This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
File:                     bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer (raw, json)
Hash identifier:          iJlTQUxJ3MpfMvmGByhIt7Hm/n7RkSjoOVnldHKeXc4=
Subject key identifier:   6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7D5C66A0D6E0620CB64AA5677055D925
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 06:19:26 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 211153
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:66:a0:d6:e0:62:0c:b6:4a:a5:67:70:55:d9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 06:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:ab:05:74:4a:cd:ab:2a:62:8b:41:0b:81:
                    8e:b2:8a:bf:c4:35:02:52:ff:b5:6b:ae:ce:f2:f9:
                    dc:8e:b5:1b:1e:dd:27:a4:df:43:b0:c3:2a:24:19:
                    a6:f6:3c:28:e9:4d:ae:d1:03:33:9c:a7:91:8c:5c:
                    0a:2a:7f:08:8c:64:a9:a9:75:3e:5f:40:c8:6c:c6:
                    b0:44:bc:84:66:bd:b1:7b:79:0e:d2:15:6a:ed:63:
                    e9:c1:7b:be:a4:e8:92:6d:45:75:0f:fd:21:02:0c:
                    cc:97:bb:04:de:76:d6:ca:c5:90:51:53:40:cf:19:
                    d5:27:bb:1e:3b:2c:a3:77:e3:cd:18:5f:bb:1f:e0:
                    d2:19:d0:a3:8d:18:9f:12:f9:23:60:37:99:a1:7d:
                    b5:e9:a4:67:a2:ea:ce:43:3a:04:b2:96:e1:99:dc:
                    e8:67:58:6d:d2:8a:c0:9c:b3:a1:d0:d2:4b:9a:bc:
                    77:46:c2:22:54:b6:27:cb:4e:ab:51:17:94:66:2f:
                    cf:8b:74:29:52:5d:31:b1:d9:b2:a6:51:0b:da:62:
                    e7:71:b0:83:4f:66:b2:83:af:01:1a:a6:fa:9e:37:
                    3a:dd:d7:6f:17:3b:b0:5e:22:7e:78:57:7c:d4:d1:
                    b1:cc:41:ff:90:35:2e:f7:60:00:d1:09:80:5c:74:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211153

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:1a:8d:56:b8:5c:84:3a:40:cf:30:87:a6:54:2a:53:dc:
         0b:fd:dc:39:12:18:f0:83:fc:47:6f:93:30:75:26:27:fd:79:
         71:f1:46:b7:d9:e4:7a:02:b8:32:8a:03:6e:2f:3a:93:ce:84:
         32:31:f7:3a:f9:64:7d:7e:63:bc:f7:9b:39:48:ea:b2:28:94:
         88:70:a0:9a:c5:c0:a4:37:84:89:c6:50:7e:30:eb:58:57:5e:
         59:28:b3:fe:c3:54:2f:64:21:cf:c0:ba:e9:a2:fc:d1:92:b2:
         4d:7d:61:5f:d2:b6:f5:d3:82:c3:0e:31:a7:7a:00:d3:9e:19:
         ac:70:93:98:2a:60:b5:85:52:3e:2b:82:89:10:0e:02:f8:28:
         8b:eb:1c:25:bd:17:4b:01:84:f6:36:f9:09:03:52:a0:3c:e8:
         6b:88:a4:c3:cc:29:8a:06:7a:75:2a:06:46:2d:e9:07:03:77:
         f0:82:39:17:81:34:eb:0a:98:a8:7b:b7:b4:f6:85:ef:c1:67:
         50:04:b7:79:27:f5:6c:bc:08:e3:1d:7d:b0:b7:2a:c7:5b:73:
         2a:47:8f:93:6e:55:42:f7:2b:69:a5:33:c3:25:35:c1:a9:50:
         a3:04:31:a5:ca:2e:49:a0:ac:5e:56:15:02:14:35:17:de:1d:
         e3:59:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----