This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer (raw, json) Hash identifier: Sj+UC5BEoFBgKFYzx79BMNxD7y1wi+5dgP2a7s3GtgU= Subject key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECC5EC97AC75DF30EA612EFAAED8C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204050 IP: 185.116.52.0/22 IP: 2a06:7a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c5:ec:97:ac:75:df:30:ea:61:2e:fa:ae:d8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:a6:df:99:8d:bc:94:3a:e2:1a:67:95:6e: df:b5:b6:8a:97:2e:0e:4f:99:fb:37:80:29:6b:00: 15:1c:12:64:f2:32:cc:30:72:72:26:de:11:1c:01: cb:5a:d8:51:19:86:59:a1:70:7d:e5:c3:10:4b:5a: c9:b4:c2:6f:b8:53:b1:7a:79:78:45:d2:34:94:9b: 6b:8e:af:42:79:05:b7:11:40:f9:bc:a1:6f:4c:eb: fd:23:b5:04:a9:a6:35:71:0e:0c:c8:0c:84:67:f0: e4:a2:6b:0f:47:c8:1b:c4:f8:f9:db:a7:e5:e2:80: 6c:90:e6:e8:78:32:8b:53:df:fe:d4:c3:7d:ad:22: 9a:a2:1c:a5:4f:fc:43:7d:eb:c3:85:60:fc:ef:e8: f4:31:00:cc:13:33:b1:38:48:0e:6a:22:c3:72:1a: d4:b5:01:8f:9c:73:55:0f:68:e8:5e:06:5a:bd:17: 34:e1:ae:8c:19:0d:c2:94:c5:b3:1c:63:b6:48:c9: 7a:30:73:16:6c:91:51:6f:ab:27:2b:d6:79:72:a2: 6b:4b:27:40:5b:88:22:74:0e:78:db:f6:fc:65:00: eb:18:f9:c7:b7:db:1b:bc:c6:e9:97:82:81:aa:ff: 71:5a:0f:3e:5d:16:4c:12:b0:c3:b8:a5:02:c2:fa: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.52.0/22 IPv6: 2a06:7a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204050 Signature Algorithm: sha256WithRSAEncryption 07:15:52:77:b9:2d:58:94:5e:4f:db:cf:58:cf:3f:54:33:72: b8:85:91:fe:4f:fc:7d:c9:bb:b0:93:67:47:36:a5:b6:44:8e: 5f:0d:70:f8:a0:c5:9f:a9:b0:b8:2f:02:3c:39:c8:a2:fd:1e: f3:08:83:84:4b:3a:d5:f9:0b:0b:a4:d1:60:3c:da:c6:1e:e4: e9:35:90:2a:e0:73:7d:36:68:76:ea:b6:ac:f2:67:f8:33:78: f9:2e:78:b0:08:95:c9:37:c4:24:41:fe:67:83:21:5f:e3:21: eb:73:f8:79:75:93:bd:0c:1b:04:83:80:9f:84:71:15:d4:c4: f4:e6:d1:b7:8e:0d:52:4f:d9:36:a1:c2:26:9c:3b:44:ef:1a: 22:cb:34:9d:4c:06:2b:23:15:ca:03:37:98:94:47:e9:53:4d: 90:9f:a8:49:10:73:66:10:ab:91:bb:db:64:c8:96:4e:94:47: 39:ee:ed:f8:c1:e0:32:f5:35:c1:89:07:00:69:37:cb:ca:82: 82:4a:66:41:9b:3e:82:75:9a:e3:ec:4c:71:fd:56:16:03:9d: 8a:91:31:60:71:e7:46:69:7a:6a:47:01:2b:69:05:83:43:db: 3e:a1:db:ab:4e:48:10:85:53:1e:f1:5c:d0:b3:87:71:6e:85: 7e:7d:79:06 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87MXsl6x13zDqYS76rtjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDcxODgxNzc4YTFlMTJmNmQ5N2M1Mjg4ZWZkNGNiOTU2M2QxZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DOm35mNvJQ64hpnlW7ftbaKly4O T5n7N4ApawAVHBJk8jLMMHJyJt4RHAHLWthRGYZZoXB95cMQS1rJtMJvuFOxenl4 RdI0lJtrjq9CeQW3EUD5vKFvTOv9I7UEqaY1cQ4MyAyEZ/DkomsPR8gbxPj526fl 4oBskOboeDKLU9/+1MN9rSKaohylT/xDfevDhWD87+j0MQDMEzOxOEgOaiLDchrU tQGPnHNVD2joXgZavRc04a6MGQ3ClMWzHGO2SMl6MHMWbJFRb6snK9Z5cqJrSydA W4gidA542/b8ZQDrGPnHt9sbvMbpl4KBqv9xWg8+XRZMErDDuKUCwvpUDwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFARxiBd4oeEvbZfFKI79TLlWPR1JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzRhOGNm YS01NDJiLTQwYjItOGEwOC00MmVhNDdiMTI1MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvNGE4Y2Zh LTU0MmItNDBiMi04YTA4LTQyZWE0N2IxMjUzNy8xL0JIR0lGM2loNFM5dGw4VW9q djFNdVZZOUhVay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXQ0MA0EAgACMAcDBQMqBnpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMdEjANBgkqhkiG9w0BAQsFAAOCAQEABxVSd7ktWJRe T9vPWM8/VDNyuIWR/k/8fcm7sJNnRzaltkSOXw1w+KDFn6mwuC8CPDnIov0e8wiD hEs61fkLC6TRYDzaxh7k6TWQKuBzfTZoduq2rPJn+DN4+S54sAiVyTfEJEH+Z4Mh X+Mh63P4eXWTvQwbBIOAn4RxFdTE9ObRt44NUk/ZNqHCJpw7RO8aIss0nUwGKyMV ygM3mJRH6VNNkJ+oSRBzZhCrkbvbZMiWTpRHOe7t+MHgMvU1wYkHAGk3y8qCgkpm QZs+gnWa4+xMcf1WFgOdipExYHHnRml6akcBK2kFg0PbPqHbq05IEIVTHvFc0LOH cW6Ffn15Bg== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:31 2026 by rpki-client