This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer File: boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer (raw, json) Hash identifier: 5NguTBefrueSHSLqDQPBeNExblmGH5n5p8nhzWU6+Ig= Subject key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F151B9BFDF8F7C6752D716256FA9BD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42764 IP: 185.43.16.0/22 IP: 2a01:6760::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1b:9b:fd:f8:f7:c6:75:2d:71:62:56:fa:9b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:73:d0:dd:40:40:3b:80:a2:86:9d:72:aa: 6b:8f:24:18:73:0b:ed:b5:e6:1a:ae:44:f0:16:24: 22:36:02:3c:80:28:bd:f6:4b:fe:f9:09:66:d8:bd: f2:f8:67:45:1d:3a:70:e1:dc:fa:d6:94:17:2e:61: e0:0c:d5:78:00:9e:e6:ef:86:97:5e:30:a5:fe:f6: 42:b0:f4:66:48:43:02:4c:b9:5c:71:8e:43:68:24: 0c:28:c6:71:b7:52:2f:31:e6:e2:69:47:f9:d0:81: c4:5c:9b:23:f2:4b:06:39:29:b6:46:c7:11:40:18: 31:9f:20:ef:f2:25:1d:6f:46:0c:c3:b9:3f:02:91: cf:13:56:6e:2d:3b:83:c4:5c:26:7a:fb:9a:cd:02: 32:69:64:e7:49:64:3a:a3:1e:0d:46:da:ad:d0:9e: d5:27:e8:5a:52:47:7b:70:2a:d0:07:64:70:80:54: df:06:8d:c8:20:b9:95:b6:ad:6a:e1:e3:2d:08:0f: a1:7a:26:7b:0d:3b:15:93:d8:3c:f8:6c:29:49:52: 35:e8:90:e2:cd:03:a8:ed:59:29:7b:d4:9b:e1:bc: 45:33:e6:8b:5c:05:8c:88:17:9f:ce:b4:0b:b2:f0: 70:c5:52:08:dd:63:4d:a9:ad:57:ae:d6:16:5a:1d: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.16.0/22 IPv6: 2a01:6760::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42764 Signature Algorithm: sha256WithRSAEncryption 62:85:f3:53:10:03:67:fa:02:90:05:14:40:70:ea:d8:a2:03: c1:0d:fd:a4:c7:93:65:1a:06:41:df:40:06:8a:55:c5:ff:f2: 86:17:02:21:ad:02:fa:29:3f:d0:f7:8d:2e:99:80:45:c8:0b: 20:0f:fa:e0:7f:96:01:97:97:27:38:9c:46:d5:b4:1e:cd:31: 29:ff:d8:ac:93:17:3d:ea:94:27:58:43:bf:71:a9:16:f2:d0: 1e:4c:88:b0:cc:96:44:69:8f:5b:b4:49:82:df:de:6e:6f:f2: 62:ab:1d:c4:43:92:ac:4f:e1:73:96:0b:30:d6:2b:ab:11:83: 1f:84:f1:ca:d3:12:64:df:63:1c:f2:5f:74:e6:24:02:95:18: 76:7b:94:5d:42:ec:d4:e7:53:1c:01:b6:41:68:fb:b3:2b:6b: a0:98:8f:3f:5a:2f:23:d0:78:a6:91:e9:bd:18:a2:8d:30:ab: 91:5f:ce:a8:40:0b:ad:94:87:e2:6e:46:94:b6:ea:5e:5d:4b: f6:d9:f8:d7:5e:06:5e:d6:28:20:65:60:bb:6b:77:f1:3b:d7: 7b:64:e6:2a:5c:af:8b:9c:ca:dd:55:16:90:3b:78:21:a7:c6: 80:01:47:45:13:85:61:22:1b:9c:9a:15:e0:07:db:d0:86:98: 2a:f3:b1:f8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FRub/fj3xnUtcWJW+pvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTgzMjUxNjYxYjBiNzc0MjcxYzVjZjUyNmFhYjg4NGIxZmE3YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUVz0N1AQDuAooadcqprjyQYcwvt teYarkTwFiQiNgI8gCi99kv++Qlm2L3y+GdFHTpw4dz61pQXLmHgDNV4AJ7m74aX XjCl/vZCsPRmSEMCTLlccY5DaCQMKMZxt1IvMebiaUf50IHEXJsj8ksGOSm2RscR QBgxnyDv8iUdb0YMw7k/ApHPE1ZuLTuDxFwmevuazQIyaWTnSWQ6ox4NRtqt0J7V J+haUkd7cCrQB2RwgFTfBo3IILmVtq1q4eMtCA+heiZ7DTsVk9g8+GwpSVI16JDi zQOo7Vkpe9Sb4bxFM+aLXAWMiBefzrQLsvBwxVII3WNNqa1XrtYWWh1QTwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG6DJRZhsLd0Jxxc9SaquISx+nx+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2M2MjZk NS1kNDA1LTQwNmUtOGM4MS01YzAxODE3ZmI4MjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvYzYyNmQ1 LWQ0MDUtNDA2ZS04YzgxLTVjMDE4MTdmYjgyMi8xL2JvTWxGbUd3dDNRbkhGejFK cXE0aExINmZINC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSsQMA0EAgACMAcDBQAqAWdgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCnDDANBgkqhkiG9w0BAQsFAAOCAQEAYoXzUxADZ/oC kAUUQHDq2KIDwQ39pMeTZRoGQd9ABopVxf/yhhcCIa0C+ik/0PeNLpmARcgLIA/6 4H+WAZeXJzicRtW0Hs0xKf/YrJMXPeqUJ1hDv3GpFvLQHkyIsMyWRGmPW7RJgt/e bm/yYqsdxEOSrE/hc5YLMNYrqxGDH4TxytMSZN9jHPJfdOYkApUYdnuUXULs1OdT HAG2QWj7sytroJiPP1ovI9B4ppHpvRiijTCrkV/OqEALrZSH4m5GlLbqXl1L9tn4 114GXtYoIGVgu2t38TvXe2TmKlyvi5zK3VUWkDt4IafGgAFHRROFYSIbnJoV4Afb 0IaYKvOx+A== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:23 2026 by rpki-client