This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer File: BztMEkjEvPIrBXffypsU2QY8KMA.cer (raw, json) Hash identifier: BCrYjw7D93yQKITh9dbWwkF/X92cK5BbLBmOTliaCbk= Subject key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3A20643A25F66DFEAC7CB4F80AC3F25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 09:53:57 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 80.66.64.0 -- 80.66.89.255 IP: 87.251.64.0/20 IP: 87.251.84.0 -- 87.251.89.255 IP: 130.49.214.0/23 IP: 193.37.68.0/22 IP: 194.113.232.0/22 IP: 217.151.228.0/24 IP: 2a0d:6c0::/29 IP: 2a0d:65c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a2:06:43:a2:5f:66:df:ea:c7:cb:4f:80:ac:3f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 09:53:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:23:3a:01:bd:76:c0:db:03:49:f9:29:b2: e2:17:ed:ec:70:b9:16:e1:e3:41:0f:96:71:53:24: b2:64:a1:ca:3e:b9:00:81:84:78:bb:15:48:64:c8: 84:5d:47:47:05:d6:bc:41:6c:d1:9a:c2:bb:bf:1e: be:be:ce:2d:8b:b0:11:af:bd:47:57:83:61:b9:48: ee:fa:4e:18:80:a9:56:e5:fe:e3:0e:0e:2d:8c:7c: d0:2d:b5:87:b3:9b:9c:bf:e4:98:b9:56:a7:8e:c9: e1:b4:d0:c3:4d:b8:c1:64:9e:4c:00:ec:f3:ee:f6: d0:f8:16:fd:e6:77:25:93:ac:12:bb:f5:9c:98:1a: 71:b0:95:31:04:c0:9c:da:73:eb:72:cb:5a:be:e6: c0:00:9b:02:24:e2:2d:6d:ad:fd:07:a0:26:5a:9d: e2:68:d9:f0:cd:45:69:86:29:3e:8e:f0:f8:71:63: 40:e2:cc:eb:73:e2:42:db:78:30:ae:e1:3e:6d:62: 82:ed:f7:a9:91:2b:c7:d8:63:85:9f:56:a8:34:36: a9:fa:13:a3:99:b3:52:e4:6c:55:1a:db:a4:ac:0b: e1:ae:8e:a7:e3:14:52:20:0e:a4:1b:20:8c:1c:bb: f0:90:60:b7:ac:0e:b0:5b:0c:62:b7:45:49:7f:1a: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.64.0-80.66.89.255 87.251.64.0/20 87.251.84.0-87.251.89.255 130.49.214.0/23 193.37.68.0/22 194.113.232.0/22 217.151.228.0/24 IPv6: 2a0d:6c0::/29 2a0d:65c0::/29 Signature Algorithm: sha256WithRSAEncryption 5e:95:31:24:07:e2:87:ec:14:ea:a1:c3:74:2f:6c:75:83:ae: 23:88:36:73:b3:8f:5c:6a:02:cb:54:21:cc:da:33:a8:9a:51: cd:6f:0c:c8:60:68:99:f3:a0:cd:e1:66:6c:e1:47:4f:c5:b5: b7:52:37:8a:df:17:40:17:3d:d9:98:5c:88:48:12:ce:69:78: 14:1f:0c:aa:39:95:dd:c5:56:0a:0b:72:4e:f5:63:bf:6c:b5: dc:e8:6a:40:03:1e:4b:de:14:e5:5c:fa:94:41:48:fd:51:34: 4a:34:3c:05:9e:c6:65:11:92:0a:2c:6c:cf:30:15:6f:74:58: be:4a:87:f4:d8:b6:17:73:82:5a:6e:da:b2:f3:26:9c:27:4a: c0:51:4b:6e:9c:b6:4d:57:24:f7:be:3e:1d:d4:a7:61:9e:e7: ae:8c:c4:56:bf:ee:93:f0:40:40:48:4d:32:35:ed:2d:d1:78: 27:c7:fd:eb:c9:5a:52:ef:44:f2:4f:0e:fa:8e:88:0a:45:42: 98:cd:68:dc:c0:e1:d2:a2:1e:4c:1d:e0:14:0d:34:8e:ca:ef: 2c:38:7c:89:c9:d6:ce:2e:b1:0c:4f:81:46:25:56:4b:6e:38: 64:9a:87:dd:ba:b0:74:b7:fe:07:46:c9:b2:05:48:44:52:6d: 18:03:21:ba -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZrjogZDol9m3+rHy0+ArD8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMDk1MzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzNiNGMxMjQ4YzRiY2YyMmIwNTc3ZGZjYTliMTRkOTA2M2MyOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4UjOgG9dsDbA0n5KbLiF+3scLkW 4eNBD5ZxUySyZKHKPrkAgYR4uxVIZMiEXUdHBda8QWzRmsK7vx6+vs4ti7ARr71H V4NhuUju+k4YgKlW5f7jDg4tjHzQLbWHs5ucv+SYuVanjsnhtNDDTbjBZJ5MAOzz 7vbQ+Bb95nclk6wSu/WcmBpxsJUxBMCc2nPrcstavubAAJsCJOItba39B6AmWp3i aNnwzUVphik+jvD4cWNA4szrc+JC23gwruE+bWKC7fepkSvH2GOFn1aoNDap+hOj mbNS5GxVGtukrAvhro6n4xRSIA6kGyCMHLvwkGC3rA6wWwxit0VJfxrFzQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFAc7TBJIxLzyKwV338qbFNkGPCjAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzYzZGJl NS01YWEzLTRmMTktOGRhNC1hOGQzNjFjZTY0YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNjNkYmU1 LTVhYTMtNGYxOS04ZGE0LWE4ZDM2MWNlNjRhYS8xL0J6dE1Fa2pFdlBJckJYZmZ5 cHNVMlFZOEtNQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUF BwEHAQH/BFowWDBABAIAATA6MAwDBAZQQkADBAFQQlgDBARX+0AwDAMEAlf7VAME AVf7WAMEAYIx1gMEAsElRAMEAsJx6AMEANmX5DAUBAIAAjAOAwUDKg0GwAMFAyoN ZcAwDQYJKoZIhvcNAQELBQADggEBAF6VMSQH4ofsFOqhw3QvbHWDriOINnOzj1xq AstUIczaM6iaUc1vDMhgaJnzoM3hZmzhR0/FtbdSN4rfF0AXPdmYXIhIEs5peBQf DKo5ld3FVgoLck71Y79stdzoakADHkveFOVc+pRBSP1RNEo0PAWexmURkgosbM8w FW90WL5Kh/TYthdzglpu2rLzJpwnSsBRS26ctk1XJPe+Ph3Up2Ge566MxFa/7pPw QEBITTI17S3ReCfH/evJWlLvRPJPDvqOiApFQpjNaNzA4dKiHkwd4BQNNI7K7yw4 fInJ1s4usQxPgUYlVktuOGSah926sHS3/gdGybIFSERSbRgDIbo= -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:32 2025 by rpki-client