This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer File: BozI9XorPCKZsfSCtn4V2d5DrTw.cer (raw, json) Hash identifier: xYCxy1MJY19Dv85AhNStrQz2R5D/r9DTdwbL4MciucI= Subject key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11B13155DF3258879535FF9ED16EB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25133 IP: 193.0.240.0/24 IP: 193.254.196.0/23 IP: 195.95.232.0/23 IP: 2a02:c080::/29 IP: 2a0a:1380::/29 IP: 2a0b:34c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b1:31:55:df:32:58:87:95:35:ff:9e:d1:6e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:f8:a5:02:58:12:de:43:7d:e9:ca:8e:29: 06:cc:1e:6b:09:5b:57:86:54:7a:9d:a8:a2:f5:11: b3:9d:a9:cc:32:d2:21:2e:11:78:b5:86:62:2a:b9: ad:6f:3f:9f:c0:83:56:b7:1b:01:99:6c:48:f7:27: a0:2d:af:ec:30:6b:a2:5b:15:00:31:b2:d1:47:0e: 6b:fc:19:75:57:72:6e:6e:af:e3:d9:42:63:17:55: 73:41:91:2a:36:2b:78:bf:3a:db:f5:d3:96:6b:04: f1:d8:e4:e0:71:b0:cf:cf:14:88:9d:57:14:13:c7: 57:19:ea:07:4c:ec:da:f2:f0:fd:d4:b0:ac:22:fd: c1:6b:ac:1d:80:db:0a:20:04:6e:95:f3:7b:d3:19: db:01:83:f5:b1:50:eb:01:80:fe:5d:6d:91:2c:40: de:3c:e7:f8:e4:c9:60:80:f7:45:00:c6:d8:69:09: e6:b7:9e:c0:39:cf:8f:97:6a:d6:61:66:ec:a5:94: 35:84:b6:d7:e2:6a:02:20:23:e1:93:2b:e3:77:aa: 55:c0:65:d8:70:eb:03:f9:cb:62:d0:be:09:72:2f: 83:3f:41:93:c9:66:c4:8c:f9:26:e4:72:c8:5b:20: bf:23:b5:36:e9:63:6d:f9:be:53:a1:53:aa:38:88: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.240.0/24 193.254.196.0/23 195.95.232.0/23 IPv6: 2a02:c080::/29 2a0a:1380::/29 2a0b:34c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25133 Signature Algorithm: sha256WithRSAEncryption 5e:7f:20:5c:e8:f8:4d:ff:5f:68:6d:7a:98:60:87:7a:7e:cf: e8:a9:d6:5e:65:3d:84:c7:80:b7:9b:67:17:1b:8a:51:8e:82: a9:24:8b:66:ac:f0:16:51:2d:39:fa:5a:94:4c:19:c7:34:d8: 96:76:2a:6b:b5:14:c4:66:d3:76:29:a8:ab:40:e3:9f:68:f2: 4f:3c:2f:a8:9b:04:a2:97:73:82:b9:e4:42:9e:5f:71:d7:6f: 44:c2:11:c3:86:c7:7e:4a:b5:7b:e9:21:7a:ae:e3:44:e9:85: 91:f4:15:60:52:58:14:ad:be:0a:73:b6:1d:06:a2:d1:09:7f: 7e:f0:90:d1:d1:1b:6f:9c:73:a1:df:69:33:3e:02:41:9f:cc: 86:d7:04:55:96:18:f4:dc:8c:6e:87:26:90:cb:5e:5e:5a:98: b1:57:0b:46:a2:a8:14:80:bc:7d:8c:31:01:6f:34:cc:7d:86: eb:d7:f5:fd:de:0f:13:b7:f2:62:9f:c6:96:f6:39:79:91:1e: db:10:f6:d3:af:48:55:e7:de:e3:0e:7d:4a:19:4a:9a:bc:a8: f1:1c:e7:fb:e2:0f:de:c9:22:64:e0:6d:40:82:de:ee:21:2d: 01:57:ea:7f:41:0e:4c:64:51:38:bc:87:91:8c:02:21:b6:09: a2:da:82:7f -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt8EbExVd8yWIeVNf+e0W62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjhjYzhmNTdhMmIzYzIyOTliMWY0ODJiNjdlMTVkOWRlNDNhZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp274pQJYEt5DfenKjikGzB5rCVtX hlR6naii9RGznanMMtIhLhF4tYZiKrmtbz+fwINWtxsBmWxI9yegLa/sMGuiWxUA MbLRRw5r/Bl1V3Jubq/j2UJjF1VzQZEqNit4vzrb9dOWawTx2OTgcbDPzxSInVcU E8dXGeoHTOza8vD91LCsIv3Ba6wdgNsKIARulfN70xnbAYP1sVDrAYD+XW2RLEDe POf45MlggPdFAMbYaQnmt57AOc+Pl2rWYWbspZQ1hLbX4moCICPhkyvjd6pVwGXY cOsD+cti0L4Jci+DP0GTyWbEjPkm5HLIWyC/I7U26WNt+b5ToVOqOIg3NQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFAaMyPV6KzwimbH0grZ+FdneQ608MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2RiZGU4 Yy1hMGZjLTQ0ZDctOTkzYi0yYTI4NDE2ZDQ1YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvZGJkZThj LWEwZmMtNDRkNy05OTNiLTJhMjg0MTZkNDViMi8xL0Jvekk5WG9yUENLWnNmU0N0 bjRWMmQ1RHJUdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQAwQDwAwQBwf7EAwQBw1/oMBsEAgACMBUDBQMq AsCAAwUDKgoTgAMFAyoLNMAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICYi0wDQYJ KoZIhvcNAQELBQADggEBAF5/IFzo+E3/X2htephgh3p+z+ip1l5lPYTHgLebZxcb ilGOgqkki2as8BZRLTn6WpRMGcc02JZ2Kmu1FMRm03YpqKtA459o8k88L6ibBKKX c4K55EKeX3HXb0TCEcOGx35KtXvpIXqu40TphZH0FWBSWBStvgpzth0GotEJf37w kNHRG2+cc6HfaTM+AkGfzIbXBFWWGPTcjG6HJpDLXl5amLFXC0aiqBSAvH2MMQFv NMx9huvX9f3eDxO38mKfxpb2OXmRHtsQ9tOvSFXn3uMOfUoZSpq8qPEc5/viD97J ImTgbUCC3u4hLQFX6n9BDkxkUTi8h5GMAiG2CaLagn8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:33 2026 by rpki-client