This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer File: bAhhkss_KPWLIUTd4tkaIxIFb8g.cer (raw, json) Hash identifier: sG+jOd72mepoah0+GHX6rE7v5r34wb2Zz1JRM6GYdKU= Subject key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB5472F95CF7BECB6255DA31102526 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58004 IP: 91.237.184.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:54:72:f9:5c:f7:be:cb:62:55:da:31:10:25:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:69:7b:9a:d1:07:47:ff:eb:c4:4c:e7:21: 72:ad:56:4e:d4:bb:a3:37:7a:56:89:33:0f:60:d4: 1c:bd:25:18:98:90:e8:01:8e:86:f7:21:fd:51:8e: 38:16:fe:2b:a7:11:1a:50:d0:30:90:68:27:89:bc: cc:bf:7c:cf:f3:3d:3c:8f:0b:43:e3:a5:80:73:8c: 35:34:63:c4:94:32:e1:55:45:cc:95:8c:6e:2c:6c: 89:3f:55:f5:09:06:99:60:13:73:03:e8:32:ca:fd: 1b:80:56:16:07:62:27:73:2c:4f:bf:0b:52:e3:0d: df:1e:6f:18:66:72:4d:d5:74:ad:a3:d0:2f:69:6a: 1d:01:f8:38:ed:79:87:51:1b:ac:f6:93:68:eb:48: 1e:5b:7f:be:d2:07:b1:fc:75:b6:3d:c0:a4:3a:c1: 36:b4:a1:9a:37:dc:fa:97:0c:bb:3b:f9:7c:10:36: a9:38:98:7a:64:ec:f7:76:e9:c1:69:3d:68:af:c7: 4d:0a:30:f5:4d:15:63:fc:08:03:87:63:9c:f4:04: 74:92:ca:58:7a:c6:27:c4:2c:f9:ae:ba:5a:31:c7: fa:e0:c6:e7:05:37:12:e2:4f:a0:2e:21:86:9d:a9: 81:d0:89:5b:67:0e:3b:74:aa:a5:ad:e5:19:9b:72: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.184.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58004 Signature Algorithm: sha256WithRSAEncryption 02:24:a4:3a:02:34:13:2d:2b:11:25:39:76:ca:fe:08:dd:4b: 97:de:3f:05:d6:5a:78:e9:eb:7d:95:19:93:b1:10:78:68:4a: 63:1d:fd:b2:48:93:ee:7e:39:70:45:c3:b8:c0:69:4b:6a:80: 62:14:88:6b:89:d2:1a:4b:cf:1e:48:30:48:a8:d2:97:10:47: e2:d3:50:79:e7:52:b3:d1:91:9d:08:01:ff:22:f8:53:9e:15: 72:0c:f3:75:86:92:50:92:ef:53:cf:f5:4f:84:e8:b6:4b:94: 83:fc:01:7c:f7:4a:3a:d2:96:bd:e7:73:76:6f:b8:38:70:e9: 25:02:7b:29:df:8a:e7:f2:cf:f6:47:05:2a:76:f5:3c:3b:98: 72:ac:57:3f:cf:2b:58:11:13:bd:50:fe:c3:5a:87:8c:7a:81: 90:3a:fd:71:a4:db:59:ab:4b:ee:43:5e:7a:fa:dd:ca:d9:67: a9:3c:20:83:c0:61:39:b7:ca:9c:ff:68:d0:01:0e:bb:d2:3f: ba:93:10:de:53:46:0f:29:81:73:af:2c:c4:46:fe:7e:c9:5f: 5d:40:b2:a7:a6:a3:b6:c5:b8:2f:17:bb:46:01:22:39:2f:f4: 88:59:c7:d3:11:ec:7e:68:b9:8a:48:aa:05:37:53:4c:3d:60: e1:35:7b:6c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9y1Ry+Vz3vstiVdoxECUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzA4NjE5MmNiM2YyOGY1OGIyMTQ0ZGRlMmQ5MWEyMzEyMDU2ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ9pe5rRB0f/68RM5yFyrVZO1Luj N3pWiTMPYNQcvSUYmJDoAY6G9yH9UY44Fv4rpxEaUNAwkGgnibzMv3zP8z08jwtD 46WAc4w1NGPElDLhVUXMlYxuLGyJP1X1CQaZYBNzA+gyyv0bgFYWB2IncyxPvwtS 4w3fHm8YZnJN1XSto9AvaWodAfg47XmHURus9pNo60geW3++0gex/HW2PcCkOsE2 tKGaN9z6lwy7O/l8EDapOJh6ZOz3dunBaT1or8dNCjD1TRVj/AgDh2Oc9AR0kspY esYnxCz5rrpaMcf64MbnBTcS4k+gLiGGnamB0IlbZw47dKqlreUZm3JWLwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGwIYZLLPyj1iyFE3eLZGiMSBW/IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2U2YTEy MC00MWI0LTRkYjQtODNiOS1lZWY1MjlhNDc3ZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZTZhMTIw LTQxYjQtNGRiNC04M2I5LWVlZjUyOWE0NzdlNy8xL2JBaGhrc3NfS1BXTElVVGQ0 dGthSXhJRmI4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+24MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDilDANBgkqhkiG9w0BAQsFAAOCAQEAAiSkOgI0Ey0rESU5dsr+CN1Ll94/BdZa eOnrfZUZk7EQeGhKYx39skiT7n45cEXDuMBpS2qAYhSIa4nSGkvPHkgwSKjSlxBH 4tNQeedSs9GRnQgB/yL4U54VcgzzdYaSUJLvU8/1T4TotkuUg/wBfPdKOtKWvedz dm+4OHDpJQJ7Kd+K5/LP9kcFKnb1PDuYcqxXP88rWBETvVD+w1qHjHqBkDr9caTb WatL7kNeevrdytlnqTwgg8BhObfKnP9o0AEOu9I/upMQ3lNGDymBc68sxEb+fslf XUCyp6ajtsW4Lxe7RgEiOS/0iFnH0xHsfmi5ikiqBTdTTD1g4TV7bA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:59 2026 by rpki-client