This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer File: CBho7oTF8n2RadJDwze3S2_4wU0.cer (raw, json) Hash identifier: MQobhIdZjkjxDv5eQ4V3HfVyrNSVt2VQrM8frMGV6hQ= Subject key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37E93649F6E01EF9F851F865F1558A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.140.136.0/22 IP: 2a07:1d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e9:36:49:f6:e0:1e:f9:f8:51:f8:65:f1:55:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0e:d4:1d:0b:9b:23:8b:c3:8c:c1:7c:34:66: f6:cb:a5:0f:c2:e9:4f:f1:6d:03:d7:76:2c:3a:93: ae:bc:c0:ac:19:52:a1:d6:04:f7:f2:e2:7d:5a:e5: f0:a0:40:3e:15:93:7e:dd:87:71:66:42:7a:0e:c5: 90:a6:ee:f9:9b:70:53:87:cf:58:35:3e:eb:af:16: 5c:c5:6f:09:72:37:b2:a4:d4:db:60:15:e9:44:11: e7:a7:ca:e5:ff:c7:17:ab:32:71:e8:a9:34:53:67: da:d6:ef:1d:1f:35:9a:2a:88:4d:a9:4b:92:0a:3b: bd:a8:41:4b:88:e0:37:99:89:48:4c:cc:44:9e:18: a0:6d:01:8c:40:07:27:8a:39:2f:7f:61:3f:87:d1: 50:59:41:3b:ab:bd:31:3e:fe:2c:ec:08:23:e0:93: 6c:95:f7:06:99:f1:c3:8a:c9:24:72:b5:86:46:77: 67:49:14:42:1c:2a:86:4a:29:9e:1e:d6:5f:ad:fd: 42:fe:04:2f:7b:83:83:d6:d9:6a:10:8a:42:73:d4: b4:47:9f:da:c5:9d:2d:b1:55:59:ba:77:9d:5d:9e: 65:4f:43:6c:e2:2b:9e:e2:67:ed:bd:35:b1:01:35: bc:af:c3:96:c6:fe:0b:d5:4d:f2:49:ec:3c:34:25: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.136.0/22 IPv6: 2a07:1d80::/29 Signature Algorithm: sha256WithRSAEncryption 45:e5:40:e0:c0:79:34:06:12:df:83:97:c9:e4:b9:db:dd:09: d4:7d:1c:45:32:d5:dc:c1:36:9c:97:a1:0d:63:9e:71:d4:1d: 6b:66:f1:0a:cd:64:71:d2:28:3a:14:3f:94:68:32:20:76:00: c7:87:ab:ff:f8:86:12:5d:1a:83:a1:8a:52:3e:77:6f:fc:4d: 43:fb:24:1a:01:8b:88:fa:75:5e:d3:cb:8d:5b:08:a1:e9:a8: d2:f4:87:4d:db:43:69:23:96:34:9d:60:2c:62:30:d5:4f:4a: 3c:63:3b:16:1a:75:57:38:37:53:5e:ea:95:6e:33:b9:63:35: 9a:15:e0:a5:37:18:e5:9d:c0:e9:63:e9:a7:5a:8e:d9:6a:a7: c0:0c:81:d4:a5:23:6e:22:7f:c0:c6:be:8f:ca:c5:68:27:9c: ff:cd:36:67:24:b5:81:e5:45:1d:38:5e:5b:28:d1:0a:e9:66: 9d:88:d1:f4:f9:7b:68:7f:a9:ae:64:63:b1:98:63:fb:01:5c: c2:0b:78:89:84:4f:51:05:60:24:07:c4:f5:9a:0a:f6:59:1d: fa:cf:2f:43:4a:09:3f:27:43:70:1d:f5:f0:9c:55:ec:e1:25: 35:4c:9f:64:dd:a7:fd:61:8b:b6:2e:04:76:50:a5:5f:b2:4b: 5c:de:05:31 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+N+k2SfbgHvn4Ufhl8VWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODE4NjhlZTg0YzVmMjdkOTE2OWQyNDNjMzM3Yjc0YjZmZjhjMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg7UHQubI4vDjMF8NGb2y6UPwulP 8W0D13YsOpOuvMCsGVKh1gT38uJ9WuXwoEA+FZN+3YdxZkJ6DsWQpu75m3BTh89Y NT7rrxZcxW8JcjeypNTbYBXpRBHnp8rl/8cXqzJx6Kk0U2fa1u8dHzWaKohNqUuS Cju9qEFLiOA3mYlITMxEnhigbQGMQAcnijkvf2E/h9FQWUE7q70xPv4s7Agj4JNs lfcGmfHDiskkcrWGRndnSRRCHCqGSimeHtZfrf1C/gQve4OD1tlqEIpCc9S0R5/a xZ0tsVVZunedXZ5lT0Ns4iue4mftvTWxATW8r8OWxv4L1U3ySew8NCUZ6wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2RlYzNm MS1jZTNhLTRjYjUtOWNmYy1hMzBmNTM3ZDljNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvZGVjM2Yx LWNlM2EtNGNiNS05Y2ZjLWEzMGY1MzdkOWM1Yi8xL0NCaG83b1RGOG4yUmFkSkR3 emUzUzJfNHdVMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYyIMA0EAgACMAcDBQMqBx2AMA0GCSqGSIb3 DQEBCwUAA4IBAQBF5UDgwHk0BhLfg5fJ5Lnb3QnUfRxFMtXcwTacl6ENY55x1B1r ZvEKzWRx0ig6FD+UaDIgdgDHh6v/+IYSXRqDoYpSPndv/E1D+yQaAYuI+nVe08uN Wwih6ajS9IdN20NpI5Y0nWAsYjDVT0o8YzsWGnVXODdTXuqVbjO5YzWaFeClNxjl ncDpY+mnWo7ZaqfADIHUpSNuIn/Axr6PysVoJ5z/zTZnJLWB5UUdOF5bKNEK6Wad iNH0+Xtof6muZGOxmGP7AVzCC3iJhE9RBWAkB8T1mgr2WR36zy9DSgk/J0NwHfXw nFXs4SU1TJ9k3af9YYu2LgR2UKVfsktc3gUx -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:46 2026 by rpki-client