This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer File: xBOLshC3wajwZm4HWfR18AZN8fc.cer (raw, json) Hash identifier: cq02+QE/XtHifBdZ1ZBgDzBwd9Kt4MZdluNBzNq/04g= Subject key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA134349B19486AE73E18965C26A848B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 11:32:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.168.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 08:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:13:43:49:b1:94:86:ae:73:e1:89:65:c2:6a:84:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 11:32:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:66:ac:bd:08:2f:c8:eb:97:84:7e:5b:14: a3:51:07:68:82:80:84:4a:6b:94:7e:c5:da:c4:5c: eb:f2:9c:f4:3b:f2:fa:18:7f:0c:6a:37:aa:51:00: 2d:e8:08:85:7e:ea:65:03:5c:4b:29:c4:25:66:3c: db:f8:f4:6c:38:e2:68:82:cb:7f:33:71:e3:45:28: 4e:82:6f:45:cd:25:ae:b0:90:8f:f7:3e:cd:11:6b: 59:d2:d8:d9:02:61:74:95:be:9a:a7:fd:8c:2a:e2: 4e:9e:ec:a4:c5:fc:6e:79:a6:56:17:f8:ea:67:dc: dc:b0:5a:dc:78:72:5c:72:28:10:14:ec:91:38:1f: ec:b1:d5:60:a5:c5:e4:84:e3:d3:8f:a2:11:80:27: cc:68:94:f5:d4:c8:02:c2:d5:c1:41:a5:1a:46:9a: cf:77:cb:04:6f:b9:7b:cb:82:b9:3f:8c:c7:e1:d2: 12:06:f4:41:da:6c:c0:6f:68:31:ac:9e:79:ca:f8: 47:5b:08:d2:68:63:fd:ee:3d:41:4d:b0:c5:10:ee: 51:55:09:22:ba:03:43:db:06:7e:d1:f8:84:13:bf: bb:59:8e:5b:ea:0b:7d:63:97:00:33:ad:52:2f:f7: 3f:4e:09:39:6a:5b:47:f2:b1:e5:0b:3c:f4:b4:66: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.168.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:85:c3:18:c0:b2:3a:56:5f:5b:ec:da:70:2c:0b:54:7a:7e: 53:74:ed:63:e4:48:f0:c4:a1:a6:2f:d7:1d:ee:f1:03:bf:a9: dd:18:8b:f0:aa:2f:53:4f:24:03:e9:79:d7:78:d1:6e:b3:59: 82:2f:88:4e:73:56:f6:80:fb:a7:ad:db:b7:dd:48:79:4f:54: 10:64:11:6a:26:aa:20:f9:96:58:6b:fc:a3:0c:66:43:00:27: 5b:b6:54:cb:d0:a4:07:c4:6f:cf:ad:6c:62:a2:f1:f2:d0:01: c9:1a:af:1f:ed:b1:3f:23:15:8f:7b:20:29:03:45:5c:07:40: 45:4c:17:dc:cf:f8:04:5c:81:12:bb:b3:9d:6c:3d:3a:7f:89: c3:ac:65:52:59:9d:5d:40:93:c6:aa:f9:ba:af:77:46:5d:90: 1f:62:c8:e6:20:de:61:c5:61:d2:fe:98:ce:86:3b:f2:dd:d6: d1:29:f1:6f:8a:fb:b7:09:3d:d8:25:f9:b5:b0:ef:0e:c6:d4: 7e:13:38:25:d6:33:da:70:e5:39:f6:bb:77:6f:43:b8:f1:33: 5a:2b:de:85:21:b4:6e:81:a3:c5:81:73:43:26:2c:3a:88:35: ff:7a:1f:fc:62:43:9e:25:9e:b4:e7:ab:92:ff:f8:4e:c2:e9: 98:23:db:08 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv6E0NJsZSGrnPhiWXCaoSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTEzMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDEzOGJiMjEwYjdjMWE4ZjA2NjZlMDc1OWY0NzVmMDA2NGRmMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nZmrL0IL8jrl4R+WxSjUQdogoCE SmuUfsXaxFzr8pz0O/L6GH8MajeqUQAt6AiFfuplA1xLKcQlZjzb+PRsOOJogst/ M3HjRShOgm9FzSWusJCP9z7NEWtZ0tjZAmF0lb6ap/2MKuJOnuykxfxueaZWF/jq Z9zcsFrceHJccigQFOyROB/ssdVgpcXkhOPTj6IRgCfMaJT11MgCwtXBQaUaRprP d8sEb7l7y4K5P4zH4dISBvRB2mzAb2gxrJ55yvhHWwjSaGP97j1BTbDFEO5RVQki ugND2wZ+0fiEE7+7WY5b6gt9Y5cAM61SL/c/Tgk5altH8rHlCzz0tGaiLwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMQTi7IQt8Go8GZuB1n0dfAGTfH3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzlmYTU0 YS1hOTgzLTQ5NTgtYTkyZS1mYjFmMmFhYzU2N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvOWZhNTRh LWE5ODMtNDk1OC1hOTJlLWZiMWYyYWFjNTY3ZS8xL3hCT0xzaEMzd2Fqd1ptNEhX ZlIxOEFaTjhmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9GoMA0GCSqGSIb3DQEBCwUAA4IBAQBrhcMY wLI6Vl9b7NpwLAtUen5TdO1j5EjwxKGmL9cd7vEDv6ndGIvwqi9TTyQD6XnXeNFu s1mCL4hOc1b2gPunrdu33Uh5T1QQZBFqJqog+ZZYa/yjDGZDACdbtlTL0KQHxG/P rWxiovHy0AHJGq8f7bE/IxWPeyApA0VcB0BFTBfcz/gEXIESu7OdbD06f4nDrGVS WZ1dQJPGqvm6r3dGXZAfYsjmIN5hxWHS/pjOhjvy3dbRKfFvivu3CT3YJfm1sO8O xtR+Ezgl1jPacOU59rt3b0O48TNaK96FIbRugaPFgXNDJiw6iDX/eh/8YkOeJZ60 56uS//hOwumYI9sI -----END CERTIFICATE-----Generated at Wed Feb 4 10:58:49 2026 by rpki-client