This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer File: bhWkM20vXhvWBzfelXlomSp0cOk.cer (raw, json) Hash identifier: b8G+HUOxZ5S/G4w2PTSzkFsKQv7IKBo5cKw23gnfECM= Subject key identifier: 6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB54F5CAA76F523897964CF32DBF2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34944 IP: 91.201.84.0/23 IP: 2001:678:9d0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:54:f5:ca:a7:6f:52:38:97:96:4c:f3:2d:bf:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e15a4336d2f5e1bd60737de957968992a7470e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:93:0b:88:5d:93:31:75:c9:2b:7c:ac:e5: 46:ad:5a:cf:e0:ea:70:e0:d4:77:48:43:98:61:93: 9f:e9:fe:ec:8f:02:31:b7:1d:f8:89:8f:1d:a9:8e: 9d:5e:73:ea:72:b9:da:e8:2b:be:a5:76:36:ae:f7: 63:51:0d:e9:6c:40:52:78:79:3e:f5:7f:19:36:e9: 90:90:78:18:49:50:8e:34:11:e8:0f:02:bc:3d:5b: e6:6e:07:23:82:bd:05:b9:e6:6d:d3:47:0d:95:2c: b0:fa:21:6b:7e:77:99:d6:f1:93:a8:b2:1a:9c:3e: 3a:8e:79:84:76:74:67:3c:58:d3:82:40:6e:5b:a4: bf:56:db:e1:c0:64:af:87:dc:bc:f9:f9:cf:a1:cf: 81:73:0b:d4:18:4c:1d:8f:b8:ee:de:50:5b:c8:2f: c9:a4:d2:f9:a1:7c:3d:5d:37:6c:a7:f8:fe:09:c0: 03:91:b8:56:6a:4d:39:38:a2:1f:30:04:ac:4a:4a: 99:14:64:bc:e7:be:53:d3:71:6c:c7:b3:b9:e2:c4: eb:14:4e:58:d3:a1:50:80:42:b0:9f:f6:d4:3f:29: 6d:d3:9b:d6:11:f7:0f:93:3e:d8:81:85:e2:93:fb: 33:69:26:c3:93:78:8f:b2:46:3b:33:3e:b1:e1:43: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.84.0/23 IPv6: 2001:678:9d0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34944 Signature Algorithm: sha256WithRSAEncryption 4d:d9:b6:12:cf:ad:95:d5:5b:31:b2:51:3d:cd:5d:a6:03:0e: f9:de:5f:87:61:5d:fc:c5:16:a3:b0:cd:c9:4a:6a:87:20:9f: f6:5f:13:e1:8e:8a:5f:b8:90:9c:5e:d3:69:b2:82:5b:31:1e: a6:3b:64:e1:88:99:a5:0f:03:76:38:86:26:63:0a:7c:41:49: 5f:4b:a5:8d:8e:e4:a2:32:a0:6a:13:46:5c:b3:9e:4d:c5:1b: 66:d3:3f:0b:55:8a:b7:63:8f:31:be:92:8c:75:38:65:ad:ef: 4f:76:36:cd:00:66:f8:bf:4b:16:86:4b:91:79:5b:5b:2a:b4: 0f:be:e3:07:9a:0d:3e:30:9f:44:7f:fd:f7:ff:e3:7a:26:7a: 09:fd:ab:aa:f0:26:57:c5:ac:42:49:30:c5:b4:f8:e3:93:dd: d5:e0:b6:f1:95:fa:73:d4:7a:bb:dc:4a:39:8e:06:df:5b:61: 0a:7e:c7:87:f7:3e:5b:bc:88:7c:7b:12:4b:13:b4:0c:e4:df: a5:64:b5:a5:00:c4:96:f6:5e:80:9c:95:22:c6:0a:6d:47:17: 70:90:e4:7a:5f:7c:b1:0d:d9:6d:8b:08:fe:84:5c:2c:71:e6: 03:e8:94:23:b7:de:6e:6f:82:1c:f4:d6:c5:98:93:08:0a:f1: 99:02:26:af -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9y1T1yqdvUjiXlkzzLb8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTE1YTQzMzZkMmY1ZTFiZDYwNzM3ZGU5NTc5Njg5OTJhNzQ3MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxuTC4hdkzF1ySt8rOVGrVrP4Opw 4NR3SEOYYZOf6f7sjwIxtx34iY8dqY6dXnPqcrna6Cu+pXY2rvdjUQ3pbEBSeHk+ 9X8ZNumQkHgYSVCONBHoDwK8PVvmbgcjgr0FueZt00cNlSyw+iFrfneZ1vGTqLIa nD46jnmEdnRnPFjTgkBuW6S/VtvhwGSvh9y8+fnPoc+BcwvUGEwdj7ju3lBbyC/J pNL5oXw9XTdsp/j+CcADkbhWak05OKIfMASsSkqZFGS8575T03Fsx7O54sTrFE5Y 06FQgEKwn/bUPylt05vWEfcPkz7YgYXik/szaSbDk3iPskY7Mz6x4UPMcQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFG4VpDNtL14b1gc33pV5aJkqdHDpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3Lzg5Mzg1 MC1hODU1LTRhNTQtYjVkMC04ZDUyNDZhMjAyNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvODkzODUw LWE4NTUtNGE1NC1iNWQwLThkNTI0NmEyMDI0NS8xL2JoV2tNMjB2WGh2V0J6ZmVs WGxvbVNwMGNPay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW8lUMA8EAgACMAkDBwAgAQZ4CdAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAIiAMA0GCSqGSIb3DQEBCwUAA4IBAQBN2bYSz62V 1VsxslE9zV2mAw753l+HYV38xRajsM3JSmqHIJ/2XxPhjopfuJCcXtNpsoJbMR6m O2ThiJmlDwN2OIYmYwp8QUlfS6WNjuSiMqBqE0Zcs55NxRtm0z8LVYq3Y48xvpKM dThlre9PdjbNAGb4v0sWhkuReVtbKrQPvuMHmg0+MJ9Ef/33/+N6JnoJ/auq8CZX xaxCSTDFtPjjk93V4Lbxlfpz1Hq73Eo5jgbfW2EKfseH9z5bvIh8exJLE7QM5N+l ZLWlAMSW9l6AnJUixgptRxdwkOR6X3yxDdltiwj+hFwsceYD6JQjt95ub4Ic9NbF mJMICvGZAiav -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:23 2026 by rpki-client