This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer File: BqTXfcLhnm-WAydMCSOmGordtJY.cer (raw, json) Hash identifier: hKPr9Z1jdkexRjISefwFDdPewtnDUbBLO48VKm2WvK4= Subject key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A3B932D614541542F845635587B73BBBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 31 Oct 2025 18:41:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 193.163.4.0/24 IP: 2a05:39c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:3b:93:2d:61:45:41:54:2f:84:56:35:58:7b:73:bb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 31 18:41:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:9b:e6:34:ae:44:b0:0d:f4:88:7e:d3:1a: 6e:a1:c9:fc:bc:72:92:b2:ab:2f:b8:2c:c8:34:23: e2:93:a2:00:58:28:5b:f2:9b:43:30:4c:cf:27:24: 52:44:bb:03:a9:ed:4e:9f:8f:e8:70:4f:cd:e4:e3: 8c:8e:e2:44:a4:f3:05:a2:a2:db:e1:2a:bd:7f:e0: 8b:cf:32:53:7a:2d:18:8f:a6:65:9e:00:cb:cc:52: e1:9c:92:be:35:0d:e7:85:82:76:22:2f:39:0c:d8: 3e:13:da:28:9e:e0:c5:83:a7:a3:fb:3c:aa:e5:5c: 91:2f:91:80:6b:a5:f6:ec:ba:3c:40:f0:1e:f6:5d: d8:1d:5e:3d:b9:48:15:3c:82:20:6f:53:dd:ea:4e: d7:ba:3c:0f:32:6e:30:2d:12:b5:cc:c0:96:1b:d7: 04:98:c3:f3:60:83:d0:e7:4a:cd:6f:a6:a0:b0:44: 32:ec:50:14:da:88:53:c6:14:d0:93:8f:8a:48:48: 8e:99:82:9f:43:68:e4:43:1f:9a:96:50:5c:d7:30: 7a:98:a1:e9:4d:2c:79:2b:b9:e1:42:c9:95:48:6a: de:62:3c:87:aa:79:b9:b2:ec:ae:bf:ee:80:48:39: 57:77:17:7d:81:1f:d6:7c:2d:c5:81:58:53:b8:8d: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.4.0/24 IPv6: 2a05:39c0::/29 Signature Algorithm: sha256WithRSAEncryption 68:92:41:40:aa:ac:51:22:61:bb:14:0f:22:66:91:ee:8a:f9: 48:f2:55:5f:f9:9c:78:21:d0:5a:0f:15:07:e5:49:59:71:07: 3e:d6:4d:26:16:96:86:6f:38:af:ab:7c:c3:67:4c:0c:16:51: d9:88:90:bb:8f:cf:40:fe:d9:02:43:a3:77:0b:50:cf:fe:0e: cd:dc:95:a8:de:dc:f7:2a:f7:89:23:f7:38:13:00:a2:98:72: d7:b9:b2:65:af:47:3a:a8:20:35:75:5c:81:8d:d8:ed:23:c9: 5e:6e:9c:a4:15:23:34:ad:98:f8:82:b9:08:7f:ef:07:17:48: ee:14:00:cb:e1:36:2a:d3:f9:e3:58:ce:fe:c5:96:dd:c4:cb: 69:23:27:62:de:af:15:38:1e:48:94:b2:f7:99:48:5f:97:ad: 84:d4:71:50:fe:d6:2d:15:2f:69:1d:69:7d:72:81:a2:d8:8a: ee:78:f5:de:43:26:1e:7b:08:e0:3a:88:43:d1:7b:b8:09:e8: 8f:64:a2:ce:f0:e8:55:10:49:f6:dd:92:66:0a:a6:aa:7c:95: 9c:3b:3d:50:db:06:4f:ff:a7:d5:5f:88:a0:15:e6:24:79:03: ba:f5:09:ca:d1:cc:88:6b:54:b6:aa:b3:62:b8:5f:99:69:08: cf:cd:1c:ee -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZo7ky1hRUFUL4RWNVh7c7u9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDMxMTg0MTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmE0ZDc3ZGMyZTE5ZTZmOTYwMzI3NGMwOTIzYTYxYThhZGRiNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk+b5jSuRLAN9Ih+0xpuocn8vHKS sqsvuCzINCPik6IAWChb8ptDMEzPJyRSRLsDqe1On4/ocE/N5OOMjuJEpPMFoqLb 4Sq9f+CLzzJTei0Yj6ZlngDLzFLhnJK+NQ3nhYJ2Ii85DNg+E9oonuDFg6ej+zyq 5VyRL5GAa6X27Lo8QPAe9l3YHV49uUgVPIIgb1Pd6k7XujwPMm4wLRK1zMCWG9cE mMPzYIPQ50rNb6agsEQy7FAU2ohTxhTQk4+KSEiOmYKfQ2jkQx+allBc1zB6mKHp TSx5K7nhQsmVSGreYjyHqnm5suyuv+6ASDlXdxd9gR/WfC3FgVhTuI3nxQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAak133C4Z5vlgMnTAkjphqK3bSWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2QzYjU0 Mi02ZjIxLTRkYzgtOWU2Zi00NDkyZDlmMmY0MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZDNiNTQy LTZmMjEtNGRjOC05ZTZmLTQ0OTJkOWYyZjQzOC8xL0JxVFhmY0xobm0tV0F5ZE1D U09tR29yZHRKWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaMEMA0EAgACMAcDBQMqBTnAMA0GCSqGSIb3 DQEBCwUAA4IBAQBokkFAqqxRImG7FA8iZpHuivlI8lVf+Zx4IdBaDxUH5UlZcQc+ 1k0mFpaGbzivq3zDZ0wMFlHZiJC7j89A/tkCQ6N3C1DP/g7N3JWo3tz3KveJI/c4 EwCimHLXubJlr0c6qCA1dVyBjdjtI8lebpykFSM0rZj4grkIf+8HF0juFADL4TYq 0/njWM7+xZbdxMtpIydi3q8VOB5IlLL3mUhfl62E1HFQ/tYtFS9pHWl9coGi2Iru ePXeQyYeewjgOohD0Xu4CeiPZKLO8OhVEEn23ZJmCqaqfJWcOz1Q2wZP/6fVX4ig FeYkeQO69QnK0cyIa1S2qrNiuF+ZaQjPzRzu -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:08 2025 by rpki-client