This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer (raw, json) Hash identifier: wIbuBpYVGxGEqDNEHMODt0354J3enNKEDaTkCRiHM3c= Subject key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6AF3B086516E0B8C71F48E7450333 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199041 IP: 92.43.176.0/21 IP: 193.32.65.0/24 IP: 2a00:47e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:af:3b:08:65:16:e0:b8:c7:1f:48:e7:45:03:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=073848d8281be439e77750885b547a28152801bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4c:bc:8e:a9:52:94:c8:bc:d4:85:c4:4e:76: 6e:4f:d7:0d:b4:cc:78:ac:e1:1a:30:8f:a4:d1:e3: 7f:bb:be:23:87:de:8f:5b:4b:25:9f:42:90:a2:30: be:8c:6d:04:1a:77:f5:37:50:d5:a9:d6:5e:d6:5a: 9f:2d:e1:9d:18:b3:b5:9f:5d:d2:44:c7:ed:45:60: b7:c0:6c:11:23:31:9f:04:4e:9d:d7:63:d7:48:c5: 60:8b:3a:a7:cb:31:6c:12:9e:c7:c2:c1:59:09:5f: 6e:3f:f4:bd:98:39:b1:c7:30:cf:84:cb:2a:7e:5e: ea:e2:dd:6c:6b:ab:10:85:89:a7:9e:54:85:2b:4d: 03:bc:dc:1f:2f:1e:d5:4b:5d:25:40:bf:fe:73:9b: 4b:0f:27:8a:08:6f:78:21:8d:38:b8:c4:09:0d:03: a0:0b:4a:ba:5b:6c:00:bf:ef:a4:9f:ad:5d:ad:fe: 15:5a:d6:e2:2a:24:65:0d:b2:f5:51:6e:af:c6:59: cc:02:d4:47:04:55:e3:7c:f0:c3:92:49:63:6d:65: 86:0f:2e:16:94:d8:59:13:3f:eb:22:fd:ac:fe:20: 70:b7:86:61:61:e9:08:d4:ed:19:1a:e4:71:ce:07: a5:b7:87:b2:f3:23:22:a0:5b:35:fe:9b:80:2b:8d: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.176.0/21 193.32.65.0/24 IPv6: 2a00:47e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199041 Signature Algorithm: sha256WithRSAEncryption a0:77:41:3c:20:ac:d4:3d:d6:c6:2d:7c:a6:c9:07:30:e2:51: d0:ef:fd:77:08:58:21:f1:29:f5:d3:17:d2:fd:89:ab:03:68: 64:21:7f:82:69:72:14:74:7d:c7:6c:c3:05:3a:ea:10:95:cf: 6f:31:dc:a9:e4:15:1b:47:a6:00:a2:25:d3:83:c1:27:3d:5b: fb:07:8d:53:03:e8:15:78:c8:b9:01:b5:97:f3:10:b1:cb:02: 28:dd:e4:3b:21:f9:89:bd:4c:05:3e:49:3c:5a:0a:ec:77:ea: 88:41:44:8f:9a:29:3c:16:6d:75:73:44:b7:6f:1d:9e:36:a0: 34:c6:fb:ae:7e:30:04:15:07:47:b1:d1:16:8e:b8:b6:a1:03: 4e:4f:97:4d:ae:98:8c:cb:7c:f6:17:67:d9:16:f6:f8:a1:3f: 4d:dc:8a:ed:a3:eb:b5:73:00:6e:93:0c:be:93:f7:70:5e:97: 8b:b4:37:e9:70:91:0d:70:2f:99:7c:fd:12:1b:57:cf:b6:dd: f8:ca:3d:80:c3:b6:a4:45:9e:5f:bc:32:96:89:2a:02:03:a6: 0d:67:91:a2:a5:78:0f:25:bf:cb:57:c5:61:47:b4:e0:ad:ae: 18:e5:3e:dd:70:34:c9:59:55:08:76:82:d6:0e:36:5c:96:d3: 3a:1c:cf:04 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pq87CGUW4LjHH0jnRQMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzM4NDhkODI4MWJlNDM5ZTc3NzUwODg1YjU0N2EyODE1MjgwMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10y8jqlSlMi81IXETnZuT9cNtMx4 rOEaMI+k0eN/u74jh96PW0sln0KQojC+jG0EGnf1N1DVqdZe1lqfLeGdGLO1n13S RMftRWC3wGwRIzGfBE6d12PXSMVgizqnyzFsEp7HwsFZCV9uP/S9mDmxxzDPhMsq fl7q4t1sa6sQhYmnnlSFK00DvNwfLx7VS10lQL/+c5tLDyeKCG94IY04uMQJDQOg C0q6W2wAv++kn61drf4VWtbiKiRlDbL1UW6vxlnMAtRHBFXjfPDDkkljbWWGDy4W lNhZEz/rIv2s/iBwt4ZhYekI1O0ZGuRxzgelt4ey8yMioFs1/puAK410mQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAc4SNgoG+Q553dQiFtUeigVKAG7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2JlNDBl YS04OWM5LTRmZTMtOWQwYy00YzViMjAwYjY3MDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvYmU0MGVh LTg5YzktNGZlMy05ZDBjLTRjNWIyMDBiNjcwOS8xL0J6aEkyQ2diNURubmQxQ0lX MVI2S0JVb0Ficy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDXCuwAwQAwSBBMA0EAgACMAcDBQAqAEfgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMJgTANBgkqhkiG9w0BAQsFAAOCAQEAoHdB PCCs1D3Wxi18pskHMOJR0O/9dwhYIfEp9dMX0v2JqwNoZCF/gmlyFHR9x2zDBTrq EJXPbzHcqeQVG0emAKIl04PBJz1b+weNUwPoFXjIuQG1l/MQscsCKN3kOyH5ib1M BT5JPFoK7HfqiEFEj5opPBZtdXNEt28dnjagNMb7rn4wBBUHR7HRFo64tqEDTk+X Ta6YjMt89hdn2Rb2+KE/TdyK7aPrtXMAbpMMvpP3cF6Xi7Q36XCRDXAvmXz9EhtX z7bd+Mo9gMO2pEWeX7wylokqAgOmDWeRoqV4DyW/y1fFYUe04K2uGOU+3XA0yVlV CHaC1g42XJbTOhzPBA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:28:02 2026 by rpki-client