This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer File: bHO9JP2DCIa_otKWFBbSGF3jN3I.cer (raw, json) Hash identifier: BYq+wVOg8zF0wRbRqTwyPCr9x9ZieStuwoJ3uxj2TJw= Subject key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC947EF38A74F552C1872ED893B0D0C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208654 IP: 45.85.148.0/22 IP: 2a0e:c680::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:47:ef:38:a7:4f:55:2c:18:72:ed:89:3b:0d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c73bd24fd830886bfa2d2961416d2185de33772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:a6:c5:56:40:72:a7:cf:9f:f5:4d:33:33: c5:c5:4c:8e:2e:d1:aa:77:1a:f6:8a:7f:96:e1:a2: c9:1d:57:65:8e:ed:70:28:59:11:5f:54:b4:9b:ab: 62:6f:2b:91:48:f6:91:88:6e:d9:aa:4c:f0:4e:0e: bf:b8:54:eb:3a:2f:3f:bf:5f:ad:4b:39:45:0c:2b: 14:8f:d1:d3:0b:87:64:8e:43:bd:b8:3e:50:77:6d: 1c:ff:66:5e:de:e3:6b:4c:a6:4c:c9:6c:88:99:6f: 9c:4a:6e:18:04:56:11:5a:f8:51:4b:0c:f5:c9:f8: 7d:59:ca:e4:8c:b2:29:d8:b8:ab:ac:ff:a3:50:44: 5b:38:d4:42:6f:bd:34:25:bd:42:86:7c:88:9f:b0: 54:56:b3:4d:3d:69:34:ed:f6:2e:57:c4:83:62:f0: 10:2a:53:88:df:98:ef:88:ef:7a:62:23:73:21:27: 94:7a:0d:d5:be:c3:07:48:7a:d9:cb:85:94:44:fd: 47:e2:80:35:1e:51:3d:b7:3a:a9:58:71:53:b2:2e: 84:e0:0d:19:36:2b:d9:cf:78:f1:01:81:f9:ce:29: 18:5e:69:bf:33:48:91:7d:44:d4:32:53:84:62:e8: 51:05:02:bd:37:e8:c5:12:9e:5a:75:02:76:f0:6a: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.148.0/22 IPv6: 2a0e:c680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208654 Signature Algorithm: sha256WithRSAEncryption 89:72:26:7e:4b:9f:85:f7:c5:1b:ff:0d:56:5c:d3:00:e7:e6: b4:2b:86:c2:a0:92:af:3d:f1:3a:93:d4:0a:62:a8:07:df:6e: c0:28:40:e4:49:e5:a2:1e:11:55:b2:24:ad:a3:ae:89:f7:6a: f0:71:00:da:b0:69:16:db:58:3b:f2:e1:b1:d1:c0:1a:6e:71: 29:44:aa:d8:3f:f5:f9:de:18:b1:9b:0c:45:48:4a:4f:41:ac: 83:7f:3a:a0:af:69:3f:6a:f1:21:5d:e2:4e:ca:b7:91:6e:0f: bd:5f:40:0f:fa:b0:f2:e6:05:b2:4c:90:d0:bd:a9:b3:53:1a: 64:14:32:e3:be:47:98:20:d9:ba:5d:be:76:96:25:e4:de:36: 73:3a:3a:de:f8:d9:f1:64:3a:91:a2:2d:77:2d:f2:c8:b8:75: 2d:22:ed:48:d6:04:a3:6a:9e:d0:4d:04:e2:6d:a0:60:6f:ec: 7a:e0:7e:92:2b:51:10:90:c5:81:fb:c9:ae:37:f8:9c:c8:e0: 30:ab:28:d0:e1:81:08:ae:15:4a:45:8f:ab:05:75:aa:1e:a3: 34:46:08:90:7c:f8:a8:0f:b1:31:d9:53:c4:f7:d1:b2:18:92: 27:22:1f:c6:1a:0b:b1:7c:52:ab:54:d7:33:70:bb:74:61:15: db:aa:3b:01 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yUfvOKdPVSwYcu2JOw0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzczYmQyNGZkODMwODg2YmZhMmQyOTYxNDE2ZDIxODVkZTMzNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ+mxVZAcqfPn/VNMzPFxUyOLtGq dxr2in+W4aLJHVdlju1wKFkRX1S0m6tibyuRSPaRiG7ZqkzwTg6/uFTrOi8/v1+t SzlFDCsUj9HTC4dkjkO9uD5Qd20c/2Ze3uNrTKZMyWyImW+cSm4YBFYRWvhRSwz1 yfh9WcrkjLIp2LirrP+jUERbONRCb700Jb1ChnyIn7BUVrNNPWk07fYuV8SDYvAQ KlOI35jviO96YiNzISeUeg3VvsMHSHrZy4WURP1H4oA1HlE9tzqpWHFTsi6E4A0Z NivZz3jxAYH5zikYXmm/M0iRfUTUMlOEYuhRBQK9N+jFEp5adQJ28Go/NQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGxzvST9gwiGv6LSlhQW0hhd4zdyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4Lzk4ZGFi OC03YjI0LTQ5ZjMtYTM2Zi03M2ExNTdhMmI5OWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOThkYWI4 LTdiMjQtNDlmMy1hMzZmLTczYTE1N2EyYjk5Zi8xL2JITzlKUDJEQ0lhX290S1dG QmJTR0Yzak4zSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVWUMA0EAgACMAcDBQAqDsaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvDjANBgkqhkiG9w0BAQsFAAOCAQEAiXImfkufhffF G/8NVlzTAOfmtCuGwqCSrz3xOpPUCmKoB99uwChA5Enloh4RVbIkraOuifdq8HEA 2rBpFttYO/LhsdHAGm5xKUSq2D/1+d4YsZsMRUhKT0Gsg386oK9pP2rxIV3iTsq3 kW4PvV9AD/qw8uYFskyQ0L2ps1MaZBQy475HmCDZul2+dpYl5N42czo63vjZ8WQ6 kaItdy3yyLh1LSLtSNYEo2qe0E0E4m2gYG/seuB+kitREJDFgfvJrjf4nMjgMKso 0OGBCK4VSkWPqwV1qh6jNEYIkHz4qA+xMdlTxPfRshiSJyIfxhoLsXxSq1TXM3C7 dGEV26o7AQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:07 2026 by rpki-client