This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer File: BsRLghq121QsxTbB-IuEuvBiFlQ.cer (raw, json) Hash identifier: ir7Q9+1TEhvbkxbuo828ouvVlintqpJHLzYIguQaeHo= Subject key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1482A63120BE6B622672A1B398AEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203653 IP: 185.128.36.0/22 IP: 2a03:9f60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:48:2a:63:12:0b:e6:b6:22:67:2a:1b:39:8a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06c44b821ab5db542cc536c1f88b84baf0621654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:fa:d6:5a:fa:92:e5:a4:18:70:a0:4c:1c: 5e:59:b6:5b:28:77:ec:a1:75:16:44:19:6d:46:1a: ff:83:ce:d1:55:ea:35:f8:dd:00:9e:5e:94:f9:e1: 70:f3:19:cd:3a:3a:97:f3:6e:c0:37:14:98:ad:cb: bc:d1:37:77:6d:ce:c8:e7:d8:14:ca:33:02:ae:cd: dd:8a:21:df:b2:0b:ae:40:7f:c2:64:96:91:37:0e: 80:08:05:03:85:c9:10:77:92:77:4f:15:ac:89:bb: 20:1b:47:d7:79:26:db:00:10:bb:48:3b:c4:14:05: 48:87:19:36:25:ab:db:4e:35:4c:97:eb:22:61:ec: 4c:2d:71:04:60:70:cc:68:d6:78:0d:f4:3d:89:24: dd:d2:0c:5f:d8:3e:65:86:05:4d:04:65:6f:95:60: f7:f0:2f:3e:44:25:c0:53:fb:61:a9:24:34:3a:4f: c7:c9:f9:97:3e:45:b0:e0:58:ac:44:9f:04:1b:03: 20:43:ad:70:71:f8:28:c2:31:23:53:52:93:6c:22: f7:e9:64:fa:60:41:1e:d0:f4:d9:df:ae:f8:0b:74: 56:82:00:bf:aa:32:30:c9:41:c9:3c:ef:b3:a1:3f: af:cb:d0:dc:3c:ac:74:65:6f:20:16:44:36:75:38: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.36.0/22 IPv6: 2a03:9f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203653 Signature Algorithm: sha256WithRSAEncryption 79:0b:0e:af:66:2a:45:9d:52:88:3d:e9:1e:02:54:57:46:ee: 9f:71:a7:76:86:d7:8e:e4:2f:84:20:61:0f:98:81:34:5a:9c: a7:ce:b0:cd:6d:30:a9:9c:45:88:6c:41:31:58:ce:41:76:50: 93:9f:46:37:19:3c:94:c4:54:ce:4b:92:b8:bb:33:92:d2:d3: e1:72:fd:a8:84:12:42:7f:90:c8:0d:73:3a:e4:7a:0d:c4:cf: e6:27:db:c9:b5:74:be:2f:c5:e3:72:d6:80:d2:95:1d:c3:9f: 2d:01:1f:0d:6e:a8:93:d7:17:b9:d0:e7:39:54:5b:22:01:e4: 98:a6:b4:bb:d5:dd:23:50:f5:bb:15:8e:29:dc:f8:f7:0e:bf: ae:c3:07:c4:0f:f9:c9:06:ca:25:5b:59:27:3c:65:19:62:a9: b3:f5:d9:b8:b8:f9:ac:9f:1b:d9:9b:bb:be:3f:75:07:8e:64: 65:9d:a1:78:4c:26:5c:a9:82:30:45:ee:94:14:8e:76:53:ea: 3c:7a:4d:a8:2b:d9:d4:13:ee:90:01:57:c3:dc:a1:01:ec:85: 0d:46:97:77:d2:2d:99:fd:1d:e1:e6:41:81:9f:71:6d:57:47: b5:74:de:36:80:ae:5a:3d:07:6c:8b:91:4d:de:c2:97:5d:09: 36:f9:b3:22 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8UgqYxIL5rYiZyobOYruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmM0NGI4MjFhYjVkYjU0MmNjNTM2YzFmODhiODRiYWYwNjIxNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX/61lr6kuWkGHCgTBxeWbZbKHfs oXUWRBltRhr/g87RVeo1+N0Anl6U+eFw8xnNOjqX827ANxSYrcu80Td3bc7I59gU yjMCrs3diiHfsguuQH/CZJaRNw6ACAUDhckQd5J3TxWsibsgG0fXeSbbABC7SDvE FAVIhxk2JavbTjVMl+siYexMLXEEYHDMaNZ4DfQ9iSTd0gxf2D5lhgVNBGVvlWD3 8C8+RCXAU/thqSQ0Ok/HyfmXPkWw4FisRJ8EGwMgQ61wcfgowjEjU1KTbCL36WT6 YEEe0PTZ3674C3RWggC/qjIwyUHJPO+zoT+vy9DcPKx0ZW8gFkQ2dTgltwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAbES4IatdtULMU2wfiLhLrwYhZUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzc5Y2Vm OC00M2ExLTQwODktODA5Zi1kYzk4NDI2NTU2N2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvNzljZWY4 LTQzYTEtNDA4OS04MDlmLWRjOTg0MjY1NTY3ZC8xL0JzUkxnaHExMjFRc3hUYkIt SXVFdXZCaUZsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYAkMA0EAgACMAcDBQAqA59gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbhTANBgkqhkiG9w0BAQsFAAOCAQEAeQsOr2YqRZ1S iD3pHgJUV0bun3GndobXjuQvhCBhD5iBNFqcp86wzW0wqZxFiGxBMVjOQXZQk59G Nxk8lMRUzkuSuLszktLT4XL9qIQSQn+QyA1zOuR6DcTP5ifbybV0vi/F43LWgNKV HcOfLQEfDW6ok9cXudDnOVRbIgHkmKa0u9XdI1D1uxWOKdz49w6/rsMHxA/5yQbK JVtZJzxlGWKps/XZuLj5rJ8b2Zu7vj91B45kZZ2heEwmXKmCMEXulBSOdlPqPHpN qCvZ1BPukAFXw9yhAeyFDUaXd9Itmf0d4eZBgZ9xbVdHtXTeNoCuWj0HbIuRTd7C l10JNvmzIg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:07 2026 by rpki-client