This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer File: BeuMu6ryWnG_L8q24RBX6_kfAeM.cer (raw, json) Hash identifier: XIxJCa2tUuyuK/bCO978ZQWT9PBqnLovtMaGGUtjRc4= Subject key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A31754997C10D3CEB76CF3EAF9634C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9201 IP: 193.241.0.0/16 IP: 2001:67c:2c70::/48 IP: 2001:67c:2c74::/48 IP: 2001:67c:2c78::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:17:54:99:7c:10:d3:ce:b7:6c:f3:ea:f9:63:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:3a:bd:eb:bf:a9:6b:a9:21:82:5b:96:26: 25:06:f2:b0:40:ee:87:82:ce:97:fd:1b:81:7e:bb: 7e:3b:4f:46:d7:74:09:52:38:0f:e0:b6:17:65:26: 4c:d4:2e:0d:10:ad:76:0f:e3:95:96:c0:b9:95:2c: e6:df:8e:62:1c:7b:ae:be:73:f5:3e:a6:4b:81:bc: bc:96:a6:d5:d6:63:e0:76:4b:a3:50:37:db:f4:0a: ff:45:58:cb:2f:3b:7f:00:4f:fa:3b:18:32:43:c8: bf:c6:ec:80:42:f3:a2:e1:34:98:7c:7b:ca:11:81: 55:b7:7f:b1:e4:d3:a6:1a:d5:fc:39:5d:b6:f4:98: 56:29:32:c9:2d:62:32:88:56:56:91:47:2a:4a:9f: b4:27:c1:42:fc:02:b8:34:4c:76:17:dd:7f:0d:fe: aa:be:59:60:fd:0a:57:f2:b5:00:1c:ad:72:a6:1f: 97:2a:d9:01:fd:1f:ba:54:e8:e0:d7:9e:9b:67:ed: 18:5e:74:0a:0a:43:42:31:35:c1:69:ce:68:b1:5e: 36:7a:eb:bc:51:54:3d:3a:74:1d:a5:01:50:44:0a: c1:88:42:f2:ed:34:cb:6e:6a:5d:e7:57:a9:8f:c7: 22:ad:64:a5:3d:9e:60:6c:c1:63:9c:07:80:20:89: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.241.0.0/16 IPv6: 2001:67c:2c70::/48 2001:67c:2c74::/48 2001:67c:2c78::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9201 Signature Algorithm: sha256WithRSAEncryption a1:11:ed:47:55:0a:84:db:74:46:42:e9:ea:ec:50:63:cf:48: 18:c1:f5:64:db:b7:59:ce:d3:38:9b:51:8c:8e:74:b5:33:99: 4c:60:bc:e2:24:2b:10:fa:6c:74:8c:d3:0f:e1:9c:0d:4f:5c: 8a:af:7d:fe:ed:8e:dc:9d:f9:da:36:66:47:a0:31:e7:87:de: b5:49:54:99:2e:68:92:a3:71:c0:86:63:9d:47:61:9b:33:ce: 60:e2:11:a2:b8:09:25:32:0e:9f:81:c4:40:5e:0b:a6:23:50: b7:a0:f6:fd:fa:b6:4b:a7:e1:e0:8a:6e:5e:cf:25:0e:5b:c1: e3:30:fd:9e:e2:1a:51:06:c1:57:1b:0b:06:7f:3b:80:cc:52: 66:d7:f7:ac:03:87:3f:e5:07:5e:a6:0e:aa:a4:27:d4:b5:9a: bc:41:64:ac:03:82:6e:05:ac:9b:57:08:c2:dc:1b:2a:31:4c: 4e:ec:f1:7f:4b:af:7e:86:8a:69:89:0b:9f:d2:41:ae:58:2a: f7:4f:c8:41:9d:b7:a1:23:a7:47:71:ff:e6:70:d1:e2:20:88: ef:0b:8e:15:cf:70:0d:c0:36:43:40:fd:da:dd:33:ae:09:00: 1a:63:e1:43:d7:90:c3:90:b3:e0:34:a6:5d:2d:25:ef:de:94: 6f:6b:a7:21 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt4oxdUmXwQ0863bPPq+WNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWViOGNiYmFhZjI1YTcxYmYyZmNhYjZlMTEwNTdlYmY5MWYwMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Y6veu/qWupIYJbliYlBvKwQO6H gs6X/RuBfrt+O09G13QJUjgP4LYXZSZM1C4NEK12D+OVlsC5lSzm345iHHuuvnP1 PqZLgby8lqbV1mPgdkujUDfb9Ar/RVjLLzt/AE/6OxgyQ8i/xuyAQvOi4TSYfHvK EYFVt3+x5NOmGtX8OV229JhWKTLJLWIyiFZWkUcqSp+0J8FC/AK4NEx2F91/Df6q vllg/QpX8rUAHK1yph+XKtkB/R+6VOjg156bZ+0YXnQKCkNCMTXBac5osV42euu8 UVQ9OnQdpQFQRArBiELy7TTLbmpd51epj8cirWSlPZ5gbMFjnAeAIIlChQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFAXrjLuq8lpxvy/KtuEQV+v5HwHjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2RjYzg2 YS01ZjUxLTRkMTItOTYzZC1mMjdjNjI4YjgzNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvZGNjODZh LTVmNTEtNGQxMi05NjNkLWYyN2M2MjhiODM1My8xL0JldU11NnJ5V25HX0w4cTI0 UkJYNl9rZkFlTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDALBAIAATAFAwMAwfEwIQQCAAIwGwMHACABBnwscAMHACABBnws dAMHACABBnwseDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIj8TANBgkqhkiG9w0B AQsFAAOCAQEAoRHtR1UKhNt0RkLp6uxQY89IGMH1ZNu3Wc7TOJtRjI50tTOZTGC8 4iQrEPpsdIzTD+GcDU9ciq99/u2O3J352jZmR6Ax54fetUlUmS5okqNxwIZjnUdh mzPOYOIRorgJJTIOn4HEQF4LpiNQt6D2/fq2S6fh4IpuXs8lDlvB4zD9nuIaUQbB VxsLBn87gMxSZtf3rAOHP+UHXqYOqqQn1LWavEFkrAOCbgWsm1cIwtwbKjFMTuzx f0uvfoaKaYkLn9JBrlgq90/IQZ23oSOnR3H/5nDR4iCI7wuOFc9wDcA2Q0D92t0z rgkAGmPhQ9eQw5Cz4DSmXS0l796Ub2unIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:45:01 2026 by rpki-client