This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer (raw, json) Hash identifier: gKHgc9QNZDzy3inkZ0fXBohvhM8O8tmHXDy36xlG0m0= Subject key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791097425B374BCC5A6644492A8D37E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51579 IP: 178.213.112.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:97:42:5b:37:4b:cc:5a:66:44:49:2a:8d:37:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:8f:57:b7:f7:15:c6:b8:e2:99:09:0c:33: eb:87:1e:d6:0f:15:7e:1f:0b:8d:24:ae:c5:e2:44: 89:86:f7:8b:ab:5a:eb:5c:34:33:b7:ab:12:11:48: eb:2d:53:2d:66:42:b2:31:a0:5d:8b:d8:c6:9c:be: 4d:61:0b:0e:e8:2c:c5:a4:70:d4:08:9e:b6:31:3f: 80:98:4d:31:f3:8b:47:16:00:77:50:94:6c:a6:12: 7d:4e:35:56:87:b0:66:93:62:29:e8:97:3c:bc:64: 9e:ff:c2:7e:66:47:62:ed:d8:ac:25:52:cb:30:49: 32:2f:b6:d1:40:83:4f:99:73:92:27:53:ac:84:94: 17:22:f8:2c:ee:2e:18:e1:3f:b9:2e:91:e3:61:96: 7d:0f:e3:6f:8e:40:c6:4e:9e:fc:39:a0:01:f3:1b: cf:e9:15:99:2b:a6:82:cb:6a:f3:9d:b2:28:14:75: 6a:30:24:d7:1e:86:ef:b4:79:22:7b:f4:af:42:fe: f9:ed:cd:bb:f8:50:75:b9:aa:c5:65:a8:96:96:3a: 97:f7:42:f3:b7:f2:ed:00:02:eb:08:22:01:a0:27: 97:71:07:d1:c9:c4:15:d6:ee:06:4e:12:9d:cf:02: cf:bb:0d:c2:77:2b:9b:45:2e:0f:0e:82:b9:c4:88: d1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.112.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51579 Signature Algorithm: sha256WithRSAEncryption 34:7f:18:63:29:d5:40:c7:92:d0:b0:0f:bf:7e:69:ae:1f:a1: 87:c8:c0:62:b7:64:69:19:8a:74:2e:df:c2:f6:16:06:cb:95: 96:1d:d9:c4:2e:05:55:bd:e8:d7:82:8f:06:3d:29:91:e7:75: 77:47:9b:d5:f7:e7:20:f3:f6:f3:f1:4e:4e:8e:f5:cb:77:a5: 71:ba:89:f2:d9:25:81:67:b3:63:53:ab:dc:2b:c7:eb:7d:13: c0:ad:02:31:e5:e7:d2:88:2b:8b:ee:1b:92:d9:a4:a2:6d:95: a3:b0:01:67:5d:0b:07:7e:5e:25:c5:15:04:86:43:da:8b:6b: 33:88:fe:5b:16:3f:a3:eb:1e:84:5f:35:cd:e6:19:0e:ba:96: ef:1c:66:ba:02:28:eb:cb:e0:37:75:ac:0a:79:60:d6:e3:f8: af:2c:07:c5:02:1d:aa:a1:5e:6c:13:ad:c7:96:3f:9e:f7:49: af:01:78:68:d9:91:4a:0b:90:36:50:da:34:61:0b:08:70:e1: d8:b7:e5:46:63:88:41:2c:18:ec:a7:32:40:1f:6f:a3:b7:f2: 78:ea:1e:08:84:59:ab:2c:e2:28:1d:00:79:6d:3f:95:17:0b: 21:9d:ce:a1:c5:cb:b6:2d:7e:21:e3:ed:bf:d1:6b:ce:a6:74: 32:57:a3:6a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EJdCWzdLzFpmREkqjTfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWMzOTJmODNlMzhmOTJhNWQ2ZjNiN2E2NGIzNmY4YzRiMzUwOWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaiPV7f3Fca44pkJDDPrhx7WDxV+ HwuNJK7F4kSJhveLq1rrXDQzt6sSEUjrLVMtZkKyMaBdi9jGnL5NYQsO6CzFpHDU CJ62MT+AmE0x84tHFgB3UJRsphJ9TjVWh7Bmk2Ip6Jc8vGSe/8J+Zkdi7disJVLL MEkyL7bRQINPmXOSJ1OshJQXIvgs7i4Y4T+5LpHjYZZ9D+NvjkDGTp78OaAB8xvP 6RWZK6aCy2rznbIoFHVqMCTXHobvtHkie/SvQv757c27+FB1uarFZaiWljqX90Lz t/LtAALrCCIBoCeXcQfRycQV1u4GThKdzwLPuw3CdyubRS4PDoK5xIjR7wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFG7Dkvg+OPkqXW87emSzb4xLNQnmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2Q2ZGU5 Zi0zMGM2LTQ2YTUtODRkMS04ZDE1NTY5YjViZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZDZkZTlm LTMwYzYtNDZhNS04NGQxLThkMTU1NjliNWJmZS8xL2JzT1MtRDQ0LVNwZGJ6dDZa TE52akVzMUNlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDstVwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDJezANBgkqhkiG9w0BAQsFAAOCAQEANH8YYynVQMeS0LAPv35prh+hh8jAYrdk aRmKdC7fwvYWBsuVlh3ZxC4FVb3o14KPBj0pked1d0eb1ffnIPP28/FOTo71y3el cbqJ8tklgWezY1Or3CvH630TwK0CMeXn0ogri+4bktmkom2Vo7ABZ10LB35eJcUV BIZD2otrM4j+WxY/o+sehF81zeYZDrqW7xxmugIo68vgN3WsCnlg1uP4rywHxQId qqFebBOtx5Y/nvdJrwF4aNmRSguQNlDaNGELCHDh2LflRmOIQSwY7KcyQB9vo7fy eOoeCIRZqyziKB0AeW0/lRcLIZ3OocXLti1+IePtv9FrzqZ0Mlejag== -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:30 2026 by rpki-client