This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer File: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer (raw, json) Hash identifier: 1dqXjuxVEfwBNBGDBbaUduq61pQhh/Z/BiVYQ/hdGoc= Subject key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C322021D623D0748A139AA9FD4433B453 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 08:44:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48266 AS: 213169 IP: 2a09:5f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:20:21:d6:23:d0:74:8a:13:9a:a9:fd:44:33:b4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 08:44:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dffcb87c2246fa389c428e0f153edf259e5450f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d0:79:09:f6:8f:b0:6c:68:0e:9a:af:1b:3c: 5f:7a:ef:8f:3a:a4:e3:6e:fb:57:3f:d0:89:90:89: 3b:0b:d0:69:8a:d2:7e:f6:36:6b:76:91:cb:81:01: 73:dd:32:29:c9:65:22:97:26:c8:fd:9a:ca:e6:f5: 6c:5b:a4:eb:ed:cd:ae:bb:b0:06:93:0f:4e:a7:ef: 7e:78:cf:0f:0b:42:f8:be:e0:f6:39:de:62:94:f8: 44:47:28:7c:76:ec:79:b2:76:00:4a:e5:22:2f:90: db:51:b7:09:fa:7b:35:d2:0a:b3:cb:ba:e5:5e:c7: 4b:b9:29:47:51:0b:12:c8:68:15:2e:15:f9:bf:3c: 36:24:8f:de:ae:d7:ba:a3:52:b2:54:4a:c9:d8:15: 34:ff:35:05:1d:7c:b4:c6:5b:c8:c2:62:63:1b:bd: 8d:b3:34:5a:25:9a:33:f7:6f:19:4e:3c:cb:8b:e4: 47:30:63:63:3c:29:e1:34:3c:36:24:e7:b5:4f:c6: 3e:d8:09:95:2f:3d:7d:65:50:69:23:8a:84:80:d2: cf:5b:a0:36:cb:5b:09:13:01:ce:89:06:70:b7:a3: 03:08:92:9a:cc:00:68:72:d0:2d:9d:5e:6a:91:f6: 81:22:f0:4f:7a:00:21:4b:99:3c:2d:3d:5b:71:61: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:5f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48266 213169 Signature Algorithm: sha256WithRSAEncryption ae:05:2b:4e:b1:40:63:40:6b:6d:a9:7e:5a:82:2d:cf:3f:65: 40:1b:4e:04:08:c5:36:7e:f6:49:74:f9:63:e3:51:5a:17:99: 9a:f8:1d:c9:68:3e:3a:3b:a0:9e:50:5a:bb:e8:95:00:74:bd: 6e:60:bc:08:87:93:21:47:f9:88:50:52:45:83:80:58:92:52: 3d:c1:dc:aa:49:e0:46:8b:83:dc:5d:76:41:63:96:fe:24:6f: f9:92:e0:2f:db:c8:7a:cb:d9:fd:05:9d:90:1d:48:19:7b:a6: 89:8f:fa:e7:58:80:c0:22:83:f8:51:7c:86:ee:83:9f:74:29: 53:25:d8:d6:6f:27:64:c6:46:d7:3a:f5:e1:54:a1:2e:dd:1c: 81:27:39:83:4b:e6:8c:ee:54:d7:9d:c2:35:35:29:95:f1:93: f3:7f:fc:65:16:38:a2:83:7c:dc:b4:33:b4:86:f0:86:51:94: bc:16:a9:4f:6b:60:fc:43:ea:e6:36:4a:f5:c4:4a:9e:bb:0c: 94:a2:94:09:1b:18:e9:6c:59:00:b2:50:50:b5:8a:e4:74:c3: 23:32:dd:77:ad:3c:70:9e:07:62:e5:e5:45:b6:e4:0a:1f:5c: c1:c0:98:56:dc:49:9d:00:e8:d2:39:2b:5f:82:9f:01:d2:ea: ea:8d:70:72 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZwyICHWI9B0ihOaqf1EM7RTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MDg0NDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGZmY2I4N2MyMjQ2ZmEzODljNDI4ZTBmMTUzZWRmMjU5ZTU0NTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9B5CfaPsGxoDpqvGzxfeu+POqTj bvtXP9CJkIk7C9BpitJ+9jZrdpHLgQFz3TIpyWUilybI/ZrK5vVsW6Tr7c2uu7AG kw9Op+9+eM8PC0L4vuD2Od5ilPhERyh8dux5snYASuUiL5DbUbcJ+ns10gqzy7rl XsdLuSlHUQsSyGgVLhX5vzw2JI/erte6o1KyVErJ2BU0/zUFHXy0xlvIwmJjG72N szRaJZoz928ZTjzLi+RHMGNjPCnhNDw2JOe1T8Y+2AmVLz19ZVBpI4qEgNLPW6A2 y1sJEwHOiQZwt6MDCJKazABoctAtnV5qkfaBIvBPegAhS5k8LT1bcWHwcQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFG3/y4fCJG+jicQo4PFT7fJZ5UUPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2E2MzNh Ni0yN2IyLTQxNzQtYTdiMC02YWVkZjEwNDNjNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYTYzM2E2 LTI3YjItNDE3NC1hN2IwLTZhZWRmMTA0M2M3My8xL2JmX0xoOElrYjZPSnhDamc4 VlB0OGxubFJROC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKglfQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAvIoCAwNAsTANBgkqhkiG9w0BAQsFAAOCAQEArgUrTrFAY0Brbal+WoItzz9l QBtOBAjFNn72SXT5Y+NRWheZmvgdyWg+OjugnlBau+iVAHS9bmC8CIeTIUf5iFBS RYOAWJJSPcHcqkngRouD3F12QWOW/iRv+ZLgL9vIesvZ/QWdkB1IGXumiY/651iA wCKD+FF8hu6Dn3QpUyXY1m8nZMZG1zr14VShLt0cgSc5g0vmjO5U153CNTUplfGT 83/8ZRY4ooN83LQztIbwhlGUvBapT2tg/EPq5jZK9cRKnrsMlKKUCRsY6WxZALJQ ULWK5HTDIzLdd608cJ4HYuXlRbbkCh9cwcCYVtxJnQDo0jkrX4KfAdLq6o1wcg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:32 2026 by rpki-client