This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer File: H4SiSB0oDeChA1mCdtsMlUGTx1U.cer (raw, json) Hash identifier: NgveEdsT33zDQQvnnT33ELex6GYaDHD8YMyLaDOMSsY= Subject key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C08A81C98F0E092600ACDD5F233D10E52 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 29 Jan 2026 07:29:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209161 IP: 193.24.0.0/23 IP: 193.24.4.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:a8:1c:98:f0:e0:92:60:0a:cd:d5:f2:33:d1:0e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 29 07:29:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f84a2481d280de0a103598276db0c954193c755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:bd:8d:47:77:23:48:60:16:19:47:ad:29: 0e:51:f0:24:31:27:28:89:b5:69:25:9b:41:a9:03: ae:60:14:ca:2b:9d:b0:b9:76:e4:b6:b4:d9:5e:d5: 94:eb:ca:e4:08:5e:cd:97:9f:27:83:a9:49:0f:bf: 3d:86:fe:2b:d9:5d:bc:1b:f4:e5:51:16:dc:dc:04: dd:01:9d:9b:e1:be:9f:6d:9f:d3:0a:7c:16:e3:ad: c9:eb:2a:a6:93:10:b6:2d:08:5f:4c:dd:83:f1:3e: c5:d6:63:15:4f:ad:00:b6:35:a1:dd:35:9f:1c:2f: 64:93:e4:fb:fc:44:8b:9a:97:2b:75:ed:05:bd:80: 87:f5:48:a3:19:83:de:ce:e1:76:93:14:d1:c3:8e: 5a:5f:32:d1:82:dd:d4:7b:5c:ed:d6:e8:db:ac:59: 4f:a2:73:c9:e8:1f:ee:0a:96:34:05:eb:97:93:0d: e0:79:b5:73:40:7e:ab:27:9e:29:71:bc:07:f6:65: 02:fa:7a:6e:02:ec:0f:c1:fb:13:e9:60:75:27:29: 63:a6:34:7a:1d:4f:7e:56:e4:3f:ec:1d:3b:3e:bb: ae:be:1f:cc:57:93:14:4e:b7:1b:25:83:92:6e:b5: 44:fc:78:0d:d8:a9:a4:08:fe:58:e1:c2:a3:81:07: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.0.0/23 193.24.4.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209161 Signature Algorithm: sha256WithRSAEncryption a3:82:57:c2:99:55:ec:39:79:89:69:fc:64:49:1e:99:7c:a9: 02:4c:8c:93:5e:68:b1:5b:92:5f:dd:bd:92:ec:ee:3c:52:82: 5c:88:26:a0:ba:16:d3:bd:4c:67:be:98:a1:e1:d0:6f:e2:a9: 73:12:e2:64:7f:db:81:84:f5:98:06:5a:db:bc:d0:90:6c:82: cb:c1:87:2d:cd:f5:2a:90:f2:d6:c4:bd:f6:9c:62:d1:43:2f: 07:0e:fd:92:9a:ac:47:98:2f:1c:9f:e5:35:49:d2:9e:c6:cb: fc:d6:6c:1e:38:b2:7d:70:30:fa:77:a1:72:f2:5a:c7:22:fc: 87:19:4f:0f:aa:04:5b:6e:e5:56:0a:3c:47:cd:71:5e:1b:4f: de:5b:e3:3f:97:2c:b8:e6:8f:a6:87:9d:c6:3f:68:50:aa:cf: 00:d1:ae:94:14:1a:36:9a:c8:96:e9:d3:db:76:04:0b:41:1c: c0:a1:76:36:e2:ac:e2:9e:78:12:26:02:1e:ea:c3:d8:9c:97: 04:38:9b:08:21:b9:43:f1:0b:56:bd:77:21:9a:06:1f:a4:69: f3:02:fe:08:aa:c7:df:fa:ac:ce:93:66:3b:db:1c:72:0a:ac: 33:18:48:fd:46:68:1d:62:37:2f:af:ab:a5:43:e1:72:b1:18: dc:08:b7:31 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZwIqByY8OCSYArN1fIz0Q5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI5MDcyOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjg0YTI0ODFkMjgwZGUwYTEwMzU5ODI3NmRiMGM5NTQxOTNjNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx869jUd3I0hgFhlHrSkOUfAkMSco ibVpJZtBqQOuYBTKK52wuXbktrTZXtWU68rkCF7Nl58ng6lJD789hv4r2V28G/Tl URbc3ATdAZ2b4b6fbZ/TCnwW463J6yqmkxC2LQhfTN2D8T7F1mMVT60AtjWh3TWf HC9kk+T7/ESLmpcrde0FvYCH9UijGYPezuF2kxTRw45aXzLRgt3Ue1zt1ujbrFlP onPJ6B/uCpY0BeuXkw3gebVzQH6rJ54pcbwH9mUC+npuAuwPwfsT6WB1JyljpjR6 HU9+VuQ/7B07Pruuvh/MV5MUTrcbJYOSbrVE/HgN2KmkCP5Y4cKjgQfKNwIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFB+EokgdKA3goQNZgnbbDJVBk8dVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ1ZTY0 OGMzLTE0ODEtNDc4Zi04M2UyLWIyNTEyN2ZhOTVjZC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDVl NjQ4YzMtMTQ4MS00NzhmLTgzZTItYjI1MTI3ZmE5NWNkLzAvMUY4NEEyNDgxRDI4 MERFMEExMDM1OTgyNzZEQjBDOTU0MTkzQzc1NS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAME AcEYAAMEAcEYBDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDMQkwDQYJKoZIhvcN AQELBQADggEBAKOCV8KZVew5eYlp/GRJHpl8qQJMjJNeaLFbkl/dvZLs7jxSglyI JqC6FtO9TGe+mKHh0G/iqXMS4mR/24GE9ZgGWtu80JBsgsvBhy3N9SqQ8tbEvfac YtFDLwcO/ZKarEeYLxyf5TVJ0p7Gy/zWbB44sn1wMPp3oXLyWsci/IcZTw+qBFtu 5VYKPEfNcV4bT95b4z+XLLjmj6aHncY/aFCqzwDRrpQUGjaayJbp09t2BAtBHMCh djbirOKeeBImAh7qw9iclwQ4mwghuUPxC1a9dyGaBh+kafMC/giqx9/6rM6TZjvb HHIKrDMYSP1GaB1iNy+vq6VD4XKxGNwItzE= -----END CERTIFICATE-----Generated at Fri Jan 30 01:37:02 2026 by rpki-client