This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer File: H6isN_lpUWlif3XgmJYzlt6WOMw.cer (raw, json) Hash identifier: 8xHZAn6JhMIk9tyIaAT2/tTM2DmpdaN7iUUx+lkgYk4= Subject key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38FCE87F1E760FE8BF2905306C2AC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51728 IP: 80.66.160.0/20 IP: 91.190.192.0/21 IP: 146.66.24.0/21 IP: 185.40.88.0/22 IP: 2a00:ac00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fc:e8:7f:1e:76:0f:e8:bf:29:05:30:6c:2a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fa8ac37f9695169627f75e098963396de9638cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:09:b2:78:86:d3:95:21:55:cb:90:90:32:7b: 4b:aa:e0:cb:d3:8a:b1:e4:bc:7b:82:76:1a:cb:3e: bc:3f:44:78:9a:e0:ed:12:09:e8:d5:ad:e6:ab:68: 7b:27:0a:5c:df:d0:02:23:13:07:fa:43:62:0f:1d: 93:b5:92:59:4c:55:21:41:05:48:c5:f0:a4:82:3d: 9b:32:8c:4d:b6:1f:f8:0c:59:dd:a1:c9:5b:88:e3: 6c:c6:98:78:13:4d:ea:00:36:f5:70:cd:07:ad:fa: d4:75:da:a6:37:0f:41:44:fa:94:a0:70:62:af:a9: a1:a1:10:fe:10:9f:3b:2c:37:62:06:6a:40:6f:c7: c0:91:1a:3d:b2:b1:c5:25:ff:86:4b:a1:0b:4d:c3: b8:cb:aa:1f:ce:a4:b1:df:61:08:ca:47:39:eb:ce: 35:ce:ac:e3:c9:be:c9:7e:4d:44:03:6b:85:c2:91: 97:e5:6f:a7:23:b4:d4:ce:18:0e:e5:6d:4e:9f:2c: db:de:78:70:cb:a1:cb:fa:4a:07:87:7d:46:99:95: c3:00:e6:ba:6f:3b:67:d6:85:b8:a4:58:45:fd:75: de:bf:a4:d7:6b:39:39:42:d1:a4:f4:45:ea:ad:0c: 26:5f:2f:ca:a1:f9:0f:a0:76:9c:9c:c6:d7:3c:17: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.160.0/20 91.190.192.0/21 146.66.24.0/21 185.40.88.0/22 IPv6: 2a00:ac00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51728 Signature Algorithm: sha256WithRSAEncryption 30:72:d5:e4:6b:ae:a6:55:d1:57:d3:e5:fc:27:97:a7:68:ec: e2:3d:39:9e:a8:c3:4f:36:98:b4:e2:21:91:d7:2f:b6:44:ae: 12:2e:70:2a:d4:2f:83:02:e6:74:b6:fc:19:06:62:c4:8a:09: 07:38:4e:86:b8:d3:5d:31:4b:6b:9c:56:3a:ba:f3:90:64:ed: 21:7e:27:03:8b:be:16:57:4c:ac:d3:07:da:d4:8a:38:ad:4f: 8a:2a:f3:fc:9f:82:a4:96:a0:64:18:e0:bd:31:d1:f6:26:21: fa:f4:ac:db:68:4a:5e:71:19:63:d8:e4:49:81:9f:4f:26:b0: 0b:8d:05:e6:d9:03:a2:de:3b:c4:38:8d:6a:8e:4e:93:fd:ae: fb:76:25:b8:87:ee:ac:96:48:d6:f6:91:5d:d8:f3:01:95:a9: f7:55:56:32:b3:18:be:00:16:a6:5c:2a:dd:76:59:2f:18:e3: 9b:e9:5e:76:e1:6a:72:52:70:c0:3a:72:0f:ac:c1:d5:6f:df: c1:2b:10:dd:aa:a7:d7:94:c7:f9:df:0d:5c:43:cd:b2:3e:d0: c3:fd:21:e9:cc:d0:dd:17:46:d4:ba:91:d2:e3:c5:a7:a2:17: 18:07:1b:ce:42:3c:8e:c6:95:30:f0:2b:0f:d8:ff:a5:09:fc: fa:db:56:80 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+OPzofx52D+i/KQUwbCrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmE4YWMzN2Y5Njk1MTY5NjI3Zjc1ZTA5ODk2MzM5NmRlOTYzOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QmyeIbTlSFVy5CQMntLquDL04qx 5Lx7gnYayz68P0R4muDtEgno1a3mq2h7Jwpc39ACIxMH+kNiDx2TtZJZTFUhQQVI xfCkgj2bMoxNth/4DFndoclbiONsxph4E03qADb1cM0HrfrUddqmNw9BRPqUoHBi r6mhoRD+EJ87LDdiBmpAb8fAkRo9srHFJf+GS6ELTcO4y6ofzqSx32EIykc56841 zqzjyb7Jfk1EA2uFwpGX5W+nI7TUzhgO5W1Onyzb3nhwy6HL+koHh31GmZXDAOa6 bztn1oW4pFhF/XXev6TXazk5QtGk9EXqrQwmXy/KofkPoHacnMbXPBfQXQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFB+orDf5aVFpYn914JiWM5beljjMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzViYzFj Yy1kMDJjLTQ4ZWUtOTkzNS0wMjNiNmMwNzkzZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvNWJjMWNj LWQwMmMtNDhlZS05OTM1LTAyM2I2YzA3OTNmMS8xL0g2aXNOX2xwVVdsaWYzWGdt Sll6bHQ2V09Ndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEUEKgAwQDW77AAwQDkkIYAwQCuShYMA0EAgAC MAcDBQMqAKwAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDKEDANBgkqhkiG9w0B AQsFAAOCAQEAMHLV5GuuplXRV9Pl/CeXp2js4j05nqjDTzaYtOIhkdcvtkSuEi5w KtQvgwLmdLb8GQZixIoJBzhOhrjTXTFLa5xWOrrzkGTtIX4nA4u+FldMrNMH2tSK OK1Piirz/J+CpJagZBjgvTHR9iYh+vSs22hKXnEZY9jkSYGfTyawC40F5tkDot47 xDiNao5Ok/2u+3YluIfurJZI1vaRXdjzAZWp91VWMrMYvgAWplwq3XZZLxjjm+le duFqclJwwDpyD6zB1W/fwSsQ3aqn15TH+d8NXEPNsj7Qw/0h6czQ3RdG1LqR0uPF p6IXGAcbzkI8jsaVMPArD9j/pQn8+ttWgA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:39 2026 by rpki-client