This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer File: bfpKH_x0mxxPo7bagZttu5rohaA.cer (raw, json) Hash identifier: 8x4sBnvVdN7CkBBAXjpIRbPES6scPJuUe8rlZQJax0g= Subject key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36B94109E7A0D70BE398250BBAE3CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8273 AS: 34705 AS: 39642 AS: 197288 IP: 5.206.192.0/21 IP: 31.185.64.0/19 IP: 31.193.232.0/21 IP: 37.128.208.0/20 IP: 45.14.140.0/22 IP: 45.80.92.0/22 IP: 46.32.32.0/19 IP: 62.107.0.0/16 IP: 78.157.96.0/19 IP: 85.27.128.0/17 IP: 85.218.128.0/17 IP: 86.52.0.0/16 IP: 89.184.128.0/19 IP: 91.144.192.0/18 IP: 94.138.64.0/19 IP: 95.154.0.0/18 IP: 128.0.8.0/21 IP: 178.132.224.0/20 IP: 178.155.128.0/17 IP: 185.5.164.0/22 IP: 185.10.212.0/22 IP: 185.37.84.0/22 IP: 212.10.0.0/16 IP: 212.37.128.0/19 IP: 212.112.128.0/19 IP: 2a00:1b70::/29 IP: 2a02:2b98::/32 IP: 2a02:6940::/32 IP: 2a03:7400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b9:41:09:e7:a0:d7:0b:e3:98:25:0b:ba:e3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:20:ca:ca:9d:79:f8:31:a4:e6:cd:ae:d3: 66:56:9b:ce:ed:71:f2:90:a4:8e:4e:77:9e:b5:6c: 99:10:62:aa:53:87:68:27:27:85:27:68:72:05:f9: 83:8a:94:b6:a3:79:5a:10:a6:e8:1d:c8:81:0a:79: f9:53:3b:ab:4f:ac:05:ad:4c:b1:7d:69:2a:9e:24: a8:c7:3d:6d:b4:a5:d8:6f:bf:07:59:30:26:b6:bd: 19:9f:82:ac:9b:79:61:af:1f:77:d2:7a:7b:b3:f0: 17:e1:b2:1d:9b:38:7d:bd:c0:54:80:f0:20:9e:b4: 1b:f9:46:7d:44:2a:a8:a0:c6:d0:ac:38:16:6e:fc: fd:8a:d1:c9:73:6f:ac:69:75:ba:07:cb:90:54:bd: b0:51:fa:00:0c:98:d6:36:0d:ba:c2:1c:e8:b3:95: d1:46:83:0b:d5:67:09:eb:26:d9:e3:a3:93:26:fa: 9b:41:a4:6d:ca:fe:ca:4a:76:67:95:df:29:84:3b: f2:7e:42:35:d2:37:35:21:1a:a4:d6:24:7d:62:1f: fa:93:18:f7:cc:ec:78:3a:75:76:ed:70:29:cc:66: 1b:78:5f:f9:49:1b:d0:c8:42:c4:6a:c6:56:62:7d: f4:0c:f5:8c:64:04:e6:a4:cc:35:f7:f4:35:fa:49: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.206.192.0/21 31.185.64.0/19 31.193.232.0/21 37.128.208.0/20 45.14.140.0/22 45.80.92.0/22 46.32.32.0/19 62.107.0.0/16 78.157.96.0/19 85.27.128.0/17 85.218.128.0/17 86.52.0.0/16 89.184.128.0/19 91.144.192.0/18 94.138.64.0/19 95.154.0.0/18 128.0.8.0/21 178.132.224.0/20 178.155.128.0/17 185.5.164.0/22 185.10.212.0/22 185.37.84.0/22 212.10.0.0/16 212.37.128.0/19 212.112.128.0/19 IPv6: 2a00:1b70::/29 2a02:2b98::/32 2a02:6940::/32 2a03:7400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8273 34705 39642 197288 Signature Algorithm: sha256WithRSAEncryption 31:24:02:c1:06:58:f7:6b:81:fb:9a:a5:89:bf:17:bd:b3:0c: 