63:22: 2a:d7:64:d3:f5:8d:1d:69:1c:b5:7f:d8:a4:19:ca:d9:0e:96: f0:73:3a:b9 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt6W39XbI+j6umU6xw/JsWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTU2MThhNjE5NWYxZWNhY2IwODVjZWQzYjBhMWExN2M2MmEyY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH7QCsspM4k0d75LWPL18R7Kn3fO h66VuqyKKnC1fqgAUw6UiL9ezxjS/ygbWidNwpv3WPye50S32m43dUfHcgzyS3o9 yOjcCYY1EbEUzgMuHy1k0eDXxWrAdSHJv39mUBqjNwXHc0c67O4utnEcN+52A/p9 bnDFLY7ef1mC2MFO/IXns+TqcYSDodTcwuMkptesIHbLMI43HF8OK92g0aGmiSoH 9jDFZnn/sQavqMoCwAIdeDgZJqTpKtX8hp0AYGRdUfo2p0Alvy1yg6y1ZO0ntvms V1i19frjR45VN4ua1s8Qt+BpH4ohAit+Pb31jmUEwmaU/iDUInyRF6QnwwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFAVWGKYZXx7Kywhc7TsKGhfGKiz6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2VhZTMz My0zMGM0LTQzZmYtYjIzZC01YWU1YmNhNmY0OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZWFlMzMz LTMwYzQtNDNmZi1iMjNkLTVhZTViY2E2ZjQ4Yy8xL0JWWVlwaGxmSHNyTENGenRP d29hRjhZcUxQby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDH7toAwQDhhOoAwQCuUIYAwQCuctoAwQBvPGM MA0EAgACMAcDBQMqAuOAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMTgjANBgkq hkiG9w0BAQsFAAOCAQEAYKTTtnXhqa1Xdkq7A0wZ+RElB9hdduqkPZlVgt8Vpsi9 nj7FS0yWFAcK+g2NXouFR2lgyj5EXpuWQNiaHyu8N/+Y1z9cqcKrfduRH8zcKJIo cdhvtOYIjA9Jf2DRyFrPwSQl8A35it0ZkGlCaU4JAN4I6q8truTRd4rHMa7pj/bE JpbXCiF9t5WJOuI9z4ph/vLR+g4FSii2PIO+u7yW7lbu8V5Xs+Sc0nrlyjJZ4gOn M6OgTBEMHzH8gO6xmTOGU5v82nQqKOdSqoqBLmnuFjlYBGyS7i+9yGqLw+ZlzXEa A8aYkcX1s2MiKtdk0/WNHWkctX/YpBnK2Q6W8HM6uQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:25 2026 by rpki-client