This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer File: bgC7pk9Ra41jNaAc8wS4It7hrtA.cer (raw, json) Hash identifier: qKZ2Li9lnShd6Q4vEdZnBMvQYfzlOZIZjTftbnYIYlg= Subject key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC710E832F6842FF4FAC508EC7AF7C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.5.188.0/22 IP: 2a02:7f40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:71:0e:83:2f:68:42:ff:4f:ac:50:8e:c7:af:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:1b:a6:b6:47:5f:bd:85:81:92:d6:c0:fc: 10:47:fb:ed:3d:60:e4:74:dc:98:e3:37:8d:d0:56: 0b:72:97:4b:cd:c2:16:0a:69:5c:e2:71:45:57:e9: 82:37:33:c9:4d:e3:f6:db:95:e6:8a:fe:0b:fc:ad: 3c:6e:c5:fd:6c:57:60:aa:da:48:e4:7e:f2:e6:7c: 8b:de:77:87:6d:8e:33:6c:57:af:cf:32:61:14:32: ba:54:95:7a:0c:09:d8:bc:6a:55:63:63:84:ee:6d: d6:a8:10:6e:e2:8f:9d:f3:03:10:b8:0a:c2:23:b1: 49:e7:c0:8d:93:47:fa:cd:46:52:fc:bc:ae:1e:98: eb:51:28:f8:97:c6:93:a5:e6:b0:aa:86:d1:2e:87: a3:9e:09:9a:9a:02:fd:22:8b:9e:e0:e5:e8:c2:d7: 69:e2:2c:cf:cb:64:c0:20:c4:d4:e1:43:ec:ad:6c: 58:8c:8d:c8:a2:e8:64:23:b9:d0:99:7c:f8:64:d9: c7:ea:f8:0a:6b:b7:3f:78:d4:28:78:02:3f:c9:d2: 9a:96:62:3c:3a:bd:00:7a:36:73:94:c4:c5:6a:6d: 0f:53:7d:6c:ff:0b:f5:5e:d6:85:b4:fd:12:e6:49: 03:63:a5:79:d5:ff:29:c0:16:8a:af:90:d9:ea:48: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.188.0/22 IPv6: 2a02:7f40::/32 Signature Algorithm: sha256WithRSAEncryption 0f:df:a1:af:a4:5c:f7:26:dc:47:43:ee:bd:17:9b:d5:d9:26: 35:5d:35:c5:61:a2:69:03:4b:ff:c6:ce:c5:93:50:42:2f:cb: c2:2a:5a:73:ac:84:c3:3e:1e:f3:9d:81:31:80:5c:a6:98:e9: fd:3c:b8:93:ad:c3:46:a9:67:67:ac:1c:cb:b9:39:32:50:01: 4d:24:fa:51:f3:ba:12:3f:c6:95:a3:f7:da:55:96:22:d2:a4: 1b:95:34:10:04:a3:f0:6a:b6:43:8d:c0:c6:fe:65:72:63:b2: 23:03:16:55:a1:22:1e:d5:70:38:e7:2a:86:80:83:79:97:8d: 01:1a:f8:45:ba:de:29:c7:5b:11:44:ef:33:0f:b7:2c:3f:a5: 8e:44:a4:84:83:16:6c:1b:fb:af:ad:61:e7:61:c2:3e:14:4a: f5:dc:52:8b:c0:8c:13:75:d5:5b:22:f1:42:12:31:91:ac:97: 19:a5:36:27:75:36:1c:2a:2f:51:07:cc:90:90:b9:33:45:1a: 0c:49:89:21:63:07:ca:66:0a:96:d1:80:d9:aa:09:11:61:12: e1:d3:88:d4:0a:34:ef:1f:5d:66:19:94:8d:e5:9c:a1:a0:c4: d3:0d:2c:b0:30:29:b4:90:ac:44:a5:87:b2:bf:45:73:3c:0e: 24:5f:e8:17 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57HEOgy9oQv9PrFCOx698MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTAwYmJhNjRmNTE2YjhkNjMzNWEwMWNmMzA0YjgyMmRlZTFhZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r8bprZHX72FgZLWwPwQR/vtPWDk dNyY4zeN0FYLcpdLzcIWCmlc4nFFV+mCNzPJTeP225Xmiv4L/K08bsX9bFdgqtpI 5H7y5nyL3neHbY4zbFevzzJhFDK6VJV6DAnYvGpVY2OE7m3WqBBu4o+d8wMQuArC I7FJ58CNk0f6zUZS/LyuHpjrUSj4l8aTpeawqobRLoejngmamgL9Ioue4OXowtdp 4izPy2TAIMTU4UPsrWxYjI3IouhkI7nQmXz4ZNnH6vgKa7c/eNQoeAI/ydKalmI8 Or0AejZzlMTFam0PU31s/wv1XtaFtP0S5kkDY6V51f8pwBaKr5DZ6kjjMwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFG4Au6ZPUWuNYzWgHPMEuCLe4a7QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2FlNWU2 Yy1jNzBmLTQwZjItODkwZC01NzVjZjVkMzM1ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvYWU1ZTZj LWM3MGYtNDBmMi04OTBkLTU3NWNmNWQzMzVlNC8xL2JnQzdwazlSYTQxak5hQWM4 d1M0SXQ3aHJ0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQW8MA0EAgACMAcDBQAqAn9AMA0GCSqGSIb3 DQEBCwUAA4IBAQAP36GvpFz3JtxHQ+69F5vV2SY1XTXFYaJpA0v/xs7Fk1BCL8vC KlpzrITDPh7znYExgFymmOn9PLiTrcNGqWdnrBzLuTkyUAFNJPpR87oSP8aVo/fa VZYi0qQblTQQBKPwarZDjcDG/mVyY7IjAxZVoSIe1XA45yqGgIN5l40BGvhFut4p x1sRRO8zD7csP6WORKSEgxZsG/uvrWHnYcI+FEr13FKLwIwTddVbIvFCEjGRrJcZ pTYndTYcKi9RB8yQkLkzRRoMSYkhYwfKZgqW0YDZqgkRYRLh04jUCjTvH11mGZSN 5ZyhoMTTDSywMCm0kKxEpYeyv0VzPA4kX+gX -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:12 2026 by rpki-client