This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer (raw, json) Hash identifier: XTzzxHxRrynWe62n8a0iYyKMlcd6XXi/b8EBeYD/FKY= Subject key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B187953896496D7C66F18F98EEAFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.43.106.0 -- 193.43.108.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:18:79:53:89:64:96:d7:c6:6f:18:f9:8e:ea:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:50:57:4d:f7:81:91:fe:be:5a:41:cd:19: 13:4e:54:e6:b0:a2:5a:0a:de:03:f7:9a:05:63:81: a2:bf:55:f3:e7:42:7e:03:7e:37:19:dc:a3:a7:67: 09:88:28:1f:2c:ee:08:e6:6f:ca:1e:83:fd:a3:08: 73:4f:c4:92:a9:ec:f6:ff:c9:c4:1a:31:00:53:e3: 12:2d:fb:9c:cb:2f:88:f2:4e:49:ec:5f:b4:59:cf: c8:ec:40:ec:f9:0d:16:88:21:07:b0:dd:cc:17:4f: f6:7a:f1:61:bb:23:3b:47:30:b7:ce:b3:7f:a4:02: fe:fc:70:11:74:19:16:ae:44:25:9d:22:65:22:40: 91:a5:64:95:9d:db:0e:b0:36:2d:cd:22:96:2c:bd: ef:b5:3d:65:ed:69:86:68:da:a5:43:d0:49:a8:1e: 39:92:ac:a7:20:ec:d4:4c:09:07:f8:2a:72:dd:dc: 26:dc:22:7d:3e:80:27:6d:8d:3f:6d:ca:18:6d:b0: fe:af:c6:cf:7f:17:02:32:94:4c:98:ba:ca:5f:68: c3:f7:5b:0e:bd:b9:c1:4e:96:f6:f1:f8:18:14:19: d1:24:34:10:9b:3b:bb:c4:aa:67:12:b6:45:a2:04: dc:2d:33:a5:ee:ed:58:44:68:80:10:e5:4f:a2:13: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.106.0-193.43.108.255 Signature Algorithm: sha256WithRSAEncryption 84:bc:7c:63:96:7f:00:a8:75:88:a2:c3:40:0d:88:96:aa:e7: ba:6d:c9:e7:56:f2:97:9b:41:e2:54:35:67:d8:e0:1f:72:2e: 34:56:8a:4c:2f:4b:67:5e:cd:0d:9f:4a:4a:29:1f:4d:ce:1b: 21:be:eb:fd:7a:ef:af:5c:50:8d:e9:ea:fb:d9:10:ab:df:35: c0:65:5f:eb:94:68:bf:0a:52:8d:c7:b5:26:f0:88:81:1a:c8: c9:0a:79:b9:2b:20:69:b9:ff:88:90:05:e5:b9:f3:eb:6a:07: 58:bc:7e:ab:bf:13:26:3c:89:39:2d:03:e1:81:b6:67:03:c7: 07:6e:64:9e:16:59:3f:f9:bf:7a:e0:86:47:df:c3:f5:a1:34: bd:a7:75:65:34:fd:26:53:c5:86:de:e3:b4:35:38:d0:ed:c0: 9e:be:3e:af:79:17:6d:e5:49:1f:ff:74:45:6e:22:fa:7d:36: 4f:37:db:3b:b2:a7:dd:50:28:97:57:8b:43:17:4a:95:39:8f: 42:dd:47:da:f6:b4:10:1c:98:81:b2:74:16:ca:74:68:fc:b9: 23:8f:dc:f9:cc:02:7d:9c:a7:68:09:b7:b8:2e:f0:4f:27:1a: 1f:3d:c6:12:b5:e4:20:51:c6:88:95:be:d4:8c:ce:17:4b:41: 35:ba:58:dc -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt6Wxh5U4lkltfGbxj5jur6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTFkOGRkMzFhZTllMDNhZjRkMjZlOWRhNmUyZGQ4NmEwMzAzOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QtQV033gZH+vlpBzRkTTlTmsKJa Ct4D95oFY4Giv1Xz50J+A343Gdyjp2cJiCgfLO4I5m/KHoP9owhzT8SSqez2/8nE GjEAU+MSLfucyy+I8k5J7F+0Wc/I7EDs+Q0WiCEHsN3MF0/2evFhuyM7RzC3zrN/ pAL+/HARdBkWrkQlnSJlIkCRpWSVndsOsDYtzSKWLL3vtT1l7WmGaNqlQ9BJqB45 kqynIOzUTAkH+Cpy3dwm3CJ9PoAnbY0/bcoYbbD+r8bPfxcCMpRMmLrKX2jD91sO vbnBTpb28fgYFBnRJDQQmzu7xKpnErZFogTcLTOl7u1YRGiAEOVPohOuJwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFG4djdMa6eA69NJunabi3YagMDmkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwL2EyNjlh YS1jOWJmLTQyYzEtYWRlMy1lZDg1Y2UwOTRhODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvYTI2OWFh LWM5YmYtNDJjMS1hZGUzLWVkODVjZTA5NGE4Ny8xL2JoMk4weHJwNERyMDBtNmRw dUxkaHFBd09hUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAHBK2oDBADBK2wwDQYJKoZIhvcNAQELBQAD ggEBAIS8fGOWfwCodYiiw0ANiJaq57ptyedW8pebQeJUNWfY4B9yLjRWikwvS2de zQ2fSkopH03OGyG+6/16769cUI3p6vvZEKvfNcBlX+uUaL8KUo3HtSbwiIEayMkK ebkrIGm5/4iQBeW58+tqB1i8fqu/EyY8iTktA+GBtmcDxwduZJ4WWT/5v3rghkff w/WhNL2ndWU0/SZTxYbe47Q1ONDtwJ6+Pq95F23lSR//dEVuIvp9Nk832zuyp91Q KJdXi0MXSpU5j0LdR9r2tBAcmIGydBbKdGj8uSOP3PnMAn2cp2gJt7gu8E8nGh89 xhK15CBRxoiVvtSMzhdLQTW6WNw= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:07 2026 by rpki-client