This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer File: bQih9MOF86e2KYTVPoFmWplUEPM.cer (raw, json) Hash identifier: lHHHf6SPbV+EPoWYfaqqr5AuRh7+UiyxutnITzrJSSA= Subject key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD2EFC4D0B0E703E5F8F9D1FA0328 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42511 IP: 83.143.156.0/22 IP: 109.95.72.0/21 IP: 194.143.150.0/23 IP: 2001:678:2e8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d2:ef:c4:d0:b0:e7:03:e5:f8:f9:d1:fa:03:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:e1:c4:bd:a8:10:47:6d:61:82:ea:33:0e: a1:63:57:79:bd:26:75:ad:c8:4d:1c:3d:1a:28:d6: 2a:92:47:12:39:32:a2:b2:a2:23:78:1e:a3:d8:a4: 59:be:80:b4:27:0f:63:fa:e8:a6:4f:27:b1:c9:7e: f9:ab:9b:86:95:f6:47:b5:59:31:f8:c1:16:70:dd: 55:81:bb:e0:a7:01:03:77:a6:87:41:97:e5:b3:bc: ab:7f:d3:0d:0d:a6:d9:ad:5a:2d:08:88:55:a0:f3: da:63:c7:09:b3:c7:c7:37:2a:1f:30:fc:48:8e:f6: 13:0e:b4:1f:df:3b:12:34:fe:dd:48:97:88:3f:9a: 51:f3:b0:ff:c7:fc:30:02:7b:ac:cf:22:e6:f3:55: 4f:dc:1b:47:7a:2f:02:b4:71:1b:5b:0b:ef:88:6a: 41:eb:c0:dc:6d:37:2b:8c:f3:d6:1f:26:98:09:cd: c1:03:7a:8f:99:92:24:b0:85:8e:f1:ed:73:06:29: 63:dd:5f:19:11:fd:c7:24:72:83:99:e3:32:38:f7: 4e:14:c9:bd:11:f6:ed:79:c7:b2:2e:d9:ae:a7:21: c1:81:c9:47:0f:5e:81:d4:6c:03:c1:08:c6:5d:69: 51:c5:07:c3:e0:9b:a9:9c:46:58:60:75:ea:a9:89: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.156.0/22 109.95.72.0/21 194.143.150.0/23 IPv6: 2001:678:2e8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42511 Signature Algorithm: sha256WithRSAEncryption 8a:1a:16:ee:49:7e:be:8b:b6:a0:b2:a6:4d:47:0a:18:94:73: b9:3d:58:5a:bb:8b:27:45:5e:c2:ca:53:4a:a9:9c:00:ce:c3: 37:fb:22:23:91:57:c7:1c:33:c7:ef:a4:67:91:0d:79:be:41: 90:c0:2d:78:d4:a1:6b:df:44:81:f2:19:fc:bf:7d:2e:65:bd: d7:8e:da:91:c0:31:3d:19:9c:37:56:cd:ce:be:87:f6:36:79: fb:b9:50:30:1d:93:a6:47:9a:f7:a2:d8:3e:f8:0f:ae:c9:54: ea:cb:4e:97:4e:62:86:14:4b:ad:42:ed:c3:25:72:99:56:92: b4:f5:6a:27:5a:f5:dc:ca:3d:48:4d:b9:c0:f7:e4:b5:ef:86: 65:22:2c:a9:af:e7:47:f2:49:3a:11:82:be:6f:60:30:b2:1d: a1:e5:da:71:b7:15:48:0a:f0:ae:9f:e4:4b:c2:cf:65:34:ea: 87:2a:12:3e:a4:12:25:35:96:11:a3:19:10:47:83:7b:70:0a: 43:8e:fc:99:20:60:47:d4:30:d3:0e:f7:6f:a6:29:2f:32:a3: d6:25:46:17:a8:59:15:ff:c3:68:b3:f2:16:aa:8f:92:ee:b3: 9c:38:7d:23:99:26:21:2d:db:61:1b:d2:94:5a:54:48:ee:2a: f4:83:7a:c7 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt8f9LvxNCw5wPl+PnR+gMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDA4YTFmNGMzODVmM2E3YjYyOTg0ZDUzZTgxNjY1YTk5NTQxMGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjrhxL2oEEdtYYLqMw6hY1d5vSZ1 rchNHD0aKNYqkkcSOTKisqIjeB6j2KRZvoC0Jw9j+uimTyexyX75q5uGlfZHtVkx +MEWcN1VgbvgpwEDd6aHQZfls7yrf9MNDabZrVotCIhVoPPaY8cJs8fHNyofMPxI jvYTDrQf3zsSNP7dSJeIP5pR87D/x/wwAnuszyLm81VP3BtHei8CtHEbWwvviGpB 68DcbTcrjPPWHyaYCc3BA3qPmZIksIWO8e1zBilj3V8ZEf3HJHKDmeMyOPdOFMm9 EfbteceyLtmupyHBgclHD16B1GwDwQjGXWlRxQfD4JupnEZYYHXqqYnf1wIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFG0IofTDhfOntimE1T6BZlqZVBDzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzEwNzQ2 Ny01NmExLTQ4YzUtYWRkMS00M2E4NTI2ZDgyYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvMTA3NDY3 LTU2YTEtNDhjNS1hZGQxLTQzYTg1MjZkODJiYi8xL2JRaWg5TU9GODZlMktZVFZQ b0ZtV3BsVUVQTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQCU4+cAwQDbV9IAwQBwo+WMA8EAgACMAkDBwAg AQZ4AugwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKYPMA0GCSqGSIb3DQEBCwUA A4IBAQCKGhbuSX6+i7agsqZNRwoYlHO5PVhau4snRV7CylNKqZwAzsM3+yIjkVfH HDPH76RnkQ15vkGQwC141KFr30SB8hn8v30uZb3XjtqRwDE9GZw3Vs3Ovof2Nnn7 uVAwHZOmR5r3otg++A+uyVTqy06XTmKGFEutQu3DJXKZVpK09WonWvXcyj1ITbnA 9+S174ZlIiypr+dH8kk6EYK+b2Awsh2h5dpxtxVICvCun+RLws9lNOqHKhI+pBIl NZYRoxkQR4N7cApDjvyZIGBH1DDTDvdvpikvMqPWJUYXqFkV/8Nos/IWqo+S7rOc OH0jmSYhLdthG9KUWlRI7ir0g3rH -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:40 2026 by rpki-client