This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer File: D_HA6RHM5MRT_sKxaPbBPTbg34U.cer (raw, json) Hash identifier: dbXLiyLiniOpOASZKtbnocTtI6g8O6+4yJ05Vn7ydPQ= Subject key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA44804489B0C09A1A726EC35731C3FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 12:25:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.15.194.0/24 IP: 194.39.175.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:44:80:44:89:b0:c0:9a:1a:72:6e:c3:57:31:c3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 12:25:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:e4:fe:93:7b:1f:65:b2:4f:67:77:c8:6f: 1c:6e:b0:37:53:56:17:04:51:20:df:80:d4:53:c4: 90:14:ff:96:a3:aa:c8:58:4e:0a:ef:85:36:88:19: 64:7a:59:86:6c:49:7a:5d:43:12:2d:cb:7b:17:56: 23:0c:ae:43:14:0c:dd:3d:32:79:be:36:ad:ec:12: de:dd:21:b1:fd:db:0b:42:bf:07:fd:fc:c0:40:66: 21:8b:b6:b4:23:2d:a2:47:5b:13:b1:7e:a0:fb:7f: ad:d3:35:2c:c4:87:7e:aa:c0:52:33:ca:85:43:74: 4e:b7:09:9b:50:8b:1d:a1:d8:a6:46:08:9c:74:14: 56:ea:c8:91:c1:f6:2b:e5:b5:f4:69:35:58:33:23: 2f:2b:f1:be:63:56:b1:71:53:f8:25:10:15:21:aa: 29:a6:ae:c0:71:11:29:58:b4:0c:f8:4a:4a:c5:d5: 95:64:3c:02:76:b4:52:8f:8e:0e:8e:87:1d:32:6e: 78:fd:b9:3e:56:89:40:e0:a4:1a:b1:cc:93:0d:78: 8c:c9:40:dd:4f:61:57:08:bf:37:ab:e9:96:8c:a3: 4b:7b:10:e8:33:67:ad:44:e9:75:14:35:e4:5b:c8: e5:87:34:ed:d9:42:12:ee:3e:4f:41:f9:1b:5b:29: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.194.0/24 194.39.175.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:ed:9f:8f:4b:2e:9d:a6:4e:04:7d:e6:4e:9e:d5:5b:50:1b: 4c:81:5b:06:c2:ac:c0:63:f7:9a:b4:ab:89:47:0b:bd:16:de: 15:24:c2:52:85:16:00:04:11:27:db:7a:c1:4a:df:df:35:f6: 33:a5:76:92:31:02:5f:6c:b3:0e:fa:8d:81:c8:4d:b8:8f:09: dd:f5:84:68:a3:c7:e8:33:44:e4:8f:7f:17:b2:bc:7f:80:2a: c7:9e:39:df:a4:c5:10:6b:b7:4f:f8:9b:82:f8:e7:b7:69:75: 24:e1:8d:7b:e8:d1:17:e8:d4:97:4b:ed:a9:50:91:ce:6f:cf: 58:4a:96:54:f7:e3:02:04:f5:8c:b5:f9:0e:a0:be:b2:b1:0e: 6a:d1:c5:77:9d:6a:c3:00:d1:8f:b1:24:5f:eb:58:84:77:34: 86:7e:a1:0f:cb:df:a6:2c:65:3f:8e:ef:8f:e7:ff:1a:30:15: a6:5c:3f:52:4f:a1:9b:ef:dc:31:ae:08:fe:76:5c:5f:61:32: e3:8b:f4:0a:6a:c3:a8:56:28:c5:f2:0a:fb:e8:ff:00:31:b3: 2f:59:d0:11:3e:71:21:63:cf:79:d8:7c:70:2a:c3:b6:a3:57: 3e:75:bf:6f:61:db:20:ec:bc:9a:ee:63:fd:7f:ce:0d:25:a5: 09:b3:c4:e9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZv6RIBEibDAmhpybsNXMcP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTIyNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmYxYzBlOTExY2NlNGM0NTNmZWMyYjE2OGY2YzEzZDM2ZTBkZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I7k/pN7H2WyT2d3yG8cbrA3U1YX BFEg34DUU8SQFP+Wo6rIWE4K74U2iBlkelmGbEl6XUMSLct7F1YjDK5DFAzdPTJ5 vjat7BLe3SGx/dsLQr8H/fzAQGYhi7a0Iy2iR1sTsX6g+3+t0zUsxId+qsBSM8qF Q3ROtwmbUIsdodimRgicdBRW6siRwfYr5bX0aTVYMyMvK/G+Y1axcVP4JRAVIaop pq7AcREpWLQM+EpKxdWVZDwCdrRSj44OjocdMm54/bk+VolA4KQascyTDXiMyUDd T2FXCL83q+mWjKNLexDoM2etROl1FDXkW8jlhzTt2UIS7j5PQfkbWykUOQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFA/xwOkRzOTEU/7CsWj2wT024N+FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzdkMmU1 MS0yMmQyLTQ2MWEtYWEyZS03OWQxM2ZhYWI2MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvN2QyZTUx LTIyZDItNDYxYS1hYTJlLTc5ZDEzZmFhYjYyYy8xL0RfSEE2UkhNNU1SVF9zS3hh UGJCUFRiZzM0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwg/CAwQAwievMA0GCSqGSIb3DQEBCwUAA4IB AQCO7Z+PSy6dpk4EfeZOntVbUBtMgVsGwqzAY/eatKuJRwu9Ft4VJMJShRYABBEn 23rBSt/fNfYzpXaSMQJfbLMO+o2ByE24jwnd9YRoo8foM0Tkj38Xsrx/gCrHnjnf pMUQa7dP+JuC+Oe3aXUk4Y176NEX6NSXS+2pUJHOb89YSpZU9+MCBPWMtfkOoL6y sQ5q0cV3nWrDANGPsSRf61iEdzSGfqEPy9+mLGU/ju+P5/8aMBWmXD9ST6Gb79wx rgj+dlxfYTLji/QKasOoVijF8gr76P8AMbMvWdARPnEhY8952HxwKsO2o1c+db9v Ydsg7Lya7mP9f84NJaUJs8Tp -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:45 2026 by rpki-client