This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer File: BkizODOZAP9_O1myRtJNJofGNnw.cer (raw, json) Hash identifier: 0Dq31RYCFO65Brm5RXqbC5bPIZuKaGxwHVKtc7t7gDE= Subject key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834CD903D73707743E05149AA332496 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6870 AS: 12722 AS: 51226 AS: 51916 AS: 206407 AS: 212095 AS: 212667 IP: 46.22.48.0/20 IP: 46.149.99.0/24 IP: 91.105.232.0/21 IP: 91.218.8.0/22 IP: 91.224.126.0/23 IP: 185.1.165.0/24 IP: 185.124.208.0/22 IP: 188.64.168.0/21 IP: 195.209.32.0/19 IP: 2001:67c:2824::/48 IP: 2001:7f8:f1::/48 IP: 2a00:1f70::/32 IP: 2a05:4800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cd:90:3d:73:70:77:43:e0:51:49:aa:33:24:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0648b338339900ff7f3b59b246d24d2687c6367c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:9c:93:79:86:c6:4c:2f:6a:47:10:4b:c3: 07:ad:77:1f:05:f9:06:4f:10:98:8c:ba:66:6f:9a: f1:8b:6c:1c:a4:ed:53:0e:ec:15:b8:b7:1c:ba:fd: 02:23:69:05:77:b6:0d:4d:6b:25:58:5b:f0:76:d3: 83:b7:3e:8c:98:db:2a:13:fe:d4:b2:f6:9a:02:54: 15:8b:aa:10:52:e7:9b:69:ea:80:69:4e:0b:d7:98: d2:65:5b:16:3f:5e:c0:b4:5e:68:5e:81:69:ab:f9: cb:60:6e:4e:bf:5e:6f:7c:d1:5c:99:3c:a2:95:83: cc:76:51:b2:0b:0d:cb:56:d5:ae:b9:77:b9:56:43: b1:f3:0a:ae:93:0b:02:41:38:e5:d4:fb:db:32:81: df:f5:e2:ed:db:e2:11:4b:93:ae:bc:78:25:96:02: d8:95:0a:f3:d2:69:31:ae:f3:d5:8b:3a:31:62:a9: 17:ca:53:de:e8:08:ca:e7:86:ff:bf:72:ad:9f:52: 66:18:e5:5f:fa:35:50:f8:2b:75:97:95:0a:4a:21: 19:3b:56:3a:cb:0c:42:b9:92:3d:92:ca:cf:43:7b: d0:02:66:46:49:91:8b:ae:ca:63:13:c6:5f:87:05: 21:fa:17:f8:33:be:f0:42:64:48:6a:12:ca:0b:36: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.48.0/20 46.149.99.0/24 91.105.232.0/21 91.218.8.0/22 91.224.126.0/23 185.1.165.0/24 185.124.208.0/22 188.64.168.0/21 195.209.32.0/19 IPv6: 2001:67c:2824::/48 2001:7f8:f1::/48 2a00:1f70::/32 2a05:4800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6870 12722 51226 51916 206407 212095 212667 Signature Algorithm: sha256WithRSAEncryption 6e:f8:31:a6:39:90:db:a7:9c:85:d6:6e:b0:89:4e:46:ee:bd: 63:56:e1:e3:72:99:04:64:a2:6c:90:02:72:13:65:95:84:c3: bc:6a:bb:80:58:1b:81:65:37:78:50:de:c6:75:9c:48:b0:e2: 