This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer File: bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer (raw, json) Hash identifier: A3yAXH7PFg8+9E2l+P8ZUIthDhrHybWqmNB3oZen3Qo= Subject key identifier: 6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79103773DFA4908A213197B8A575E2C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216000 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:37:73:df:a4:90:8a:21:31:97:b8:a5:75:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:a1:d5:8e:f2:1a:d5:a6:60:67:af:be:af: f7:15:7f:31:ea:d8:7d:1d:92:c2:6c:4b:c2:9b:8a: 97:3b:2c:c7:25:1f:f7:76:e0:de:7c:ec:3e:0d:3c: db:bc:29:30:b1:5b:72:17:30:48:41:51:ca:8a:21: c0:9d:65:4c:61:dd:ee:0e:3e:f1:c8:81:04:d5:e8: 08:83:d6:be:d0:f7:d1:a6:81:7e:82:08:c5:87:56: 6b:42:8e:a9:e0:d3:21:4a:1a:4b:c8:67:fc:92:d0: 57:dd:0a:85:6d:b0:da:16:2c:c2:55:e5:1b:dd:68: 2f:d0:83:c6:11:d0:a4:9b:a4:c6:e0:e5:6c:fc:69: 0a:15:75:7c:77:d7:ed:44:de:db:1f:67:d0:2f:9d: fe:9f:ed:60:b3:4e:2f:8f:33:03:49:27:82:a8:f7: 52:18:f3:3e:35:d6:f6:92:bd:45:d3:e9:ce:24:51: bf:8a:a5:f8:48:91:67:59:07:ce:a4:02:43:2f:64: 8c:cb:b1:99:dd:e2:52:1b:da:c6:eb:96:99:07:14: c3:22:06:97:c1:82:d3:5f:f4:cf:03:fe:6f:7c:0d: af:d4:1c:28:d3:f2:a9:0c:16:ac:f5:e3:02:f1:3f: 8a:65:c4:93:d3:f3:fa:8c:91:7e:09:26:db:b8:ae: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216000 Signature Algorithm: sha256WithRSAEncryption 72:9f:a2:2d:3e:c9:92:7a:b1:bb:f6:1c:62:75:a2:72:db:70: 09:6a:bc:b2:38:86:29:cf:b9:80:05:f8:1b:02:86:2a:98:b6: c0:20:95:48:b8:0c:46:99:77:96:cb:40:87:60:36:cc:cd:80: 97:20:9d:7f:87:4f:61:0a:c7:99:10:57:ab:e8:aa:d0:0c:ef: c7:44:ab:dc:f0:b4:35:fc:b3:85:30:b7:79:4d:89:e8:13:6f: b3:d3:6c:67:b5:cc:1c:b2:c3:97:68:da:9b:6e:45:44:28:d8: 77:be:b1:58:70:40:49:0b:4a:cb:a1:dd:0f:a1:5a:1d:ca:3d: 02:9e:2a:70:56:83:fb:d7:f2:b1:a5:47:a1:03:d8:04:69:5b: c6:45:02:8b:b9:48:ec:ad:03:9b:bf:0e:dd:6a:27:71:a4:5f: a7:da:8b:83:f3:e2:17:97:59:f0:2f:92:1e:bd:de:4e:9a:8a: d8:b4:bb:d8:00:6a:7e:bc:b4:b2:47:e6:77:2b:dd:ca:37:c4: 62:71:01:ba:1a:3c:5a:fa:9f:45:b2:f2:2c:60:47:26:72:11: 16:6f:36:14:2e:39:fa:11:59:96:1e:9b:8e:c0:31:d7:b1:38: ab:b4:08:88:a1:41:37:8a:01:37:27:8c:e3:e1:6b:61:9f:1d: 85:7f:4d:ff -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EDdz36SQiiExl7ildeLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzcwZDZlZWMyYjU2MDVmOGIxYmU2Y2U4NDM5NWYyNDZjNDJkZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lqh1Y7yGtWmYGevvq/3FX8x6th9 HZLCbEvCm4qXOyzHJR/3duDefOw+DTzbvCkwsVtyFzBIQVHKiiHAnWVMYd3uDj7x yIEE1egIg9a+0PfRpoF+ggjFh1ZrQo6p4NMhShpLyGf8ktBX3QqFbbDaFizCVeUb 3Wgv0IPGEdCkm6TG4OVs/GkKFXV8d9ftRN7bH2fQL53+n+1gs04vjzMDSSeCqPdS GPM+Ndb2kr1F0+nOJFG/iqX4SJFnWQfOpAJDL2SMy7GZ3eJSG9rG65aZBxTDIgaX wYLTX/TPA/5vfA2v1Bwo0/KpDBas9eMC8T+KZcST0/P6jJF+CSbbuK6qXwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGxw1u7CtWBfixvmzoQ5XyRsQt8cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzExOWM3 MC0zOTUwLTQ2MzYtODM5NS0yZmM0ODYwMTU1NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMTE5Yzcw LTM5NTAtNDYzNi04Mzk1LTJmYzQ4NjAxNTU2NC8xL2JIRFc3c0sxWUYtTEctYk9o RGxmSkd4QzN4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNLwDANBgkqhkiG9w0BAQsFAAOCAQEAcp+iLT7Jknqx u/YcYnWicttwCWq8sjiGKc+5gAX4GwKGKpi2wCCVSLgMRpl3lstAh2A2zM2AlyCd f4dPYQrHmRBXq+iq0Azvx0Sr3PC0NfyzhTC3eU2J6BNvs9NsZ7XMHLLDl2jam25F RCjYd76xWHBASQtKy6HdD6FaHco9Ap4qcFaD+9fysaVHoQPYBGlbxkUCi7lI7K0D m78O3WoncaRfp9qLg/PiF5dZ8C+SHr3eTpqK2LS72ABqfry0skfmdyvdyjfEYnEB uho8WvqfRbLyLGBHJnIRFm82FC45+hFZlh6bjsAx17E4q7QIiKFBN4oBNyeM4+Fr YZ8dhX9N/w== -----END CERTIFICATE-----Generated at Tue Jan 13 10:54:41 2026 by rpki-client