This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer (raw, json) Hash identifier: I/C0WQoTYPE4ReudAYzAYoCo7wQrURaa7vq8B+Xccck= Subject key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE2993907972E472A634F5DC062372 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57951 IP: 37.188.88.0/21 IP: 2a00:c340::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:29:93:90:79:72:e4:72:a6:34:f5:dc:06:23:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:6a:fd:2f:ca:f3:85:fb:14:c9:94:1b:4c: 4e:16:31:54:54:71:07:2e:2e:9a:ba:f5:1a:2f:8a: 1a:bd:03:cb:37:d1:a6:53:07:4f:af:61:33:32:7a: de:9a:8b:c3:92:5a:81:e2:63:f9:11:e7:79:34:89: 08:b2:5c:5e:e6:09:45:c2:6c:fa:b6:0b:45:58:a0: 13:c7:4d:bd:09:62:dd:5b:53:b1:6e:0a:d4:68:96: 47:de:14:a4:23:df:2a:81:44:6e:54:6c:9b:8c:46: 80:70:5a:af:36:4d:f3:95:da:6a:b4:ba:3d:76:fa: 2d:cb:c6:18:92:90:91:1c:27:e7:94:c0:f8:29:fe: 1a:66:41:10:ef:d5:7e:20:45:cc:a3:a9:04:e0:02: 6f:f8:c7:50:02:1e:77:45:38:74:ef:cb:85:2f:3b: 34:e4:61:ae:3e:7e:a6:9e:85:7a:be:5e:16:ae:ca: e6:3c:d9:53:f0:72:f2:50:41:be:b4:85:f3:c5:37: d0:c5:42:7c:ab:a3:86:6d:6d:c8:01:fa:46:ad:4e: c5:6d:4c:6e:99:a7:d8:01:b7:09:fc:6f:39:1e:ff: ac:bd:cb:59:62:f5:37:a3:a3:88:d3:f0:2f:3b:9a: b7:43:14:bb:05:80:25:b7:88:5d:b3:55:69:fa:8b: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.188.88.0/21 IPv6: 2a00:c340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57951 Signature Algorithm: sha256WithRSAEncryption a6:7e:4e:e1:9e:8b:b2:86:d0:05:6b:bb:f4:ef:9a:78:fb:19: d9:31:bc:55:f5:95:1c:72:95:84:a7:9e:e4:51:7b:77:ef:7c: b6:78:fb:68:8d:9d:03:66:0a:e5:d3:ae:68:89:32:a2:0a:f2: d5:9d:81:9b:19:97:cd:78:a1:11:c0:6e:dc:7d:56:8e:35:d5: 49:54:c9:cd:1a:4f:16:4f:c4:ab:96:a1:f1:e3:8b:ac:a0:5d: d0:43:f0:d3:77:d3:20:f8:75:eb:83:48:af:96:ef:01:82:3c: 0c:13:f8:ca:9f:f9:17:cd:ed:7b:1e:88:0a:42:a8:0e:97:f2: f0:fc:d9:14:a0:6f:bb:65:59:9a:f7:26:d9:9c:a5:0b:55:aa: dd:8c:de:69:57:7a:5c:5c:f7:88:79:42:1b:a3:7d:21:ba:61: 18:25:27:b0:d3:cc:5a:b4:0c:73:6a:f7:3d:45:8b:30:d2:42: 7e:e3:44:33:df:87:e9:85:82:11:bb:de:3b:ee:a2:05:40:08: 4f:23:36:cb:af:2a:4d:c5:b5:9d:07:47:21:cc:65:1c:e9:3d: fd:62:9c:c2:88:fc:a6:e0:2e:2a:98:56:8b:4a:91:ab:57:55: 41:a7:39:9b:63:b1:f0:16:37:f4:a4:d0:86:6b:84:43:20:65: 57:8a:11:b0 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt87imTkHly5HKmNPXcBiNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTEyOWNjYmI4YzI0MWE5YzliMWZmMjA3MzBhMjY0OTU2YjUwMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15tq/S/K84X7FMmUG0xOFjFUVHEH Li6auvUaL4oavQPLN9GmUwdPr2EzMnremovDklqB4mP5Eed5NIkIslxe5glFwmz6 tgtFWKATx029CWLdW1OxbgrUaJZH3hSkI98qgURuVGybjEaAcFqvNk3zldpqtLo9 dvoty8YYkpCRHCfnlMD4Kf4aZkEQ79V+IEXMo6kE4AJv+MdQAh53RTh078uFLzs0 5GGuPn6mnoV6vl4WrsrmPNlT8HLyUEG+tIXzxTfQxUJ8q6OGbW3IAfpGrU7FbUxu mafYAbcJ/G85Hv+svctZYvU3o6OI0/AvO5q3QxS7BYAlt4hds1Vp+ouLNwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFPoSnMu4wkGpybH/IHMKJklWtQKUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzMwMDgz OS0xOTJlLTRlYTktOTlmMi0xOGZkODU2YTU4YjcvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMzAwODM5 LTE5MmUtNGVhOS05OWYyLTE4ZmQ4NTZhNThiNy8xLzEtaEtjeTdqQ1FhbkpzZjhn Y3dvbVNWYTFBcFEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAyW8WDANBAIAAjAHAwUAKgDDQDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA4l8wDQYJKoZIhvcNAQELBQADggEBAKZ+TuGei7KG 0AVru/Tvmnj7GdkxvFX1lRxylYSnnuRRe3fvfLZ4+2iNnQNmCuXTrmiJMqIK8tWd gZsZl814oRHAbtx9Vo411UlUyc0aTxZPxKuWofHji6ygXdBD8NN30yD4deuDSK+W 7wGCPAwT+Mqf+RfN7XseiApCqA6X8vD82RSgb7tlWZr3JtmcpQtVqt2M3mlXelxc 94h5QhujfSG6YRglJ7DTzFq0DHNq9z1FizDSQn7jRDPfh+mFghG73jvuogVACE8j NsuvKk3FtZ0HRyHMZRzpPf1inMKI/KbgLiqYVotKkatXVUGnOZtjsfAWN/Sk0IZr hEMgZVeKEbA= -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:00 2026 by rpki-client