This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer File: beKqsHfJ7vED-XmE8wnYkeWhmYM.cer (raw, json) Hash identifier: RgQKQ6BWjL2teOHREAesoO+fq51SklRFrWZJXOAn+YU= Subject key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1172A6DCD97803167E0842850CACF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205516 IP: 45.86.80.0/22 IP: 45.130.4.0/22 IP: 89.223.4.0/24 IP: 89.223.11.0/24 IP: 91.147.96.0/22 IP: 185.215.160.0/22 IP: 2a0b:abc0::/29 IP: 2a0e:db80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:72:a6:dc:d9:78:03:16:7e:08:42:85:0c:ac:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6de2aab077c9eef103f97984f309d891e5a19983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:55:74:a7:66:52:b6:b1:6f:3e:8e:19:81: 2b:df:77:64:83:fb:18:19:89:a6:68:59:bb:0d:dd: d4:bd:55:49:95:97:5a:a2:92:c2:30:42:39:14:e2: 25:c5:d8:b8:9c:58:51:78:a9:51:4e:a9:0b:72:ac: a7:37:dd:9d:ef:69:30:47:02:aa:5b:50:d1:41:8f: 06:d6:d7:88:d0:db:c8:7b:9b:aa:ce:d0:39:8c:65: e5:cd:bb:4c:63:42:93:5b:4a:35:bb:75:0f:bb:f3: d6:3b:25:d5:6b:f5:4e:ac:c1:eb:b7:5e:8f:ed:f1: 79:75:33:99:08:22:29:a2:ad:ef:43:da:a2:9d:04: 24:0e:59:a1:bf:f9:3a:4a:a1:16:68:df:c0:c1:2a: 9f:78:98:88:6e:80:db:32:e8:d3:43:f4:26:4f:74: cc:6c:34:8d:c3:25:04:fc:1d:36:b4:10:7c:b0:4c: 1f:33:33:4c:2e:0c:db:71:91:19:c6:ff:e3:ad:52: 4e:fe:8b:39:21:b5:f0:b2:7e:78:ba:0b:5d:93:b1: 69:1f:1d:15:d6:77:2d:51:9a:12:9a:08:50:ec:5e: 11:ef:24:49:bb:c8:e9:49:67:00:fd:c3:a0:16:95: 1c:e9:15:e2:b9:93:94:b7:5e:96:af:5a:3d:42:3b: 51:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.80.0/22 45.130.4.0/22 89.223.4.0/24 89.223.11.0/24 91.147.96.0/22 185.215.160.0/22 IPv6: 2a0b:abc0::/29 2a0e:db80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205516 Signature Algorithm: sha256WithRSAEncryption 2a:b1:98:4a:9a:bd:a2:59:03:47:b1:fa:18:1f:e5:32:82:e4: 0b:c5:66:4f:91:26:08:dd:21:e0:43:43:89:05:50:3d:70:50: b7:ef:65:95:bc:8f:9e:cf:64:f2:63:b6:45:85:55:81:55:42: ea:91:c8:12:76:a3:d9:15:dd:83:69:32:c4:a3:03:f1:c1:f6: a5:7f:fc:9f:f2:27:21:0d:98:52:bd:53:85:09:41:77:65:f2: 8e:65:2e:21:87:0b:d6:66:a3:66:ec:57:9a:d3:b0:e2:53:d0: 40:d0:54:3f:d1:7b:a4:03:a2:5f:e2:55:ad:e7:2a:2a:4a:aa: a9:36:67:2a:e3:a3:c5:64:16:7c:6f:9c:c0:cd:39:65:d1:13: b8:4d:ff:17:b1:83:12:55:ce:a3:39:b7:1f:a6:2a:58:0a:ba: b5:57:9a:6f:60:b8:09:b8:39:79:2f:0e:40:65:83:00:7c:ff: 3d:62:2e:44:6f:ec:89:59:09:ab:b9:b9:6e:ac:2f:e8:8d:a7: de:38:c9:f4:0e:86:1f:a5:a4:d1:2a:e0:e6:13:83:9d:34:5f: 35:54:bd:32:3f:8e:7c:d5:f5:3f:38:24:7a:6b:3a:92:eb:ab: 19:1d:54:2d:ca:77:22:e0:28:e8:f6:7f:81:aa:53:7a:7e:b1: 07:e3:7b:f7 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt8EXKm3Nl4AxZ+CEKFDKz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGUyYWFiMDc3YzllZWYxMDNmOTc5ODRmMzA5ZDg5MWU1YTE5OTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWxVdKdmUraxbz6OGYEr33dkg/sY GYmmaFm7Dd3UvVVJlZdaopLCMEI5FOIlxdi4nFhReKlRTqkLcqynN92d72kwRwKq W1DRQY8G1teI0NvIe5uqztA5jGXlzbtMY0KTW0o1u3UPu/PWOyXVa/VOrMHrt16P 7fF5dTOZCCIpoq3vQ9qinQQkDlmhv/k6SqEWaN/AwSqfeJiIboDbMujTQ/QmT3TM bDSNwyUE/B02tBB8sEwfMzNMLgzbcZEZxv/jrVJO/os5IbXwsn54ugtdk7FpHx0V 1nctUZoSmghQ7F4R7yRJu8jpSWcA/cOgFpUc6RXiuZOUt16Wr1o9QjtRgwIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFG3iqrB3ye7xA/l5hPMJ2JHloZmDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2E0MDA3 MC1hYTE3LTQyZmUtODZkZC1iOWFlNTczOTQxODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvYTQwMDcw LWFhMTctNDJmZS04NmRkLWI5YWU1NzM5NDE4OS8xL2JlS3FzSGZKN3ZFRC1YbUU4 d25Za2VXaG1ZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQCLVZQAwQCLYIEAwQAWd8EAwQAWd8LAwQCW5Ng AwQCudegMBQEAgACMA4DBQMqC6vAAwUDKg7bgDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDIswwDQYJKoZIhvcNAQELBQADggEBACqxmEqavaJZA0ex+hgf5TKC5AvF Zk+RJgjdIeBDQ4kFUD1wULfvZZW8j57PZPJjtkWFVYFVQuqRyBJ2o9kV3YNpMsSj A/HB9qV//J/yJyENmFK9U4UJQXdl8o5lLiGHC9Zmo2bsV5rTsOJT0EDQVD/Re6QD ol/iVa3nKipKqqk2Zyrjo8VkFnxvnMDNOWXRE7hN/xexgxJVzqM5tx+mKlgKurVX mm9guAm4OXkvDkBlgwB8/z1iLkRv7IlZCau5uW6sL+iNp944yfQOhh+lpNEq4OYT g500XzVUvTI/jnzV9T84JHprOpLrqxkdVC3KdyLgKOj2f4GqU3p+sQfje/c= -----END CERTIFICATE-----Generated at Mon Jan 12 06:29:34 2026 by rpki-client