This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer File: BYmfOXZIcDij-mNDlSsUtNBysz0.cer (raw, json) Hash identifier: PIgqjsrjir2yyHSsCgXGZXQVY3y32qG0cM52kddn2Ig= Subject key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15E583D8F810A38B0275E891E22D1C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44090 IP: 109.70.237.0/24 IP: 185.179.168.0/22 IP: 2a04:1400::/29 IP: 2a0a:74c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e5:83:d8:f8:10:a3:8b:02:75:e8:91:e2:2d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05899f3976487038a3fa6343952b14b4d072b33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:d1:ef:26:e6:c5:31:eb:09:7f:03:61:7b: 5b:46:d2:d8:72:7c:ea:99:d8:c3:dd:6d:a8:9b:a4: 40:6b:c7:0a:a4:ad:8e:7d:75:de:f7:b9:49:c4:65: 27:7c:7b:e9:88:cb:07:95:6a:78:66:9c:e3:5d:ee: aa:e5:6d:de:7f:12:6d:79:00:44:e3:84:66:f3:9a: f2:86:48:ca:f1:a2:1b:18:1d:4d:3b:a1:b2:3f:e9: 54:f9:51:7c:7d:79:57:8d:31:48:c3:a7:69:c1:21: e9:4d:b1:44:20:8b:0e:5b:ac:0c:b9:2e:d5:f3:97: f4:2e:d2:13:ad:cb:cd:2a:33:11:41:15:9b:99:b8: ae:96:ef:67:56:10:29:49:14:5b:ec:22:45:c1:c9: 52:14:57:a3:fe:b1:74:9b:56:e4:60:d0:45:72:fd: fc:af:64:5b:03:3d:36:11:10:55:74:5a:71:d9:ea: 63:fa:2b:c0:7a:69:61:85:b0:22:91:57:cd:65:90: e6:46:ed:63:f7:49:be:c3:ea:8b:90:d7:4b:3f:40: f6:d9:3f:ed:82:03:92:36:f1:77:7a:a2:28:b9:29: 14:c4:21:ab:dd:03:ba:21:c7:0f:d4:a3:67:8c:9c: 4c:85:c3:78:1d:b2:ac:28:28:dd:98:ef:00:f5:b8: 74:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.70.237.0/24 185.179.168.0/22 IPv6: 2a04:1400::/29 2a0a:74c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44090 Signature Algorithm: sha256WithRSAEncryption 93:09:dc:07:6c:2e:08:55:7a:6c:a3:b3:66:78:b7:25:70:a5: d6:71:b2:c3:e9:36:2e:f2:85:b1:4f:b7:3b:8e:f4:6e:22:09: f2:56:f7:d9:89:66:71:db:96:99:c7:d7:9a:79:25:5e:89:86: fe:ad:bc:b8:cb:e2:7d:d2:f0:75:a9:52:fc:03:c8:eb:50:c1: d7:8f:f8:fd:1f:da:64:23:94:0a:f9:d7:3b:d8:fc:86:25:25: 42:0d:04:2e:f1:ab:59:5a:02:33:da:c2:19:6f:19:e5:ad:bd: ad:51:cc:2c:57:f4:9f:e5:cc:ee:e9:33:28:65:24:19:63:7b: 32:a6:d5:46:75:31:38:ac:40:9d:a1:1b:d5:f5:61:07:5c:96: 49:a9:29:ce:8f:4c:63:d5:bd:9d:6a:0e:63:81:44:b2:da:97: d8:51:01:29:f4:af:ed:a7:49:27:35:e7:96:c9:e4:92:8c:19: 60:37:00:d0:23:2f:63:66:81:85:d9:01:8d:fc:5f:1e:23:bd: 35:e1:f3:f6:d4:25:84:1a:07:ac:31:b3:28:de:9c:82:a6:7c: 0d:c6:cd:10:0a:2e:b2:58:10:fa:39:82:2c:30:02:3e:59:d5: b0:06:ce:97:c8:a4:45:52:0b:f0:6f:26:10:12:d2:31:ad:67: 06:94:20:e3 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt/FeWD2PgQo4sCdeiR4i0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTg5OWYzOTc2NDg3MDM4YTNmYTYzNDM5NTJiMTRiNGQwNzJiMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEPR7ybmxTHrCX8DYXtbRtLYcnzq mdjD3W2om6RAa8cKpK2OfXXe97lJxGUnfHvpiMsHlWp4ZpzjXe6q5W3efxJteQBE 44Rm85ryhkjK8aIbGB1NO6GyP+lU+VF8fXlXjTFIw6dpwSHpTbFEIIsOW6wMuS7V 85f0LtITrcvNKjMRQRWbmbiulu9nVhApSRRb7CJFwclSFFej/rF0m1bkYNBFcv38 r2RbAz02ERBVdFpx2epj+ivAemlhhbAikVfNZZDmRu1j90m+w+qLkNdLP0D22T/t ggOSNvF3eqIouSkUxCGr3QO6IccP1KNnjJxMhcN4HbKsKCjdmO8A9bh0xwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFAWJnzl2SHA4o/pjQ5UrFLTQcrM9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzFmY2U5 My0wMmVhLTRmOTktOTljMi0wOGMyMTIzNTgwZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvMWZjZTkz LTAyZWEtNGY5OS05OWMyLTA4YzIxMjM1ODBlZC8xL0JZbWZPWFpJY0Rpai1tTkRs U3NVdE5CeXN6MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQAbUbtAwQCubOoMBQEAgACMA4DBQMqBBQAAwUA Kgp0wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMArDowDQYJKoZIhvcNAQELBQAD ggEBAJMJ3AdsLghVemyjs2Z4tyVwpdZxssPpNi7yhbFPtzuO9G4iCfJW99mJZnHb lpnH15p5JV6Jhv6tvLjL4n3S8HWpUvwDyOtQwdeP+P0f2mQjlAr51zvY/IYlJUIN BC7xq1laAjPawhlvGeWtva1RzCxX9J/lzO7pMyhlJBljezKm1UZ1MTisQJ2hG9X1 YQdclkmpKc6PTGPVvZ1qDmOBRLLal9hRASn0r+2nSSc155bJ5JKMGWA3ANAjL2Nm gYXZAY38Xx4jvTXh8/bUJYQaB6wxsyjenIKmfA3GzRAKLrJYEPo5giwwAj5Z1bAG zpfIpEVSC/BvJhAS0jGtZwaUIOM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:04 2026 by rpki-client