This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer File: BnHcx6msc1HHHgvCJ4z0X9Agri4.cer (raw, json) Hash identifier: pdSfiAEZGtZZakEXzv5M0w2s9B1j3AJ2uJh8fZuxVrw= Subject key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E389995D1B9C90DD329E88193BB82DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8311 IP: 45.155.240.0/22 IP: 194.143.192.0/19 IP: 195.114.192.0/20 IP: 213.220.0.0/18 IP: 2a00:7100::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:99:95:d1:b9:c9:0d:d3:29:e8:81:93:bb:82:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:c5:f1:ec:6e:51:56:51:37:21:12:29:a8: 3a:8f:c0:f6:c6:a2:ad:f4:8a:9b:4a:70:46:5e:e0: a2:e8:34:85:fc:38:b0:f0:b1:87:16:e4:b5:f6:1c: d1:9a:91:38:fe:ad:53:89:b1:d7:99:0f:6b:28:90: 27:fd:37:61:90:2a:d3:5e:fc:88:6f:59:41:9b:b0: a1:99:c3:0f:3e:b7:94:4d:38:a6:b6:20:c4:00:92: dd:94:75:15:f1:88:61:a5:fd:d0:20:46:fc:c9:6e: 0d:26:c4:5a:71:1b:2e:ec:f9:a6:46:bd:2e:a5:59: 00:e8:7b:f5:ca:96:e7:35:4c:62:21:2b:30:2e:6a: ca:5d:d7:72:af:d6:d3:bc:46:3b:b0:28:02:2f:0d: f2:e8:b3:21:8f:ce:2c:71:f5:e6:ac:27:d5:18:80: f1:39:a5:3c:02:67:b1:0e:d1:06:93:2d:50:70:b6: de:40:b9:ef:87:17:10:92:b1:51:b9:d2:77:f6:e5: 86:56:79:cf:68:d0:a8:c0:c8:fc:06:73:74:be:38: 88:7a:df:33:7d:85:45:e6:f5:0d:cf:11:0d:93:f9: 45:c9:0d:09:b0:54:59:27:90:4d:7a:f9:e4:64:a3: 30:b4:ad:84:fa:1e:77:df:48:17:49:09:82:14:b8: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.240.0/22 194.143.192.0/19 195.114.192.0/20 213.220.0.0/18 IPv6: 2a00:7100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8311 Signature Algorithm: sha256WithRSAEncryption 60:70:7d:6a:41:db:91:03:c8:87:29:74:7f:74:98:5d:3c:98: b3:96:4f:cb:3f:ac:48:c6:27:ff:86:13:c4:ce:4d:db:1a:71: 60:7c:2a:90:09:1d:c0:a7:36:dc:d5:a7:49:b7:e9:67:70:81: c4:ad:60:ab:da:0d:e4:97:63:4e:62:3f:c0:a3:cb:91:e4:c9: 99:63:43:06:0d:3a:59:1d:96:b4:39:54:06:09:36:f4:92:58: 7d:b7:6e:1b:99:c8:50:e6:75:61:f6:06:01:74:0b:85:ee:f4: bc:c1:0f:be:36:6b:bc:f9:b7:bc:18:2c:c6:64:a1:e2:37:e2: 86:f5:ba:26:70:ec:bd:b8:17:31:70:35:5b:e1:d8:ce:ff:59: 12:50:a1:31:e2:f1:ee:ca:d8:d4:93:42:e0:83:69:6b:15:e7: ad:c0:37:23:1f:3f:46:c5:41:50:1f:b8:08:40:75:c1:12:f2: b8:0c:5e:0c:b6:4c:de:c0:68:c2:74:b2:48:3b:b8:f3:2c:06: ae:0f:95:6c:23:a0:ff:4c:18:d8:9e:76:ef:ac:40:37:6c:fd: 0a:9f:e4:2a:98:b2:4f:f1:c5:42:76:93:74:9a:47:a5:1f:6b: 34:f6:dd:cc:63:31:26:d5:17:50:4d:cc:5b:16:e6:d0:f5:94: fe:fe:84:ab -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt+OJmV0bnJDdMp6IGTu4LfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjcxZGNjN2E5YWM3MzUxYzcxZTBiYzIyNzhjZjQ1ZmQwMjBhZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbbF8exuUVZRNyESKag6j8D2xqKt 9IqbSnBGXuCi6DSF/Diw8LGHFuS19hzRmpE4/q1TibHXmQ9rKJAn/TdhkCrTXvyI b1lBm7ChmcMPPreUTTimtiDEAJLdlHUV8Yhhpf3QIEb8yW4NJsRacRsu7PmmRr0u pVkA6Hv1ypbnNUxiISswLmrKXddyr9bTvEY7sCgCLw3y6LMhj84scfXmrCfVGIDx OaU8AmexDtEGky1QcLbeQLnvhxcQkrFRudJ39uWGVnnPaNCowMj8BnN0vjiIet8z fYVF5vUNzxENk/lFyQ0JsFRZJ5BNevnkZKMwtK2E+h5330gXSQmCFLhyZQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFAZx3MeprHNRxx4LwieM9F/QIK4uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzFmOTQ5 My1kNDY4LTRhN2MtOGM0Yi0xZGRlYzRjY2UyNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMWY5NDkz LWQ0NjgtNGE3Yy04YzRiLTFkZGVjNGNjZTI0Yy8xL0JuSGN4Nm1zYzFISEhndkNK NHowWDlBZ3JpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLZvwAwQFwo/AAwQEw3LAAwQG1dwAMA0EAgAC MAcDBQAqAHEAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiB3MA0GCSqGSIb3DQEB CwUAA4IBAQBgcH1qQduRA8iHKXR/dJhdPJizlk/LP6xIxif/hhPEzk3bGnFgfCqQ CR3Apzbc1adJt+lncIHErWCr2g3kl2NOYj/Ao8uR5MmZY0MGDTpZHZa0OVQGCTb0 klh9t24bmchQ5nVh9gYBdAuF7vS8wQ++Nmu8+be8GCzGZKHiN+KG9bomcOy9uBcx cDVb4djO/1kSUKEx4vHuytjUk0Lgg2lrFeetwDcjHz9GxUFQH7gIQHXBEvK4DF4M tkzewGjCdLJIO7jzLAauD5VsI6D/TBjYnnbvrEA3bP0Kn+QqmLJP8cVCdpN0mkel H2s09t3MYzEm1RdQTcxbFubQ9ZT+/oSr -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:10 2026 by rpki-client