This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer File: Btocaxpl96PZf5vXXnysMTUkb6U.cer (raw, json) Hash identifier: LK9E/0Iysnh4UeG3rh7Mmf/KnOWiM4m8FhoP3/jMZ+c= Subject key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA4A27AAA77313E4374B80BACF6323 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51395 AS: 56803 IP: 91.192.100.0/22 IP: 91.201.56.0/22 IP: 176.10.96.0/19 IP: 185.32.220.0/22 IP: 185.85.108.0/22 IP: 185.189.148.0/22 IP: 185.195.68.0/22 IP: 195.225.117.0 -- 195.225.119.255 IP: 2a00:bd80::/32 IP: 2a05:ad00::/29 IP: 2a0a:5dc0::/29 IP: 2a0b:ee80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4a:27:aa:a7:73:13:e4:37:4b:80:ba:cf:63:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4e:f6:4c:27:fa:11:00:08:a4:1b:37:cc:c2: 83:92:d1:78:d0:78:a9:f8:24:ad:aa:9b:de:fd:43: fc:ce:5b:34:92:4a:5e:5e:9b:56:28:8a:54:df:5a: 00:e1:17:33:cc:70:38:74:61:a6:88:f4:84:20:8a: de:72:80:20:9e:90:d8:df:9f:47:b9:c7:e6:a5:9a: 49:97:24:da:d1:e4:03:55:42:53:a2:c3:41:24:2d: 34:d9:b6:23:62:f4:a2:ca:88:bb:09:81:43:fb:1b: 18:9d:20:52:dd:e8:7f:d8:47:45:db:a4:ce:f5:17: b6:a0:8f:f3:a6:1a:c2:e6:5e:41:73:e4:c0:9a:1c: 4e:f7:cf:3a:e6:43:aa:52:11:b5:3d:33:30:1a:28: 0f:4c:c6:39:f5:db:1b:83:b8:92:6f:d1:d6:f9:a6: de:f3:0e:c1:46:53:d7:80:92:42:d8:be:02:04:a3: 28:48:06:56:53:da:23:32:e0:5f:3e:d9:4a:02:72: 50:f6:b9:75:58:d9:33:28:49:ae:e0:ee:7b:47:b8: e6:5d:ef:90:04:e2:7b:6b:31:78:23:7c:f1:3c:96: 77:ea:83:be:7f:64:87:60:95:0c:43:61:60:4d:d3: 7d:60:7f:45:94:f1:d6:3f:dd:63:f1:57:be:dd:78: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.100.0/22 91.201.56.0/22 176.10.96.0/19 185.32.220.0/22 185.85.108.0/22 185.189.148.0/22 185.195.68.0/22 195.225.117.0-195.225.119.255 IPv6: 2a00:bd80::/32 2a05:ad00::/29 2a0a:5dc0::/29 2a0b:ee80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51395 56803 Signature Algorithm: sha256WithRSAEncryption 47:14:96:48:10:9d:f3:5e:74:a1:c3:2c:ee:22:8a:a4:13:28: fb:e5:64:f0:77:bc:4d:6c:73:4d:06:eb:af:7b:8c:c2:a6:b5: 5d:fc:3e:25:f1:4c:39:f0:a4:be:f8:d0:14:61:37:67:4e:3f: b4:a9:88:61:17:aa:2d:86:02:e2:b9:0e:d8:89:56:c0:4b:28: 33:ba:04:98:d7:97:bc:40:40:2a:de:27:1a:40:79:54:55:37: b7:43:66:99:4f:df:c0:75:01:63:df:b3:7e:74:29:05:22:8a: 75:63:ea:ba:f1:e3:10:d7:6f:96:c3:27:0b:07:03:c8:0d:0b: 95:fa:82:b7:c0:5e:e6:64:c2:1a:36:9a:a8:6c:1a:d4:f5:63: a7:eb:48:f1:37:5f:33:af:46:0b:7c:48:24:fb:7e:fb:38:78: 67:73:53:47:1b:6f:d0:4a:f7:8d:be:a7:3c:a3:98:74:e4:18: 36:bb:59:99:59:a2:0b:7c:86:ff:1e:a5:52:6b:d5:0d:01:59: b1:77:17:85:69:da:d6:52:b8:9c:8c:d3:e9:ec:47:95:2a:37: 5d:4d:cd:29:63:7a:35:7c:1f:6d:a9:3b:38:77:6f:be:36:30: e1:91:cc:0e:6b:4e:22:98:35:6a:94:6a:66:9b:cb:86:75:00: 8c:a5:6e:1e -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgISAZt9ykonqqdzE+Q3S4C6z2MjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmRhMWM2YjFhNjVmN2EzZDk3ZjliZDc1ZTdjYWMzMTM1MjQ2ZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE72TCf6EQAIpBs3zMKDktF40Hip +CStqpve/UP8zls0kkpeXptWKIpU31oA4RczzHA4dGGmiPSEIIrecoAgnpDY359H ucfmpZpJlyTa0eQDVUJTosNBJC002bYjYvSiyoi7CYFD+xsYnSBS3eh/2EdF26TO 9Re2oI/zphrC5l5Bc+TAmhxO98865kOqUhG1PTMwGigPTMY59dsbg7iSb9HW+abe 8w7BRlPXgJJC2L4CBKMoSAZWU9ojMuBfPtlKAnJQ9rl1WNkzKEmu4O57R7jmXe+Q BOJ7azF4I3zxPJZ36oO+f2SHYJUMQ2FgTdN9YH9FlPHWP91j8Ve+3Xj5dwIDAQAB o4IC+zCCAvcwHQYDVR0OBBYEFAbaHGsaZfej2X+b1158rDE1JG+lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzYyYTNi MS0xMTdkLTRiMTctOTY2Mi00NWViNzM4Y2I5YzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNjJhM2Ix LTExN2QtNGIxNy05NjYyLTQ1ZWI3MzhjYjljOC8xL0J0b2NheHBsOTZQWmY1dlhY bnlzTVRVa2I2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHUGCCsGAQUF BwEHAQH/BGYwZDA+BAIAATA4AwQCW8BkAwQCW8k4AwQFsApgAwQCuSDcAwQCuVVs AwQCub2UAwQCucNEMAwDBADD4XUDBAPD4XAwIgQCAAIwHAMFACoAvYADBQMqBa0A AwUDKgpdwAMFAyoL7oAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMjDAgMA3eMw DQYJKoZIhvcNAQELBQADggEBAEcUlkgQnfNedKHDLO4iiqQTKPvlZPB3vE1sc00G 6697jMKmtV38PiXxTDnwpL740BRhN2dOP7SpiGEXqi2GAuK5DtiJVsBLKDO6BJjX l7xAQCreJxpAeVRVN7dDZplP38B1AWPfs350KQUiinVj6rrx4xDXb5bDJwsHA8gN C5X6grfAXuZkwho2mqhsGtT1Y6frSPE3XzOvRgt8SCT7fvs4eGdzU0cbb9BK942+ pzyjmHTkGDa7WZlZogt8hv8epVJr1Q0BWbF3F4Vp2tZSuJyM0+nsR5UqN11NzSlj ejV8H22pOzh3b742MOGRzA5rTiKYNWqUamaby4Z1AIylbh4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:15 2026 by rpki-client