88:f5:13:8c:21:fd:94:4a:15:73:17:b6:eb:0b:50:1c:08:e6: 1d:58:cc:93:98:2d:d2:b3:9a:a5:69:ab:e6:1f:22:aa:8d:57: e6:79:94:11:89:92:43:10:3e:f8:27:c8:7c:10:c8:83:d5:90: b3:88:39:91:4c:b6:05:ae:84:a1:30:e4:77:3b:4a:aa:62:44: ad:60:d4:e4:c3:50:ea:67:f0:8c:a9:df:38:8a:70:8d:8f:16: 38:1e:dc:3e:3c:ad:83:25:54:78:1a:92:1c:eb:11:19:b5:54: 7a:5e:cd:e0:d9:99:5b:fe:b5:a7:05:e3:9a:2e:99:48:89:32: d8:b7:da:61:d0:3c:90:2d:ba:19:8f:ff:5f:22:c9:1f:0c:67: b0:7b:0b:6d:ac:b0:66:d5:8f:8e:a9:b1:dd:ea:ea:c0:30:65: 10:ad:67:ca:e9:51:96:b7:60:ac:f1:3c:9e:49:61:65:5a:ad: 85:43:96:f9:54:ad:06:8a:af:6b:1b:3a:12:be:ec:cd:aa:1d: 78:fa:1e:b7 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgISAZt4NM2QPXNwd0PgUUmqMySWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjQ4YjMzODMzOTkwMGZmN2YzYjU5YjI0NmQyNGQyNjg3YzYzNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJCck3mGxkwvakcQS8MHrXcfBfkG TxCYjLpmb5rxi2wcpO1TDuwVuLccuv0CI2kFd7YNTWslWFvwdtODtz6MmNsqE/7U svaaAlQVi6oQUuebaeqAaU4L15jSZVsWP17AtF5oXoFpq/nLYG5Ov15vfNFcmTyi lYPMdlGyCw3LVtWuuXe5VkOx8wqukwsCQTjl1PvbMoHf9eLt2+IRS5OuvHgllgLY lQrz0mkxrvPVizoxYqkXylPe6AjK54b/v3Ktn1JmGOVf+jVQ+Ct1l5UKSiEZO1Y6 ywxCuZI9ksrPQ3vQAmZGSZGLrspjE8ZfhwUh+hf4M77wQmRIahLKCzYyMQIDAQAB o4IDFDCCAxAwHQYDVR0OBBYEFAZIszgzmQD/fztZskbSTSaHxjZ8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzMzYTAz Ny0wNjc1LTQ4ZjgtOTI1ZC0wZDkxOGVlZGMyNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMzNhMDM3 LTA2NzUtNDhmOC05MjVkLTBkOTE4ZWVkYzI2Zi8xL0JraXpPRE9aQVA5X08xbXlS dEpOSm9mR05udy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHcGCCsGAQUF BwEHAQH/BGgwZjA8BAIAATA2AwQELhYwAwQALpVjAwQDW2noAwQCW9oIAwQBW+B+ AwQAuQGlAwQCuXzQAwQDvECoAwQFw9EgMCYEAgACMCADBwAgAQZ8KCQDBwAgAQf4 APEDBQAqAB9wAwUDKgVIADA2BggrBgEFBQcBCAEB/wQnMCWgIzAhAgIa1gICMbIC AwDIGgIDAMrMAgMDJkcCAwM8fwIDAz67MA0GCSqGSIb3DQEBCwUAA4IBAQBu+DGm OZDbp5yF1m6wiU5G7r1jVuHjcpkEZKJskAJyE2WVhMO8aruAWBuBZTd4UN7GdZxI sOKI9ROMIf2UShVzF7brC1AcCOYdWMyTmC3Ss5qlaavmHyKqjVfmeZQRiZJDED74 J8h8EMiD1ZCziDmRTLYFroShMOR3O0qqYkStYNTkw1DqZ/CMqd84inCNjxY4Htw+ PK2DJVR4GpIc6xEZtVR6Xs3g2Zlb/rWnBeOaLplIiTLYt9ph0DyQLboZj/9fIskf DGewewttrLBm1Y+OqbHd6urAMGUQrWfK6VGWt2Cs8TyeSWFlWq2FQ5b5VK0Giq9r GzoSvuzNqh14+h63 -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:00 2026 by rpki-client