This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer (raw, json) Hash identifier: jAoYbXrH39XZcXbF9u+BT8OpdSmDEZ5CVUsmHA1BO/s= Subject key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3204D04BEF01A862856E0C9E09B26 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.91.64.0/20 IP: 91.209.135.0/24 IP: 2a13:f180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:20:4d:04:be:f0:1a:86:28:56:e0:c9:e0:9b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:91:54:89:45:c0:60:86:5e:50:52:ea:67: 97:e8:f6:cd:4b:ca:3a:86:32:01:41:09:73:77:43: ea:15:0e:b4:af:09:ad:3c:24:44:0f:64:81:40:8e: 7f:cd:94:4e:f9:9b:c2:3c:c7:db:6a:8d:5c:a8:8a: 3b:13:b3:18:4a:9a:6d:fd:3e:8c:8b:60:ce:18:67: bd:93:af:d8:58:09:51:c0:31:a3:4d:81:b5:6a:38: 62:8c:58:1b:cf:c9:39:de:89:46:79:55:0e:43:47: a4:12:28:57:62:74:f9:b0:4b:e4:ff:58:8a:0d:a6: 98:90:e0:e8:e0:d4:3d:e9:cc:97:78:9a:ef:40:57: 9c:d0:e2:9e:fe:6b:0a:d3:b7:7e:cf:c5:d1:ba:52: d8:7e:e1:11:07:8e:73:91:e5:b2:fe:34:c2:7b:b7: f1:54:9d:81:79:e1:c0:ad:11:4e:15:88:1e:4b:12: 7a:be:29:c6:94:76:02:a1:b2:10:58:f9:b0:4f:49: 8d:03:49:d3:e7:f6:12:6e:77:96:9f:cc:88:97:38: bf:4d:7f:5f:af:40:a6:e6:de:a7:53:f1:c3:ee:9b: de:49:5a:2b:e1:ba:4b:9f:ea:07:f2:d3:bf:c7:23: 32:8e:01:9b:f6:ff:83:1e:93:78:2c:d4:87:14:b4: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.64.0/20 91.209.135.0/24 IPv6: 2a13:f180::/29 Signature Algorithm: sha256WithRSAEncryption 85:0a:2f:2e:e9:03:37:16:49:b2:67:74:ce:b1:f1:bd:98:01: ee:44:09:44:69:10:63:07:93:67:7e:70:68:b5:73:57:cb:18: b4:4b:46:fe:ec:1f:42:77:fa:7e:d2:a3:90:cc:d8:64:9c:26: f0:d1:fb:f5:3a:c4:6f:78:8a:43:88:60:0d:8b:61:33:61:93: 69:6c:da:e0:4f:7b:16:88:19:13:3d:04:47:e6:9e:87:a0:0d: 12:a4:00:6f:1a:ce:6a:e1:a9:88:aa:cb:73:47:52:7a:c2:68: 88:45:2f:39:ef:3e:9b:d2:05:58:11:15:4a:39:a4:74:df:cc: 81:e1:35:53:0f:3a:f5:9d:7f:0d:5f:08:87:49:0b:16:76:c4: 43:b3:f2:1e:c8:a2:d4:22:8e:74:66:90:51:01:83:f2:c3:5e: 28:19:69:80:de:2a:43:0d:27:15:52:a4:d6:08:77:33:4d:35: 66:a2:3f:21:3f:b3:f6:8b:0d:55:e5:03:ee:d9:b8:dd:d8:76: 4a:3e:d3:53:dd:c1:90:9f:24:82:eb:7c:e2:39:55:32:4e:30: 7c:e9:3d:f4:e9:5b:66:41:7f:cb:68:57:3f:c4:66:b7:ee:57: f3:fe:2a:27:64:4e:38:82:97:12:7e:a2:06:15:08:1e:e1:df: 1f:fe:4f:1a -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt7oyBNBL7wGoYoVuDJ4JsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDA4OGNlZjI4ZTAyYWY3ZDAwZjI5NzgxNmM1NWY4ZTNjNDNkNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt56RVIlFwGCGXlBS6meX6PbNS8o6 hjIBQQlzd0PqFQ60rwmtPCRED2SBQI5/zZRO+ZvCPMfbao1cqIo7E7MYSppt/T6M i2DOGGe9k6/YWAlRwDGjTYG1ajhijFgbz8k53olGeVUOQ0ekEihXYnT5sEvk/1iK DaaYkODo4NQ96cyXeJrvQFec0OKe/msK07d+z8XRulLYfuERB45zkeWy/jTCe7fx VJ2BeeHArRFOFYgeSxJ6vinGlHYCobIQWPmwT0mNA0nT5/YSbneWn8yIlzi/TX9f r0Cm5t6nU/HD7pveSVor4bpLn+oH8tO/xyMyjgGb9v+DHpN4LNSHFLTxAQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFG0IjO8o4Cr30A8peBbFX448Q9U1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2Q1N2E2 NC1iZDMyLTRjOTEtYmUwNi1mZWU4ZWFmNzNiMGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvZDU3YTY0 LWJkMzItNGM5MS1iZTA2LWZlZThlYWY3M2IwZC8xL2JRaU03eWpnS3ZmUUR5bDRG c1Zmamp4RDFUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQETVtAAwQAW9GHMA0EAgACMAcDBQMqE/GAMA0G CSqGSIb3DQEBCwUAA4IBAQCFCi8u6QM3FkmyZ3TOsfG9mAHuRAlEaRBjB5NnfnBo tXNXyxi0S0b+7B9Cd/p+0qOQzNhknCbw0fv1OsRveIpDiGANi2EzYZNpbNrgT3sW iBkTPQRH5p6HoA0SpABvGs5q4amIqstzR1J6wmiIRS857z6b0gVYERVKOaR038yB 4TVTDzr1nX8NXwiHSQsWdsRDs/IeyKLUIo50ZpBRAYPyw14oGWmA3ipDDScVUqTW CHczTTVmoj8hP7P2iw1V5QPu2bjd2HZKPtNT3cGQnySC63ziOVUyTjB86T306Vtm QX/LaFc/xGa37lfz/ionZE44gpcSfqIGFQge4d8f/k8a -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:48 2026 by rpki-client