This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer File: BgecQppxRvH5qgSb20LKlRRLdNo.cer (raw, json) Hash identifier: gt1SC9ypaiYo2lenb1Xf703/l94IqW4j1K1Z8DfjJkk= Subject key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA53AE16CA41280C5A87E95172C4224 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13020 IP: 94.45.224.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3a:e1:6c:a4:12:80:c5:a8:7e:95:17:2c:42:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06079c429a7146f1f9aa049bdb42ca95144b74da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:d8:d9:31:f4:4a:dc:70:85:63:fd:54:c5: f6:67:88:39:96:3f:51:6c:ed:ca:76:50:2c:f2:b6: 8c:ef:9e:51:81:f6:19:28:17:1e:f7:c7:45:ae:c8: 34:f1:28:2b:be:b6:88:ad:7a:4c:8f:20:e9:7f:28: fc:ed:7c:03:17:80:b6:3f:2d:73:f7:64:41:6e:bb: 50:ce:5f:02:00:8c:44:42:f5:e8:3d:7f:18:ba:22: e3:74:da:b5:6a:ed:36:37:33:60:fb:7c:eb:0c:a2: 5c:7a:a0:9b:9f:5d:e2:04:82:be:3d:47:51:79:88: a2:61:1f:c9:6f:f7:13:03:29:5d:ac:2d:27:e1:87: b6:1f:53:3d:56:94:67:76:7b:3f:9e:b3:b3:05:41: 47:cd:f4:56:f0:75:f8:c3:d1:36:c8:b3:fd:b2:79: 1b:bb:85:e6:79:d0:48:45:63:13:98:e0:dd:0b:03: dc:d3:da:a0:de:06:57:a3:cc:53:ef:bc:fd:d8:b8: 8a:a6:73:9e:78:a8:2a:b6:b1:5c:b9:41:e0:da:72: 98:ef:bc:1a:72:43:fb:64:d4:0c:0c:39:25:1d:1b: 16:ab:db:f3:7e:ee:44:51:1c:53:6b:e9:13:0c:02: 08:4d:25:14:cb:52:ec:b9:c4:b5:d5:17:7a:e9:9a: d3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.45.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13020 Signature Algorithm: sha256WithRSAEncryption 7d:ae:ac:0e:34:d0:30:82:2a:80:82:2e:80:8b:82:05:ba:5b: 29:30:3d:d9:96:4d:f7:ae:c4:04:69:88:c1:e9:fe:b0:7d:67: 08:dc:b3:07:2e:ce:06:29:b3:d4:c6:81:8d:23:da:2f:4a:06: 30:58:f3:ce:8d:50:54:ee:5a:b8:63:11:b9:26:d3:af:bf:0c: cb:c2:b5:3d:3e:af:0c:c0:3c:6c:34:f4:11:f8:da:8e:c7:10: 51:42:1e:75:68:3c:fc:2f:7d:84:8a:ea:36:ba:3a:b6:9f:2e: 7b:00:81:77:42:88:a2:8c:a1:b5:5b:db:8f:e1:6a:89:b2:0f: e7:ec:ee:d4:ae:0c:8f:a1:2d:e0:63:28:18:8b:2d:17:51:a2: 60:ed:a7:29:e8:79:4d:97:48:eb:c4:59:c7:3d:86:37:c9:c2: e6:7e:bd:e0:e4:f1:da:6d:f2:55:2a:dc:a5:43:ba:f0:c5:ef: ba:50:f4:75:c8:17:d6:e0:e8:e5:6f:b1:07:61:83:57:38:71: 5a:67:fc:93:41:e7:22:06:a4:07:be:79:d5:0e:7c:90:1f:b3: d7:27:00:be:d1:42:f5:3f:de:78:35:c4:bf:32:35:92:c8:50: a0:16:80:7c:1d:66:34:d3:94:61:6a:c4:1d:6b:81:58:d6:a5: cf:f7:9b:be -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7pTrhbKQSgMWofpUXLEIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjA3OWM0MjlhNzE0NmYxZjlhYTA0OWJkYjQyY2E5NTE0NGI3NGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHrY2TH0StxwhWP9VMX2Z4g5lj9R bO3KdlAs8raM755RgfYZKBce98dFrsg08SgrvraIrXpMjyDpfyj87XwDF4C2Py1z 92RBbrtQzl8CAIxEQvXoPX8YuiLjdNq1au02NzNg+3zrDKJceqCbn13iBIK+PUdR eYiiYR/Jb/cTAyldrC0n4Ye2H1M9VpRndns/nrOzBUFHzfRW8HX4w9E2yLP9snkb u4XmedBIRWMTmODdCwPc09qg3gZXo8xT77z92LiKpnOeeKgqtrFcuUHg2nKY77wa ckP7ZNQMDDklHRsWq9vzfu5EURxTa+kTDAIITSUUy1LsucS11Rd66ZrTpQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFAYHnEKacUbx+aoEm9tCypUUS3TaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzc0MDU4 OS04NWNkLTQ5N2EtOTBjMS1hMmY5YThhNTFiYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvNzQwNTg5 LTg1Y2QtNDk3YS05MGMxLWEyZjlhOGE1MWJiMC8xL0JnZWNRcHB4UnZINXFnU2Iy MExLbFJSTGROby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFXi3gMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjLcMA0GCSqGSIb3DQEBCwUAA4IBAQB9rqwONNAwgiqAgi6Ai4IFulspMD3Zlk33 rsQEaYjB6f6wfWcI3LMHLs4GKbPUxoGNI9ovSgYwWPPOjVBU7lq4YxG5JtOvvwzL wrU9Pq8MwDxsNPQR+NqOxxBRQh51aDz8L32Eiuo2ujq2ny57AIF3QoiijKG1W9uP 4WqJsg/n7O7UrgyPoS3gYygYiy0XUaJg7acp6HlNl0jrxFnHPYY3ycLmfr3g5PHa bfJVKtylQ7rwxe+6UPR1yBfW4Ojlb7EHYYNXOHFaZ/yTQeciBqQHvnnVDnyQH7PX JwC+0UL1P954NcS/MjWSyFCgFoB8HWY005RhasQda4FY1qXP95u+ -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:38 2026 by rpki-client