This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.cer (raw, json) Hash identifier: EKfp191HDn+6AsiacxjQE+solsGQQx9ar434EXXPw+I= Subject key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC93E688D8B18D343B39AA3812DB622 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216369 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:3e:68:8d:8b:18:d3:43:b3:9a:a3:81:2d:b6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d1:4b:ee:be:12:2f:a4:09:04:f7:24:cb:f4: c5:c1:50:a6:59:82:4f:96:ca:9e:04:05:88:9a:2d: ee:39:ec:ba:78:3b:82:89:54:c2:85:85:a0:5c:ca: 30:a5:0b:6b:f6:96:62:d9:49:c5:80:c7:a1:f7:35: a3:a1:ec:58:53:a0:e8:69:3a:92:8f:3b:c3:be:e5: 93:17:b4:3d:a1:9b:00:e4:b1:80:41:ce:5d:43:59: 5c:e6:52:70:91:f2:a6:d5:6b:01:de:92:37:bd:55: eb:03:0c:c2:dc:0b:d4:a5:10:37:8d:fa:fc:bb:8d: da:83:e6:e7:e7:2d:7d:5d:5b:e1:96:20:49:e5:07: 41:18:7a:92:84:fa:6d:79:36:8d:ef:b4:dc:b4:f4: 95:66:a6:e8:b7:41:f1:b4:08:66:49:74:b7:c3:1d: 62:a5:b5:86:ae:cb:b4:4c:ac:50:ca:64:e2:a1:fb: b8:52:dc:4e:22:74:75:e7:41:81:0e:9b:68:b4:70: e3:48:ba:f2:b9:cc:eb:0c:d8:5a:59:b7:e5:00:10: f8:97:1d:2d:25:9f:57:d0:c1:aa:33:75:b7:80:06: d1:6c:d6:38:d8:e6:6e:30:00:d7:85:7e:6f:38:4d: 9f:39:8e:fb:b9:a4:c5:4d:2b:15:4c:8a:dc:ea:fc: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216369 Signature Algorithm: sha256WithRSAEncryption 5d:ee:e0:fe:f0:20:9d:a1:f3:24:a4:35:dc:e0:4c:c7:b6:a6: 06:8c:1f:eb:0b:a9:55:16:73:22:a8:14:a5:2b:e9:20:73:d4: f8:ef:e3:ab:62:52:e7:53:1d:6f:98:3d:ce:26:6a:60:45:15: e7:59:b4:a8:f5:1c:ea:35:a3:a2:07:bd:e8:1c:2d:d1:a0:31: 91:52:3b:bc:ef:ef:d4:1a:2c:7d:d1:cb:c8:1f:2d:ed:8a:f6: 6a:ca:45:7a:e8:f3:df:a3:cf:31:b4:fc:01:d1:de:42:a3:c0: d0:b1:3a:76:c3:df:f2:24:90:33:79:e6:2f:e9:7b:b5:a4:94: c2:c6:14:41:46:e9:d7:01:2f:60:51:04:de:01:02:69:6c:71: 8f:b2:a1:ff:ce:42:e4:dd:2c:c9:1e:12:b2:95:18:99:22:c9: 50:f0:c1:a3:e9:7d:f3:fc:bc:17:be:9f:5f:0c:8f:38:1b:70: 58:a1:eb:a3:8e:68:cd:89:a2:fe:93:9d:8c:07:24:0e:d7:24: 61:e9:bd:3d:68:f3:3a:82:1c:22:6d:69:a3:b1:fc:4d:d1:5d: 1d:aa:b9:d5:a7:b5:8f:35:89:81:0a:fe:68:7a:8b:19:1e:80: c1:9a:ad:73:7e:4c:99:86:4d:28:d1:0c:e0:06:8f:49:a2:0c: b3:39:c3:fa -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt9yT5ojYsY00OzmqOBLbYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODdjNTg2NDYyYzNmM2ZkN2U2Mjc4MGY0ZDMzZjE4YjZhNjliYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NFL7r4SL6QJBPcky/TFwVCmWYJP lsqeBAWImi3uOey6eDuCiVTChYWgXMowpQtr9pZi2UnFgMeh9zWjoexYU6DoaTqS jzvDvuWTF7Q9oZsA5LGAQc5dQ1lc5lJwkfKm1WsB3pI3vVXrAwzC3AvUpRA3jfr8 u43ag+bn5y19XVvhliBJ5QdBGHqShPpteTaN77TctPSVZqbot0HxtAhmSXS3wx1i pbWGrsu0TKxQymTiofu4UtxOInR150GBDptotHDjSLryuczrDNhaWbflABD4lx0t JZ9X0MGqM3W3gAbRbNY42OZuMADXhX5vOE2fOY77uaTFTSsVTIrc6vy8bwIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPh8WGRiw/P9fmJ4D00z8YtqabrBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2Y5OWU5 ZC03YThlLTQwZGEtODg5Yi1lM2FjY2E1ZWJmZjAvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvZjk5ZTlk LTdhOGUtNDBkYS04ODliLWUzYWNjYTVlYmZmMC8xLzEtSHhZWkdMRDhfMS1ZbmdQ VFRQeGkycHB1c0UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDTTEwDQYJKoZIhvcNAQELBQADggEBAF3u4P7wIJ2h 8ySkNdzgTMe2pgaMH+sLqVUWcyKoFKUr6SBz1Pjv46tiUudTHW+YPc4mamBFFedZ tKj1HOo1o6IHvegcLdGgMZFSO7zv79QaLH3Ry8gfLe2K9mrKRXro89+jzzG0/AHR 3kKjwNCxOnbD3/IkkDN55i/pe7WklMLGFEFG6dcBL2BRBN4BAmlscY+yof/OQuTd LMkeErKVGJkiyVDwwaPpffP8vBe+n18MjzgbcFih66OOaM2Jov6TnYwHJA7XJGHp vT1o8zqCHCJtaaOx/E3RXR2qudWntY81iYEK/mh6ixkegMGarXN+TJmGTSjRDOAG j0miDLM5w/o= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:38 2026 by rpki-client