This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer File: bosCjRgnTSGnMWrqPMzpFYtU9IE.cer (raw, json) Hash identifier: kDMLahSeQKl/CHCrTq8GlMqzjjCAj8NwAGmNZYI4yBs= Subject key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DF352A60ECF99EC6E3DF53D1290AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52113 AS: 198913 AS: 211292 IP: 31.220.147.0/24 IP: 46.243.120.0/21 IP: 185.132.24.0/22 IP: 185.173.228.0/22 IP: 185.216.228.0/23 IP: 195.20.133.0/24 IP: 213.163.250.0/23 IP: 217.19.13.0/24 IP: 2a03:d400::/32 IP: 2a0b:6f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f3:52:a6:0e:cf:99:ec:6e:3d:f5:3d:12:90:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:75:68:a6:04:c0:3b:57:86:4a:1b:18:6f: ef:9c:c4:8a:e9:d7:82:76:86:50:f6:65:0c:07:1d: 4d:f0:48:a9:90:ab:74:9a:0f:17:51:1b:13:a2:72: fd:3c:ce:dd:01:e2:bc:ea:77:50:02:1c:b8:6f:80: d8:26:25:46:16:04:c1:92:bd:5b:e9:dc:e3:82:4d: df:c7:54:5f:51:bc:27:ef:43:77:96:27:86:34:f7: b0:f2:b3:c4:f6:bf:f6:c5:76:95:89:9a:e9:e0:62: 89:6c:ba:3c:1b:89:ef:9b:7a:a1:9b:52:e4:d8:6e: 26:24:ce:5f:e3:43:70:6c:3c:6f:7b:0c:25:18:27: ee:da:e3:b3:4f:61:50:24:a6:95:7b:f5:cb:8a:de: f6:3d:a8:54:3c:33:1b:65:bf:73:60:c8:96:af:17: 3e:7c:fb:fd:70:5e:34:c3:be:f5:9a:36:b5:30:ac: b3:33:d5:40:11:b2:5d:e8:00:66:bb:05:3d:29:da: f1:16:08:e6:4f:80:c3:a4:c3:a5:89:3e:bc:67:85: 9e:34:bf:22:bf:e6:79:f8:01:94:81:ab:10:4f:5a: 2e:d8:29:29:1c:8f:bd:cd:00:e5:00:fd:f8:85:3d: 04:b7:4f:4e:db:0e:3e:29:86:19:1d:ce:4f:e6:62: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.147.0/24 46.243.120.0/21 185.132.24.0/22 185.173.228.0/22 185.216.228.0/23 195.20.133.0/24 213.163.250.0/23 217.19.13.0/24 IPv6: 2a03:d400::/32 2a0b:6f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52113 198913 211292 Signature Algorithm: sha256WithRSAEncryption a5:09:59:93:89:ac:6f:99:d1:56:2f:f2:9f:50:2d:2b:45:1a: 59:05:4e:7f:84:ab:f9:88:6b:b6:f7:e4:15:59:7d:8c:85:7b: 47:8a:41:90:1f:57:95:3e:37:2f:aa:a5:55:f6:0e:40:ad:14: a8:a3:da:f3:d0:d0:41:61:90:b2:5b:c8:62:7f:e1:ec:cc:8b: 19:f8:fb:fa:5b:b0:db:75:af:fc:25:84:82:98:08:bc:80:1d: 68:96:ba:4b:11:9c:53:93:1e:12:ef:54:5a:1d:b2:9a:14:00: f8:2b:ed:31:ff:1c:65:d6:27:0f:a0:86:8b:9e:be:bf:be:ea: dc:e4:ea:d8:c4:db:03:e4:1c:52:1c:99:26:d3:51:6c:7d:f4: a1:97:81:05:b3:74:fa:7d:5c:79:de:29:89:7f:bc:4d:b1:7d: 92:32:1a:80:f4:4c:a4:80:57:4b:80:2f:23:19:86:4f:ca:d8: 59:d0:24:13:fa:b8:3e:46:f9:38:b3:41:31:bc:dd:0f:1a:45: 77:07:88:3f:62:d1:6d:4f:78:01:62:af:f8:d2:ba:05:9b:f5: de:d4:d9:f3:4d:3e:c3:62:6c:07:41:24:d5:b9:e0:42:c7:f7: 49:55:00:0a:31:ca:ba:45:f0:82:87:dc:2c:76:91:35:7c:a0: 49:e3:dc:b1 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt5ffNSpg7PmexuPfU9EpCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZThiMDI4ZDE4Mjc0ZDIxYTczMTZhZWEzY2NjZTkxNThiNTRmNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluV1aKYEwDtXhkobGG/vnMSK6deC doZQ9mUMBx1N8EipkKt0mg8XURsTonL9PM7dAeK86ndQAhy4b4DYJiVGFgTBkr1b 6dzjgk3fx1RfUbwn70N3lieGNPew8rPE9r/2xXaViZrp4GKJbLo8G4nvm3qhm1Lk 2G4mJM5f40NwbDxvewwlGCfu2uOzT2FQJKaVe/XLit72PahUPDMbZb9zYMiWrxc+ fPv9cF40w771mja1MKyzM9VAEbJd6ABmuwU9KdrxFgjmT4DDpMOliT68Z4WeNL8i v+Z5+AGUgasQT1ou2CkpHI+9zQDlAP34hT0Et09O2w4+KYYZHc5P5mIwSwIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFG6LAo0YJ00hpzFq6jzM6RWLVPSBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzA5NmVh Zi02MzRiLTRjNDktYjY4ZS1jMmM2MTUxODU4OWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMDk2ZWFm LTYzNGItNGM0OS1iNjhlLWMyYzYxNTE4NTg5Zi8xL2Jvc0NqUmduVFNHbk1XcnFQ TXpwRll0VTlJRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQAH9yTAwQDLvN4AwQCuYQYAwQCua3kAwQBudjk AwQAwxSFAwQB1aP6AwQA2RMNMBQEAgACMA4DBQAqA9QAAwUDKgtvADAkBggrBgEF BQcBCAEB/wQVMBOgETAPAgMAy5ECAwMJAQIDAzlcMA0GCSqGSIb3DQEBCwUAA4IB AQClCVmTiaxvmdFWL/KfUC0rRRpZBU5/hKv5iGu29+QVWX2MhXtHikGQH1eVPjcv qqVV9g5ArRSoo9rz0NBBYZCyW8hif+HszIsZ+Pv6W7Dbda/8JYSCmAi8gB1olrpL EZxTkx4S71RaHbKaFAD4K+0x/xxl1icPoIaLnr6/vurc5OrYxNsD5BxSHJkm01Fs ffShl4EFs3T6fVx53imJf7xNsX2SMhqA9EykgFdLgC8jGYZPythZ0CQT+rg+Rvk4 s0ExvN0PGkV3B4g/YtFtT3gBYq/40roFm/Xe1NnzTT7DYmwHQSTVueBCx/dJVQAK Mcq6RfCCh9wsdpE1fKBJ49yx -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:10 2026 by rpki-client