This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer File: 1hocPCWQccK8vCf3kf0eIPWAqWo.cer (raw, json) Hash identifier: bvDAAGhs6bnJ3g+BFweczhzKqhWd5ky/MzP89uxTzUY= Subject key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC861B9654B1A656191CA2385ABF404 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56667 IP: 91.226.140.0/22 IP: 176.113.120.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:61:b9:65:4b:1a:65:61:91:ca:23:85:ab:f4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:aa:0e:3c:ce:07:8d:30:0f:66:9c:a8:b2: 1e:48:89:dd:70:6a:1b:de:18:d7:2c:dc:e4:7a:7b: 0c:a0:88:a5:8a:0e:d4:12:af:7a:3d:4d:4b:25:c1: e2:e6:f7:14:80:20:2b:f6:58:b9:9f:47:87:3a:05: a5:40:ae:68:6c:89:79:81:21:12:ab:e7:24:58:f0: 7e:93:5b:08:28:17:c7:13:81:14:47:50:5b:e5:6d: 82:4e:1d:9e:45:2d:59:0a:38:96:f4:0f:aa:33:ae: 51:6a:25:c1:67:c7:fd:d0:84:e3:8d:0a:8d:f3:50: 0d:5d:b4:17:dc:75:d5:1f:ea:32:94:b5:de:95:63: 8c:ee:2c:c1:5b:30:8a:1f:c0:bc:56:2e:60:2d:b0: 10:02:de:7d:0b:6d:bc:7b:13:6c:da:30:37:42:23: 6a:c3:0d:f6:75:8e:a5:aa:fa:26:66:c2:8f:48:f6: c8:4d:9d:89:ba:1a:b2:a8:c0:d7:f9:7b:b9:23:64: 0f:83:d6:e6:cf:b1:90:5d:db:11:4e:03:7f:61:21: 56:10:73:f0:9a:bb:54:07:c5:3e:35:59:e2:bf:3b: 6c:5a:78:fb:42:44:0a:92:ee:c2:2d:3e:95:3d:82: a2:6d:3d:c6:0b:1e:3e:9c:d8:d4:ab:f1:d2:5f:d7: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.140.0/22 176.113.120.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56667 Signature Algorithm: sha256WithRSAEncryption 7c:e1:c9:ad:e6:de:d2:2c:69:02:97:66:f4:11:87:73:3b:73: f3:e2:4a:2a:6b:2d:f7:ec:9a:15:d9:68:94:22:9e:b6:00:f2: 37:c0:04:ed:e4:f3:f8:6e:27:fc:89:6e:e2:37:d6:a4:46:8e: 26:43:3f:62:5d:00:0c:62:78:65:66:51:55:af:d9:47:2f:b5: ac:a3:05:58:77:a8:c9:8e:b9:f2:e3:85:1a:54:6d:07:9f:10: 13:f6:de:04:12:c3:6d:7c:00:b5:3f:ec:9e:95:24:63:6b:9f: 89:7a:b4:66:30:ce:d5:b1:3b:73:47:6e:7e:ef:e9:e9:37:df: 3e:9c:a5:0d:b8:68:53:82:7e:1c:37:47:e8:29:6d:01:ac:9e: 92:8d:63:79:5d:90:9f:07:38:c7:5e:5d:b2:2e:61:51:a5:90: 18:18:d4:11:94:e2:26:c1:3e:74:0e:9f:7d:c1:0b:7f:9c:00: 32:0e:90:e6:c0:86:a1:b4:96:95:e6:49:ba:c9:70:f2:06:d7: 59:52:4d:6d:fd:cc:5e:68:bd:f7:f1:c8:8b:5d:65:b6:2e:1b: 0d:a8:fb:f4:a6:4b:96:12:04:70:af:73:e8:73:f2:ee:e8:98: d3:1b:58:52:cc:7a:c5:a2:d5:ba:46:bb:6b:f5:06:10:05:7d: e1:ba:17:24 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6yGG5ZUsaZWGRyiOFq/QEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjFhMWMzYzI1OTA3MWMyYmNiYzI3Zjc5MWZkMWUyMGY1ODBhOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7GqDjzOB40wD2acqLIeSIndcGob 3hjXLNzkensMoIilig7UEq96PU1LJcHi5vcUgCAr9li5n0eHOgWlQK5obIl5gSES q+ckWPB+k1sIKBfHE4EUR1Bb5W2CTh2eRS1ZCjiW9A+qM65RaiXBZ8f90ITjjQqN 81ANXbQX3HXVH+oylLXelWOM7izBWzCKH8C8Vi5gLbAQAt59C228exNs2jA3QiNq ww32dY6lqvomZsKPSPbITZ2JuhqyqMDX+Xu5I2QPg9bmz7GQXdsRTgN/YSFWEHPw mrtUB8U+NVnivztsWnj7QkQKku7CLT6VPYKibT3GCx4+nNjUq/HSX9dN+QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFNYaHDwlkHHCvLwn95H9HiD1gKlqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzQ2Y2Q4 Ni02ZGUxLTRjM2QtYjBmNy04NTcxNDA2Njk3YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDZjZDg2 LTZkZTEtNGMzZC1iMGY3LTg1NzE0MDY2OTdhZC8xLzFob2NQQ1dRY2NLOHZDZjNr ZjBlSVBXQXFXby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW+KMAwQDsHF4MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDdWzANBgkqhkiG9w0BAQsFAAOCAQEAfOHJrebe0ixpApdm9BGHcztz 8+JKKmst9+yaFdlolCKetgDyN8AE7eTz+G4n/Ilu4jfWpEaOJkM/Yl0ADGJ4ZWZR Va/ZRy+1rKMFWHeoyY658uOFGlRtB58QE/beBBLDbXwAtT/snpUkY2ufiXq0ZjDO 1bE7c0dufu/p6TffPpylDbhoU4J+HDdH6CltAayeko1jeV2Qnwc4x15dsi5hUaWQ GBjUEZTiJsE+dA6ffcELf5wAMg6Q5sCGobSWleZJuslw8gbXWVJNbf3MXmi99/HI i11lti4bDaj79KZLlhIEcK9z6HPy7uiY0xtYUsx6xaLVuka7a/UGEAV94boXJA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:05 2026 by rpki-client