This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer File: bjehCkoCc_QfrPdEDVnzmtXq9ks.cer (raw, json) Hash identifier: 9SdN//6IL0N2K7RNanZxs0c+aACgzmEy/PEFN3sL6YA= Subject key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B365CC404C39F3DA56BD7B6C966D618 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204702 IP: 185.157.148.0/22 IP: 2a0c:f380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5c:c4:04:c3:9f:3d:a5:6b:d7:b6:c9:66:d6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:e6:ef:98:6b:3f:0d:60:91:46:46:a4:39: 8a:9e:6c:44:68:44:14:7d:1e:15:f5:b3:c1:34:b0: f5:ed:5c:e9:7f:35:e1:60:d4:f1:95:54:cb:e1:75: 60:47:e0:d1:ce:d0:ee:16:e3:32:5a:73:f1:d0:96: 0a:e2:2c:83:6c:c0:a8:9c:52:09:17:42:4c:33:40: c6:5a:1b:f4:4e:da:a5:f1:2a:02:3f:ae:5d:c4:86: e7:67:1a:33:64:e5:f1:ee:24:7c:0d:1c:ea:6b:50: a3:a0:17:96:14:3e:03:73:ed:12:69:68:73:5e:9d: 77:a8:50:33:9c:67:55:dd:17:24:b6:39:8c:cb:31: 3f:1e:86:81:ae:55:5b:35:1b:b1:11:43:1b:08:46: b8:12:c3:d3:3a:e9:ec:13:36:cb:80:f9:6c:cb:53: 21:f2:d5:5e:29:73:da:b2:5a:c4:45:88:54:cc:b4: 1d:38:9f:4d:06:19:c5:50:1f:c8:56:fb:69:b4:b9: 3e:d0:d9:d1:33:b7:e0:07:dc:0b:05:f4:9c:cc:3e: ca:38:97:51:4c:3a:ca:db:d6:28:0f:9f:c4:39:a2: 4f:00:31:e3:9d:31:c5:0d:c0:4e:7a:63:ce:9e:a7: b8:c2:3d:bc:63:2f:c1:6d:03:ca:ab:95:a9:37:d9: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.148.0/22 IPv6: 2a0c:f380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204702 Signature Algorithm: sha256WithRSAEncryption 58:4a:fd:35:ad:e6:0e:31:78:cf:af:14:34:9f:cf:88:90:ea: 33:e1:12:9f:23:fe:9b:ea:da:b0:c6:57:9c:9e:bd:06:17:ae: 48:69:71:9a:4c:78:d3:19:10:2d:c0:5c:84:fa:df:b2:0d:93: 0c:49:cc:ba:c4:8b:8c:86:b6:e5:59:97:65:e5:40:36:41:49: 1a:a0:22:e5:b3:42:3b:63:cd:5d:c5:12:db:4a:5f:63:71:31: e3:af:22:35:e3:ba:02:85:48:79:cf:bb:9e:c1:a6:9b:2c:ff: 27:fa:29:78:6f:03:12:37:6f:0f:c1:a8:2b:92:44:45:bc:b9: 1b:cc:6e:a0:34:c6:be:f9:98:c7:a2:34:c3:b9:61:29:03:d1: 7c:45:33:4e:71:6b:41:d6:3f:6c:ab:c7:4e:d3:3d:94:50:dd: d2:c8:6e:4a:fd:4e:d0:c5:8b:9f:21:68:87:42:04:7f:79:cd: 93:16:76:a0:85:ed:10:2b:1a:dd:59:11:0c:ff:29:70:93:36: 2d:90:6a:b8:7a:ab:ce:af:88:fc:75:03:ac:91:03:4f:5a:8f: 9a:25:50:d5:50:48:9e:1f:35:a6:e3:58:a2:6e:a2:0a:20:18: 50:ce:30:42:be:46:32:71:e0:ac:28:32:db:2a:df:05:ef:38: 32:89:43:a6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NlzEBMOfPaVr17bJZtYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTM3YTEwYTRhMDI3M2Y0MWZhY2Y3NDQwZDU5ZjM5YWQ1ZWFmNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mnm75hrPw1gkUZGpDmKnmxEaEQU fR4V9bPBNLD17VzpfzXhYNTxlVTL4XVgR+DRztDuFuMyWnPx0JYK4iyDbMConFIJ F0JMM0DGWhv0Ttql8SoCP65dxIbnZxozZOXx7iR8DRzqa1CjoBeWFD4Dc+0SaWhz Xp13qFAznGdV3RcktjmMyzE/HoaBrlVbNRuxEUMbCEa4EsPTOunsEzbLgPlsy1Mh 8tVeKXPaslrERYhUzLQdOJ9NBhnFUB/IVvtptLk+0NnRM7fgB9wLBfSczD7KOJdR TDrK29YoD5/EOaJPADHjnTHFDcBOemPOnqe4wj28Yy/BbQPKq5WpN9kH/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG43oQpKAnP0H6z3RA1Z85rV6vZLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2YwYWVm My0yNjNkLTRmNDEtODg1My0xOGI3ZWI5MjNhOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZjBhZWYz LTI2M2QtNGY0MS04ODUzLTE4YjdlYjkyM2E5OS8xL2JqZWhDa29DY19RZnJQZEVE Vm56bXRYcTlrcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ2UMA0EAgACMAcDBQMqDPOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfnjANBgkqhkiG9w0BAQsFAAOCAQEAWEr9Na3mDjF4 z68UNJ/PiJDqM+ESnyP+m+rasMZXnJ69BheuSGlxmkx40xkQLcBchPrfsg2TDEnM usSLjIa25VmXZeVANkFJGqAi5bNCO2PNXcUS20pfY3Ex468iNeO6AoVIec+7nsGm myz/J/opeG8DEjdvD8GoK5JERby5G8xuoDTGvvmYx6I0w7lhKQPRfEUzTnFrQdY/ bKvHTtM9lFDd0shuSv1O0MWLnyFoh0IEf3nNkxZ2oIXtECsa3VkRDP8pcJM2LZBq uHqrzq+I/HUDrJEDT1qPmiVQ1VBInh81puNYom6iCiAYUM4wQr5GMnHgrCgy2yrf Be84MolDpg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:52 2026 by rpki-client