80:02:3f:e2:3d:00:55:e6:9e:c7:c2:3b:20:4e:5b:53:b1:8b: 2d:1b:07:38:0c:63:97:70:d3:63:38:cb:ba:91:21:a7:40:57: 9c:9b:99:3e:3d:ac:c5:b2:4e:45:1b:32:37:3f:3a:04:e3:d0: f2:1c:1c:eb:7c:7e:da:cb:1c:75:cf:c7:6d:57:c5:a7:f7:ec: 93:f8:aa:27:6d:26:68:8d:73:ce:05:9c:a9:21:06:ed:3b:80: af:50:e1:0c:85:ef:c7:ad:8f:79:21:63:d5:49:5f:11:79:ca: 01:ce:e8:f7:3d:7d:72:8e:37:c2:58:02:cf:23:66:c7:69:2f: 25:e8:31:e3:98:df:51:b3:cd:e3:94:2a:6d:46:6a:8a:51:54: 6e:9b:74:5e:08:04:99:38:aa:61:fb:8c:20:ab:34:34:6b:76: 51:1a:40:7c:0d:b9:eb:5d:71:3d:67:fb:b0:87:46:a9:42:f5: be:6a:08:04:7c:7c:19:17:1c:10:c5:3e:fd:e3:9b:8a:2a:2d: d3:6c:58:da:73:0b:ce:27:d8:33:44:ab:74:4b:28:6b:1d:8e: d9:70:19:84:9c:da:ca:d4:4e:b9:67:d4:d6:9b:ee:74:e4:27: 3d:c4:79:6e -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISAZt7NrlBCeeg1wvjmCULuuPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGZhNGExZmZjNzQ5YjFjNGZhM2I2ZGE4MTliNmRiYjlhZTg4NWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzggysqdefgxpObNrtNmVpvO7XHy kKSOTneetWyZEGKqU4doJyeFJ2hyBfmDipS2o3laEKboHciBCnn5UzurT6wFrUyx fWkqniSoxz1ttKXYb78HWTAmtr0Zn4Ksm3lhrx930np7s/AX4bIdmzh9vcBUgPAg nrQb+UZ9RCqooMbQrDgWbvz9itHJc2+saXW6B8uQVL2wUfoADJjWNg26whzos5XR RoML1WcJ6ybZ46OTJvqbQaRtyv7KSnZnld8phDvyfkI10jc1IRqk1iR9Yh/6kxj3 zOx4OnV27XApzGYbeF/5SRvQyELEasZWYn30DPWMZATmpMw19/Q1+knu+wIDAQAB o4IDZDCCA2AwHQYDVR0OBBYEFG36Sh/8dJscT6O22oGbbbua6IWgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2YyZjFj NS04NjZjLTQyYjUtOGI0Ni0zODY2OWQxZTIzMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZjJmMWM1 LTg2NmMtNDJiNS04YjQ2LTM4NjY5ZDFlMjMwMS8xL2JmcEtIX3gwbXh4UG83YmFn WnR0dTVyb2hhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHUBggrBgEF BQcBBwEB/wSBxDCBwTCBmgQCAAEwgZMDBAMFzsADBAUfuUADBAMfwegDBAQlgNAD BAItDowDBAItUFwDBAUuICADAwA+awMEBU6dYAMEB1UbgAMEB1XagAMDAFY0AwQF WbiAAwQGW5DAAwQFXopAAwQGX5oAAwQDgAAIAwQEsoTgAwQHspuAAwQCuQWkAwQC uQrUAwQCuSVUAwMA1AoDBAXUJYADBAXUcIAwIgQCAAIwHAMFAyoAG3ADBQAqAiuY AwUAKgJpQAMFAyoDdAAwKAYIKwYBBQUHAQgBAf8EGTAXoBUwEwICIFECAwCHkQID AJraAgMDAqgwDQYJKoZIhvcNAQELBQADggEBADEkAsEGWPdrgfuapYm/F72zDIAC P+I9AFXmnsfCOyBOW1Oxiy0bBzgMY5dw02M4y7qRIadAV5ybmT49rMWyTkUbMjc/ OgTj0PIcHOt8ftrLHHXPx21Xxaf37JP4qidtJmiNc84FnKkhBu07gK9Q4QyF78et j3khY9VJXxF5ygHO6Pc9fXKON8JYAs8jZsdpLyXoMeOY31GzzeOUKm1GaopRVG6b dF4IBJk4qmH7jCCrNDRrdlEaQHwNuetdcT1n+7CHRqlC9b5qCAR8fBkXHBDFPv3j m4oqLdNsWNpzC84n2DNEq3RLKGsdjtlwGYSc2srUTrln1Nab7nTkJz3EeW4= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:33 2026 by rpki-client