This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer File: boP2het7ai-EZLmXEpM41j9-7Wo.cer (raw, json) Hash identifier: 1TVizk4B0ZujU+O5Il8EFOk+9Ea9Fjud2zq2hddME7M= Subject key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8525A079E1C4F570B9DA2E08E205E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.130.192.0/22 IP: 2a0e:57c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:25:a0:79:e1:c4:f5:70:b9:da:2e:08:e2:05:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:b9:72:cd:22:8e:42:39:6f:d0:1e:b0:6a: 58:37:1c:6e:db:56:3c:06:2d:4f:72:da:db:29:e8: b1:e2:e1:c3:70:43:a3:99:62:2f:70:75:93:8d:ad: 94:87:be:ba:f0:fc:3b:e9:43:58:a6:f3:fe:2e:c5: aa:d8:ef:1f:4a:7b:7e:fb:82:f0:f2:60:a6:5c:3c: 82:e0:40:bc:21:07:00:76:48:9d:cc:76:c2:d5:11: a6:c7:c2:b2:7e:37:33:0c:90:7a:ec:d0:90:de:2e: 58:ca:8f:fb:44:2c:2e:a5:8d:bc:88:b3:f1:ae:7e: ff:bf:30:a4:ae:7e:15:23:62:48:9b:c6:ed:6a:cb: d6:ba:24:01:b2:54:bc:6d:6c:06:9b:23:ac:f9:8c: bb:39:8c:a0:d0:5f:bb:b8:2f:d6:aa:03:72:2b:6f: a0:fa:be:23:35:7c:e8:cb:d3:e1:ab:c2:0b:76:e3: 1b:65:8d:9d:da:9f:60:47:29:73:ed:8d:ed:6d:8d: 0b:17:e3:d1:ae:f4:cb:96:cc:9e:40:37:f4:02:30: a2:17:1e:3e:5e:f9:6e:f2:2d:5a:64:1a:e5:c4:b2: 9a:72:47:e0:b8:c8:11:de:ae:22:6c:d9:65:ec:a7: 80:67:dc:f8:51:a4:b6:7e:6f:a0:ef:91:a5:61:90: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.192.0/22 IPv6: 2a0e:57c0::/29 Signature Algorithm: sha256WithRSAEncryption 73:ee:51:cd:6e:3d:d8:e8:7d:e2:5e:6e:0e:56:cc:ab:80:c6: 18:1b:01:36:b5:69:38:41:8b:b1:c7:7b:a3:fb:e3:0d:7a:62: f3:ff:6c:f3:63:57:8a:0e:41:f0:3c:9c:ea:c8:ba:d4:55:42: 4e:80:05:7b:41:d3:53:4d:e9:ab:26:f6:5f:68:40:90:03:6e: 8e:5e:53:15:13:a0:cb:81:2b:12:e9:6c:37:ee:17:e9:c6:ef: 30:21:56:a3:07:f2:36:d7:59:50:12:30:20:34:00:01:23:94: 3f:44:d8:21:cf:10:4d:75:16:90:95:6e:19:74:d6:d9:f9:4c: 66:d6:07:6a:d0:88:c5:d9:c1:61:0c:47:9d:2f:96:50:cd:2f: ca:ae:23:37:e3:38:b3:99:65:5e:dd:21:7f:4b:9e:52:d6:c6: bd:54:89:7f:da:75:61:c5:50:2f:f2:aa:a9:a6:8a:93:73:1a: 48:1f:4d:89:c4:ac:f6:fe:16:e7:77:83:06:92:f5:98:2c:e5: 0d:7d:af:01:02:7f:b4:b9:20:7d:7d:3b:63:7d:84:7c:31:88: 4d:37:61:18:29:c9:0c:00:0a:98:dd:1d:c8:5f:26:b6:64:2f: 37:7a:c4:25:47:43:b5:a9:ee:eb:80:72:b5:a3:5f:d3:c8:75: df:e2:b6:45 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/hSWgeeHE9XC52i4I4gXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTgzZjY4NWViN2I2YTJmODQ2NGI5OTcxMjkzMzhkNjNmN2VlZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5by5cs0ijkI5b9AesGpYNxxu21Y8 Bi1PctrbKeix4uHDcEOjmWIvcHWTja2Uh7668Pw76UNYpvP+LsWq2O8fSnt++4Lw 8mCmXDyC4EC8IQcAdkidzHbC1RGmx8KyfjczDJB67NCQ3i5Yyo/7RCwupY28iLPx rn7/vzCkrn4VI2JIm8btasvWuiQBslS8bWwGmyOs+Yy7OYyg0F+7uC/WqgNyK2+g +r4jNXzoy9Phq8ILduMbZY2d2p9gRylz7Y3tbY0LF+PRrvTLlsyeQDf0AjCiFx4+ Xvlu8i1aZBrlxLKackfguMgR3q4ibNll7KeAZ9z4UaS2fm+g75GlYZBstwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFG6D9oXre2ovhGS5lxKTONY/fu1qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzRhZWI4 YS1iOTZmLTRlYzQtOGQ4ZS1lYWJlMzRlODAyYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvNGFlYjhh LWI5NmYtNGVjNC04ZDhlLWVhYmUzNGU4MDJiNC8xL2JvUDJoZXQ3YWktRVpMbVhF cE00MWo5LTdXby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYLAMA0EAgACMAcDBQMqDlfAMA0GCSqGSIb3 DQEBCwUAA4IBAQBz7lHNbj3Y6H3iXm4OVsyrgMYYGwE2tWk4QYuxx3uj++MNemLz /2zzY1eKDkHwPJzqyLrUVUJOgAV7QdNTTemrJvZfaECQA26OXlMVE6DLgSsS6Ww3 7hfpxu8wIVajB/I211lQEjAgNAABI5Q/RNghzxBNdRaQlW4ZdNbZ+Uxm1gdq0IjF 2cFhDEedL5ZQzS/KriM34zizmWVe3SF/S55S1sa9VIl/2nVhxVAv8qqppoqTcxpI H02JxKz2/hbnd4MGkvWYLOUNfa8BAn+0uSB9fTtjfYR8MYhNN2EYKckMAAqY3R3I Xya2ZC83esQlR0O1qe7rgHK1o1/TyHXf4rZF -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:30 2026 by rpki-client