This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer (raw, json) Hash identifier: rG/TkmgOiVuLFCKCVw/CLsqmHSS4XqXcHdilneauFcc= Subject key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC97B97806F84CFAAE96546ACD8E225 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 129.12.0.0/16 IP: 192.138.248.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:7b:97:80:6f:84:cf:aa:e9:65:46:ac:d8:e2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:b0:41:cd:c7:9a:c2:c5:66:ec:45:8c:f6: bf:46:60:a0:1f:8d:bf:76:72:6d:bf:7d:db:28:14: 80:a3:b1:3a:0d:e6:a5:19:9e:c9:7b:12:41:13:1e: 45:f3:76:c2:a6:98:ee:84:11:67:a4:10:0a:9f:8d: 21:19:ee:19:48:cf:c4:4b:c9:ec:43:41:b4:e3:3f: 8e:cb:be:61:9a:46:b2:77:5d:25:c9:f8:1d:b1:de: a6:b0:6f:89:d3:3e:b7:f6:a2:b7:86:f1:26:13:bc: 23:a8:62:60:54:d6:74:0e:98:ce:2c:a1:81:3e:e3: f0:0c:25:a5:88:6f:1f:f1:45:02:c5:8e:ae:b4:45: 96:9e:e8:03:29:63:b6:c5:42:da:57:5a:a9:67:59: a4:73:a4:95:06:20:79:b2:6a:90:ba:02:45:3e:f3: ed:7b:da:f5:5d:62:4f:e3:96:30:9b:fc:d9:f2:32: ce:64:29:b6:38:d7:0f:fa:77:38:57:c1:73:2c:2b: 07:71:44:d2:21:54:eb:ff:7d:b8:c4:5e:6d:37:8b: 1f:f6:10:b6:0b:f1:e8:5b:2b:47:c7:3d:d6:c0:29: 5a:c3:c2:84:6a:9c:dc:34:44:f4:18:33:70:29:18: b0:58:71:14:c9:f2:72:bd:ec:66:d2:af:c0:99:0c: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.12.0.0/16 192.138.248.0/24 Signature Algorithm: sha256WithRSAEncryption 87:4c:b1:75:6e:5f:c4:36:7b:2f:b4:20:97:0a:a2:d2:df:c1: 3c:0d:86:9f:37:e5:26:eb:61:24:87:3b:39:fa:9e:a3:d8:25: 43:3c:7e:19:40:92:7d:65:d7:df:42:bd:4d:af:4f:86:42:50: c2:0b:6a:7e:d1:b2:9c:2c:62:f9:f8:65:53:41:37:2a:aa:c0: 8c:68:2e:cc:f1:29:84:d6:58:b8:e3:be:aa:ac:82:11:93:d8: 58:fc:39:52:86:fe:f0:49:ae:28:37:d4:55:25:47:f4:03:9e: b9:97:6c:8f:a5:38:73:a6:3d:82:31:b8:d2:e3:7f:9f:9c:6b: de:ba:4d:49:67:97:a6:aa:9e:be:cb:20:d6:5e:2c:3e:e9:e6: 14:e9:7d:74:de:d7:23:4a:28:59:4f:5b:8e:cb:18:fd:e2:57: bb:1d:98:33:f6:70:a9:0b:8e:95:27:37:52:6e:cf:87:fa:fa: bc:79:f5:5e:b2:7e:6c:2d:7b:8a:57:e7:ab:11:cd:69:66:32: f4:16:03:a6:de:f0:9f:5b:be:c6:fa:89:9f:85:5e:f7:65:40: 66:cc:fd:a1:a9:4f:63:5d:d6:f4:1b:bc:0c:75:83:c2:91:e9: 09:3e:37:9b:e1:ad:35:99:35:50:fc:39:8b:32:b2:8f:7b:c7: 7d:6b:8a:5a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt9yXuXgG+Ez6rpZUas2OIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmE5ZmE4NDg1ZmYwZjRiODVjN2Q0ZWY0NzhmOTg2MDkzZDllY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GawQc3HmsLFZuxFjPa/RmCgH42/ dnJtv33bKBSAo7E6DealGZ7JexJBEx5F83bCppjuhBFnpBAKn40hGe4ZSM/ES8ns Q0G04z+Oy75hmkayd10lyfgdsd6msG+J0z639qK3hvEmE7wjqGJgVNZ0DpjOLKGB PuPwDCWliG8f8UUCxY6utEWWnugDKWO2xULaV1qpZ1mkc6SVBiB5smqQugJFPvPt e9r1XWJP45Ywm/zZ8jLOZCm2ONcP+nc4V8FzLCsHcUTSIVTr/324xF5tN4sf9hC2 C/HoWytHxz3WwClaw8KEapzcNET0GDNwKRiwWHEUyfJyvexm0q/AmQxRvwIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFAap+oSF/w9LhcfU70ePmGCT2ezLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2MzMDc0 MC1iYzllLTRmZmUtYWQ3NC0yYTQ2NDA5MTM1NmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvYzMwNzQw LWJjOWUtNGZmZS1hZDc0LTJhNDY0MDkxMzU2Yi8xL0JxbjZoSVhfRDB1Rng5VHZS NC1ZWUpQWjdNcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAgQwDBADAivgwDQYJKoZIhvcNAQELBQADggEB AIdMsXVuX8Q2ey+0IJcKotLfwTwNhp835SbrYSSHOzn6nqPYJUM8fhlAkn1l199C vU2vT4ZCUMILan7RspwsYvn4ZVNBNyqqwIxoLszxKYTWWLjjvqqsghGT2Fj8OVKG /vBJrig31FUlR/QDnrmXbI+lOHOmPYIxuNLjf5+ca966TUlnl6aqnr7LINZeLD7p 5hTpfXTe1yNKKFlPW47LGP3iV7sdmDP2cKkLjpUnN1Juz4f6+rx59V6yfmwte4pX 56sRzWlmMvQWA6be8J9bvsb6iZ+FXvdlQGbM/aGpT2Nd1vQbvAx1g8KR6Qk+N5vh rTWZNVD8OYsyso97x31rilo= -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:06 2026 by rpki-client