This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer File: 14BeHP_BOS59F2j48FVKHH9jRK0.cer (raw, json) Hash identifier: 3GeCB5XWor4CvGWHI4XSRUE4veSdYaqchb7s32rHgkE= Subject key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F13F91D6DEC452D63DC034F7DB67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44484 IP: 91.201.228.0/22 IP: 176.117.192.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f1:3f:91:d6:de:c4:52:d6:3d:c0:34:f7:db:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:7e:72:6f:76:64:f6:a3:84:c5:35:c1:d7: 62:7f:75:2f:6d:ce:5a:6a:89:bf:db:d8:0d:b0:87: 89:ed:b3:14:6c:09:e2:91:40:e5:dd:eb:cf:b0:7b: 11:5c:66:80:c3:ef:67:e5:c9:e7:19:fa:11:7d:d5: b0:36:87:da:1b:eb:60:96:b7:09:3e:98:00:72:73: a3:78:20:30:e8:d2:d9:79:68:61:49:09:3f:f3:39: f7:14:85:b6:d1:1b:16:ea:12:41:76:1b:fd:55:c2: 94:d7:9b:d2:82:81:43:61:20:5b:d2:f7:cc:b2:d1: 35:6a:75:e3:d3:15:0c:92:c8:8e:e2:5b:a6:87:ee: a3:10:51:75:9f:f4:eb:6c:0d:6d:0e:24:c0:98:18: 1a:7d:6a:17:cb:6b:9e:fc:94:66:68:9e:35:f9:5e: a2:cb:67:ef:33:4f:78:b1:c1:b6:a7:0e:65:67:8f: ca:99:13:b9:ff:98:38:7b:45:f1:28:24:16:92:ac: 55:d3:aa:40:b1:26:89:bc:83:3d:28:35:e6:71:f5: d1:e6:b9:5b:51:c5:5c:be:99:da:17:06:3d:bb:50: ae:67:62:39:55:62:d2:61:84:7e:e6:fd:8c:fe:5f: 27:39:da:1f:9c:8e:c5:5e:0f:20:7e:37:a7:72:1b: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.228.0/22 176.117.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44484 Signature Algorithm: sha256WithRSAEncryption a5:9f:b5:7c:25:16:53:6f:2a:c3:f1:b8:e9:ff:0a:7d:d4:90: 03:24:3a:ff:1a:17:b4:0b:6e:b2:3f:f8:de:84:e8:e4:0b:d6: c7:a0:f7:80:84:ed:ea:2a:cf:b0:71:5c:ac:1a:4b:7b:31:4b: 79:18:be:b8:4e:5e:70:a8:47:98:4e:2e:9b:71:8f:8a:48:e8: 59:c3:b0:e3:a8:f3:2a:74:88:ec:f4:6e:99:f0:aa:76:4a:cd: 7e:0c:77:ea:a2:4a:59:13:72:ca:40:ba:58:b5:13:5d:42:0d: 7a:7a:32:43:de:b9:c0:52:f0:98:4d:a0:df:33:1f:bd:14:b9: 0d:88:98:ee:71:74:30:b3:1a:24:8b:38:f8:67:d1:cc:c2:16: bb:9c:6e:58:02:25:a1:7f:33:6e:32:40:70:e2:0e:9c:62:a7: 6f:ba:0a:17:b9:04:36:35:67:aa:7f:dd:3d:c7:a4:54:28:52: f6:e3:a9:00:6b:d6:24:9e:d8:e1:9e:07:e6:a5:6d:cb:72:5b: 54:3b:cd:65:0b:69:64:53:37:73:14:ce:9d:f6:9a:a8:e5:cf: 1c:50:2b:c7:cd:f8:fe:92:c4:7b:22:a9:98:04:6f:27:69:fb: 9b:44:4c:dd:ca:b8:ce:ae:dc:82:86:4b:9b:fe:91:d0:8a:f1: 92:db:98:e8 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/FfE/kdbexFLWPcA099tnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzgwNWUxY2ZmYzEzOTJlN2QxNzY4ZjhmMDU1NGExYzdmNjM0NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70x+cm92ZPajhMU1wddif3Uvbc5a aom/29gNsIeJ7bMUbAnikUDl3evPsHsRXGaAw+9n5cnnGfoRfdWwNofaG+tglrcJ PpgAcnOjeCAw6NLZeWhhSQk/8zn3FIW20RsW6hJBdhv9VcKU15vSgoFDYSBb0vfM stE1anXj0xUMksiO4lumh+6jEFF1n/TrbA1tDiTAmBgafWoXy2ue/JRmaJ41+V6i y2fvM094scG2pw5lZ4/KmRO5/5g4e0XxKCQWkqxV06pAsSaJvIM9KDXmcfXR5rlb UcVcvpnaFwY9u1CuZ2I5VWLSYYR+5v2M/l8nOdofnI7FXg8gfjenchvDEQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFNeAXhz/wTkufRdo+PBVShx/Y0StMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzRhM2Q4 YS01MjlkLTRkOTEtOWYyNS0yMjU0YmMyY2E2YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNGEzZDhh LTUyOWQtNGQ5MS05ZjI1LTIyNTRiYzJjYTZjMC8xLzE0QmVIUF9CT1M1OUYyajQ4 RlZLSEg5alJLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8nkAwQFsHXAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCtxDANBgkqhkiG9w0BAQsFAAOCAQEApZ+1fCUWU28qw/G46f8KfdSQ AyQ6/xoXtAtusj/43oTo5AvWx6D3gITt6irPsHFcrBpLezFLeRi+uE5ecKhHmE4u m3GPikjoWcOw46jzKnSI7PRumfCqdkrNfgx36qJKWRNyykC6WLUTXUINenoyQ965 wFLwmE2g3zMfvRS5DYiY7nF0MLMaJIs4+GfRzMIWu5xuWAIloX8zbjJAcOIOnGKn b7oKF7kENjVnqn/dPcekVChS9uOpAGvWJJ7Y4Z4H5qVty3JbVDvNZQtpZFM3cxTO nfaaqOXPHFArx834/pLEeyKpmARvJ2n7m0RM3cq4zq7cgoZLm/6R0IrxktuY6A== -----END CERTIFICATE-----Generated at Wed Jan 7 06:58:13 2026 by rpki-client