This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer File: BkhNH1fbDMIyb6pT06eq0mjbwmY.cer (raw, json) Hash identifier: hYTltmtV7mBf5d2i4isfwp9xCZ3rFTvQvMd158tP760= Subject key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB3CC3F9D459540DC409699A31EA41 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.15.8.0/22 IP: 2a02:fb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3c:c3:f9:d4:59:54:0d:c4:09:69:9a:31:ea:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:8a:66:d7:11:d2:b8:a5:df:13:e7:42:39: 9a:44:88:fc:f2:ad:83:ee:5a:45:f9:1f:12:67:53: fb:de:17:67:46:7c:0d:0a:4a:70:c6:34:6b:cc:e9: 8d:02:87:ef:ca:56:3e:f2:4f:4e:af:39:f2:ff:72: df:51:bb:8f:fa:93:a0:e4:56:07:f6:bb:96:21:a4: 1d:83:1f:9d:2e:3b:36:00:dd:ad:fd:08:b0:5d:dd: 4d:fd:e5:86:5c:4a:0f:9f:12:87:86:8a:f1:5e:bf: 6b:61:2c:d8:42:18:31:ad:d4:5b:4b:ed:ae:e8:60: bb:67:05:2f:be:e1:58:7d:e1:19:eb:5f:32:39:ad: 0c:f5:bb:4d:bb:81:5b:59:b5:5b:81:ad:30:4f:90: 45:06:21:22:6e:60:44:b9:ab:2e:dd:62:c9:46:1e: 9d:b1:40:90:bd:29:9d:fd:30:ea:25:4b:a0:88:80: c9:0c:ed:62:2e:4b:62:f5:d6:74:b5:a5:22:30:00: ae:30:d1:e5:30:45:cc:de:c0:73:54:3d:ce:e5:ab: 50:90:19:ca:f4:1a:d5:db:2d:1b:7a:2d:5a:5c:08: 88:85:95:7b:c3:c5:92:fa:b9:f9:06:3f:47:68:2b: 43:81:75:b6:2a:40:dd:9a:43:90:0a:69:21:24:64: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.8.0/22 IPv6: 2a02:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 66:f4:ce:f8:30:97:5a:51:7d:95:a2:1c:b3:e5:b8:41:31:eb: 39:b9:a1:4b:b5:e0:19:01:c8:2c:79:d1:5a:1f:d4:f9:72:f8: 42:ff:10:b7:33:e8:2c:c4:9c:70:4f:ed:bd:46:20:4f:45:02: f2:6a:3c:26:5a:0e:fe:bd:11:6d:c3:4c:52:ce:53:fe:89:be: d4:fc:05:de:96:4c:c6:cf:ef:94:c1:ae:26:0a:9e:f9:19:53: f8:a1:37:27:18:a3:20:b7:ef:72:f6:3a:e9:6e:89:91:5f:36: 2d:78:f8:a9:32:59:a9:bb:a3:ce:fe:89:30:d4:5d:ac:ac:38: 09:78:3e:56:8a:bf:6c:9c:a4:d1:05:f4:32:58:5d:d9:ea:4b: fe:6a:7f:94:b8:de:1c:e7:4d:df:8e:50:e3:42:70:fa:34:40: ec:2c:6a:e5:e6:c5:17:cf:64:2c:7d:07:bc:35:ad:45:cc:09: 8a:0e:6d:4b:5a:9c:c7:06:ab:12:bd:32:b2:30:68:af:48:d7: 14:70:af:b0:69:ec:29:09:69:91:74:a3:77:27:a4:48:1d:cb: 75:c6:8f:dc:80:0c:e3:81:32:35:36:c6:e4:b5:cf:b1:fa:23: 2f:18:07:a5:f8:0e:98:9f:63:19:8e:b8:a3:6c:1b:dc:dc:0b: 85:ce:1e:6a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26zzD+dRZVA3ECWmaMepBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjQ4NGQxZjU3ZGIwY2MyMzI2ZmFhNTNkM2E3YWFkMjY4ZGJjMjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSKKZtcR0ril3xPnQjmaRIj88q2D 7lpF+R8SZ1P73hdnRnwNCkpwxjRrzOmNAofvylY+8k9Orzny/3LfUbuP+pOg5FYH 9ruWIaQdgx+dLjs2AN2t/QiwXd1N/eWGXEoPnxKHhorxXr9rYSzYQhgxrdRbS+2u 6GC7ZwUvvuFYfeEZ618yOa0M9btNu4FbWbVbga0wT5BFBiEibmBEuasu3WLJRh6d sUCQvSmd/TDqJUugiIDJDO1iLkti9dZ0taUiMACuMNHlMEXM3sBzVD3O5atQkBnK 9BrV2y0bei1aXAiIhZV7w8WS+rn5Bj9HaCtDgXW2KkDdmkOQCmkhJGS+JwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAZITR9X2wzCMm+qU9OnqtJo28JmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzcwMjgy OS0wZDhlLTQ5ZGItODRhZS0wNDkyNTE5NGM1ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvNzAyODI5 LTBkOGUtNDlkYi04NGFlLTA0OTI1MTk0YzVlNi8xL0JraE5IMWZiRE1JeWI2cFQw NmVxMG1qYndtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ8IMA0EAgACMAcDBQMqAvsAMA0GCSqGSIb3 DQEBCwUAA4IBAQBm9M74MJdaUX2Vohyz5bhBMes5uaFLteAZAcgsedFaH9T5cvhC /xC3M+gsxJxwT+29RiBPRQLyajwmWg7+vRFtw0xSzlP+ib7U/AXelkzGz++Uwa4m Cp75GVP4oTcnGKMgt+9y9jrpbomRXzYtePipMlmpu6PO/okw1F2srDgJeD5Wir9s nKTRBfQyWF3Z6kv+an+UuN4c503fjlDjQnD6NEDsLGrl5sUXz2QsfQe8Na1FzAmK Dm1LWpzHBqsSvTKyMGivSNcUcK+waewpCWmRdKN3J6RIHct1xo/cgAzjgTI1Nsbk tc+x+iMvGAel+A6Yn2MZjrijbBvc3AuFzh5q -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:21 2026 by rpki-client