This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer File: BZdoATY9N1eGFS5NBh51yL6zUFg.cer (raw, json) Hash identifier: nGNC21roGi+VhV+ugNyaQnq6rMZQcAw6+KrZZAWTwOE= Subject key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3915A9A9AECDE2DBAE295E35DFDF25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34641 AS: 34872 AS: 208210 AS: 209643 IP: 45.13.116.0/22 IP: 45.154.96.0/22 IP: 62.3.50.0/24 IP: 185.1.138.0/24 IP: 194.28.96.0/22 IP: 2a0c:b640::/29 IP: 2a0d:ef00::/29 IP: 2a0f:8400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:15:a9:a9:ae:cd:e2:db:ae:29:5e:35:df:df:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05976801363d375786152e4d061e75c8beb35058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:73:20:31:d0:fe:15:2c:9a:d7:ce:7b:3b: 32:ec:f8:bd:3f:a2:c9:fd:9e:c0:3b:21:e5:d9:7b: 7f:0b:a0:1b:0e:66:8c:06:28:dd:16:ad:fa:2d:e6: de:05:54:99:af:dc:dc:24:c7:00:4e:a0:d4:74:83: 9b:34:7a:84:88:bb:2f:f2:95:0a:ef:b9:f7:90:84: 0d:15:1f:10:94:0b:09:6f:46:25:bf:a2:ce:59:2a: 94:b6:af:9d:fb:6b:6c:83:5a:d0:0a:f6:43:e9:88: 4f:2e:3e:3f:a5:3b:08:15:45:42:df:de:a4:bc:0c: c9:62:ff:12:91:39:05:10:19:db:3d:35:88:e5:b5: 83:18:6c:1e:32:a5:a5:d0:69:69:3b:9e:1f:65:1e: 3f:4a:6a:bc:00:5a:82:6f:17:4b:58:6b:ae:99:b9: 3f:4b:59:7b:a1:f4:64:7c:ea:50:f8:be:50:94:c3: b7:1a:b1:88:9b:2d:2a:a5:d9:de:2d:7f:e2:f7:76: 23:bc:3d:5b:64:12:57:20:68:73:be:d6:2a:cf:94: 4d:f4:d2:e0:33:34:9c:75:be:ab:44:86:39:7a:2c: 45:2e:d4:f9:1c:5c:9f:48:a6:a0:ee:10:ef:ef:b0: 1b:05:3c:6d:ec:ef:e7:97:2f:03:b9:76:2b:34:2a: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.116.0/22 45.154.96.0/22 62.3.50.0/24 185.1.138.0/24 194.28.96.0/22 IPv6: 2a0c:b640::/29 2a0d:ef00::/29 2a0f:8400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34641 34872 208210 209643 Signature Algorithm: sha256WithRSAEncryption 71:a7:62:3e:40:55:60:db:4a:29:2b:9e:d8:b3:34:3d:aa:83: 67:25:a7:d4:e6:de:1f:5d:9d:43:90:c0:ed:03:5b:1e:08:c2: c4:8d:31:82:6d:2c:aa:d5:24:bb:2e:e2:4c:9c:5d:0d:b3:96: b2:97:b9:a0:a0:48:4b:c7:f6:c6:9a:b1:a7:d9:0f:3e:b1:35: 42:f8:d7:43:e8:62:28:24:8b:9e:3e:22:c7:b5:2d:98:98:f6: 25:5e:49:33:32:ae:8e:d6:a3:06:66:0d:e9:30:2d:ed:dc:df: ca:e0:19:2b:d8:61:bb:52:a3:53:a7:04:3a:00:f9:4a:4f:c2: 83:0f:8d:bf:4a:04:3a:f0:a9:ed:f7:38:98:90:fe:43:60:83: 2d:a9:a3:f0:18:b8:a1:e4:1b:20:f8:12:e4:bf:7a:ab:92:e6: 96:e1:2e:75:f2:4f:ce:61:54:4b:94:11:6d:cc:3e:8c:70:29: 12:36:c7:f6:49:03:c7:cb:10:a6:a3:4b:9b:07:2f:24:b9:21: b8:09:a7:6d:cd:7a:be:c3:be:bf:ad:52:81:4e:e5:ee:a9:b5: 6d:c8:f7:c4:3d:7c:0b:38:db:d0:e0:ad:a3:a1:04:c5:fa:75: 34:94:e6:56:a1:f2:9d:66:a1:e8:36:69:c7:cc:ff:c6:af:5e: 81:4f:9c:61 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt+ORWpqa7N4tuuKV41398lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTk3NjgwMTM2M2QzNzU3ODYxNTJlNGQwNjFlNzVjOGJlYjM1MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRVzIDHQ/hUsmtfOezsy7Pi9P6LJ /Z7AOyHl2Xt/C6AbDmaMBijdFq36LebeBVSZr9zcJMcATqDUdIObNHqEiLsv8pUK 77n3kIQNFR8QlAsJb0Ylv6LOWSqUtq+d+2tsg1rQCvZD6YhPLj4/pTsIFUVC396k vAzJYv8SkTkFEBnbPTWI5bWDGGweMqWl0GlpO54fZR4/Smq8AFqCbxdLWGuumbk/ S1l7ofRkfOpQ+L5QlMO3GrGImy0qpdneLX/i93YjvD1bZBJXIGhzvtYqz5RN9NLg MzScdb6rRIY5eixFLtT5HFyfSKag7hDv77AbBTxt7O/nly8DuXYrNCpR7QIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFAWXaAE2PTdXhhUuTQYedci+s1BYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzJiYWFk Yy0yYjdhLTRlYzAtOTVjYS01ZWM4YzhlZDYwZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvMmJhYWRj LTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8xL0JaZG9BVFk5TjFlR0ZTNU5C aDUxeUw2elVGZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAkBAIAATAeAwQCLQ10AwQCLZpgAwQAPgMyAwQAuQGKAwQCwhxg MBsEAgACMBUDBQMqDLZAAwUDKg3vAAMFAyoPhAAwKQYIKwYBBQUHAQgBAf8EGjAY oBYwFAIDAIdRAgMAiDgCAwMtUgIDAzLrMA0GCSqGSIb3DQEBCwUAA4IBAQBxp2I+ QFVg20opK57YszQ9qoNnJafU5t4fXZ1DkMDtA1seCMLEjTGCbSyq1SS7LuJMnF0N s5ayl7mgoEhLx/bGmrGn2Q8+sTVC+NdD6GIoJIuePiLHtS2YmPYlXkkzMq6O1qMG Zg3pMC3t3N/K4Bkr2GG7UqNTpwQ6APlKT8KDD42/SgQ68Knt9ziYkP5DYIMtqaPw GLih5Bsg+BLkv3qrkuaW4S518k/OYVRLlBFtzD6McCkSNsf2SQPHyxCmo0ubBy8k uSG4CadtzXq+w76/rVKBTuXuqbVtyPfEPXwLONvQ4K2joQTF+nU0lOZWofKdZqHo NmnHzP/Gr16BT5xh -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:51 2026 by rpki-client