This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer (raw, json) Hash identifier: Psjvb8inbP4FFDfkg3QYTJqBTSjTuVLQ29K1HqK3UWU= Subject key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CC893429C1854FA7A0137E0816D1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.0.208.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c8:93:42:9c:18:54:fa:7a:01:37:e0:81:6d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:11:40:79:c3:a1:d7:f5:b5:f0:4b:cc:a8: e9:07:12:5e:c8:9d:d2:7d:42:03:13:af:89:0f:ca: 3e:1e:bb:0d:06:c6:26:bd:87:08:79:64:eb:9e:c6: b7:33:5c:49:b0:48:f6:92:9b:1c:49:9f:25:52:50: 8b:bd:8b:06:2c:b2:31:47:e9:1e:ec:9f:94:a0:25: 42:68:57:59:f2:44:d8:f4:83:eb:0c:45:d5:d1:8f: ef:af:37:8f:90:44:ec:47:41:a4:34:69:7f:e8:3d: 9f:fc:d2:de:38:57:af:0e:17:d4:83:73:95:0f:27: 15:cc:e2:16:6d:f2:9b:80:15:ad:89:6f:c5:61:ba: 7e:8b:fb:54:7c:65:8c:ec:13:0d:bf:3e:39:02:48: 2a:60:9b:bd:44:89:a4:65:f0:46:f1:15:1a:bf:ef: 1d:c6:b6:b9:5b:43:f2:d1:86:e4:d5:7a:0d:0d:70: c5:cf:34:02:08:0e:68:a3:02:e1:72:ab:0c:ba:40: 19:82:2e:4d:fc:f3:83:2e:f3:3a:3d:5b:0b:30:8c: 63:7f:1a:77:05:1b:8a:a3:81:0a:6e:47:47:67:af: 4b:b1:f8:d3:8d:c0:cf:c0:d2:a0:23:d9:ba:38:5c: 1a:88:07:d7:cd:f9:70:86:d3:0f:09:cf:24:fc:75: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.208.0/24 Signature Algorithm: sha256WithRSAEncryption 04:dd:5a:c2:4e:26:f1:a0:a0:ed:52:cd:06:90:69:72:62:12: fe:94:76:f8:a8:48:f1:90:e2:d7:7a:32:07:48:af:e1:ca:0e: e9:e2:93:e6:53:be:30:cd:9e:74:4e:f6:76:b5:46:94:9c:25: df:14:f8:a8:ba:3d:ec:57:5f:22:e1:15:22:2d:8e:31:ad:3e: 45:f5:49:4b:19:b5:a8:1d:a7:04:88:35:06:23:14:eb:d7:5a: 9d:ed:da:ac:2a:11:3b:df:88:3b:0b:b1:31:7e:c4:48:43:83: ad:fb:ca:0d:99:a5:04:f9:8d:08:1d:aa:f4:12:78:86:06:1d: 83:43:2e:9b:e1:66:45:fd:20:25:1c:59:bc:0c:19:1c:1e:1e: 35:b1:4a:9a:2e:cb:db:a2:59:43:21:6d:c5:1b:da:a1:39:69: be:0b:e9:5b:2f:b4:c2:77:01:7b:39:84:8c:96:d6:4d:cf:2c: c9:db:e0:5d:50:fd:ea:d2:5a:2f:32:1a:ca:1f:5e:a3:9c:c3: 6c:ec:e9:b6:42:3f:04:36:28:d7:8b:14:78:eb:27:2c:d0:b5: a4:e5:ec:c5:cb:85:80:49:9a:7c:5d:58:fa:57:6c:8d:0e:e2: 24:9e:54:20:29:17:5c:de:85:a9:da:c0:f9:9a:45:1b:6b:c4: d5:8b:22:72 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XMiTQpwYVPp6ATfggW0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjhjYjg1YmM0ZTllNGI3MzJlOTU3ZjA4YWExYzAyMzdhYWRjNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzckRQHnDodf1tfBLzKjpBxJeyJ3S fUIDE6+JD8o+HrsNBsYmvYcIeWTrnsa3M1xJsEj2kpscSZ8lUlCLvYsGLLIxR+ke 7J+UoCVCaFdZ8kTY9IPrDEXV0Y/vrzePkETsR0GkNGl/6D2f/NLeOFevDhfUg3OV DycVzOIWbfKbgBWtiW/FYbp+i/tUfGWM7BMNvz45AkgqYJu9RImkZfBG8RUav+8d xra5W0Py0Ybk1XoNDXDFzzQCCA5oowLhcqsMukAZgi5N/PODLvM6PVsLMIxjfxp3 BRuKo4EKbkdHZ69LsfjTjcDPwNKgI9m6OFwaiAfXzflwhtMPCc8k/HV9oQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAaMuFvE6eS3MulX8IqhwCN6rcR/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzE4Yzg1 Ni0xOGIxLTQzNzUtYmNhYy0xOWYyMmVkNjEzYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvMThjODU2 LTE4YjEtNDM3NS1iY2FjLTE5ZjIyZWQ2MTNhNS8xL0JveTRXOFRwNUxjeTZWZndp cUhBSTNxdHhIOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwgDQMA0GCSqGSIb3DQEBCwUAA4IBAQAE3VrC TibxoKDtUs0GkGlyYhL+lHb4qEjxkOLXejIHSK/hyg7p4pPmU74wzZ50TvZ2tUaU nCXfFPiouj3sV18i4RUiLY4xrT5F9UlLGbWoHacEiDUGIxTr11qd7dqsKhE734g7 C7ExfsRIQ4Ot+8oNmaUE+Y0IHar0EniGBh2DQy6b4WZF/SAlHFm8DBkcHh41sUqa LsvbollDIW3FG9qhOWm+C+lbL7TCdwF7OYSMltZNzyzJ2+BdUP3q0lovMhrKH16j nMNs7Om2Qj8ENijXixR46ycs0LWk5ezFy4WASZp8XVj6V2yNDuIknlQgKRdc3oWp 2sD5mkUba8TViyJy -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:11 2026 by rpki-client