This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer File: H83UEOElAi3gfKWWP5L3jo-JSG4.cer (raw, json) Hash identifier: nd53TeuS8N4txIp4lPtYa+G+R2U60W5oeZ3c5ySx0lE= Subject key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3D040BF9871BF0700D78F33703C9E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201126 AS: 202529 AS: 210549 IP: 91.240.17.0/24 IP: 185.74.24.0/22 IP: 188.116.54.0/23 IP: 194.105.149.0/24 IP: 2a00:8ae0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d0:40:bf:98:71:bf:07:00:d7:8f:33:70:3c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fcdd410e125022de07ca5963f92f78e8f89486e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:87:b7:01:03:b0:84:66:df:52:c0:c5:3e: 2e:c5:2e:3d:19:80:8c:98:c2:02:6b:89:e7:38:13: 3d:2a:be:d5:2f:eb:c4:20:03:6b:23:b9:8f:ab:26: 33:c9:ab:ce:1d:95:aa:ca:69:4a:93:ad:e0:25:ab: 09:cd:80:75:7d:41:92:c7:91:90:f2:5e:a2:64:2a: e9:6e:86:de:92:fe:c8:bb:d9:bc:93:96:65:49:b0: df:47:33:07:75:c4:2a:fa:8b:24:80:0c:72:1e:d0: ef:bd:06:40:c5:aa:c1:c0:41:4d:59:62:45:aa:ed: 98:6b:c4:0d:19:1f:e4:e6:37:5d:ea:bd:69:74:2e: 5c:0e:d6:81:0e:1e:94:ce:d3:4b:7c:33:6f:02:9d: 92:00:7d:42:6f:b2:e1:5a:9b:24:b9:48:0f:3e:43: 54:5d:7a:88:97:73:e4:40:a9:4d:e3:d4:e5:5d:c7: 93:4c:9a:35:b6:79:86:d5:06:20:e4:f7:4d:af:ca: 85:fc:25:8f:dd:2b:a5:fe:0a:ec:ca:d9:02:11:1d: cd:4d:12:e2:37:20:13:39:b6:80:29:35:a8:00:5e: 6f:ad:7e:75:ab:d8:f5:54:2e:8d:37:ca:14:d5:38: 80:1c:35:89:bc:8b:ec:28:81:c0:93:50:c8:b5:5d: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.17.0/24 185.74.24.0/22 188.116.54.0/23 194.105.149.0/24 IPv6: 2a00:8ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201126 202529 210549 Signature Algorithm: sha256WithRSAEncryption 3e:45:ad:3c:8b:4a:bb:48:32:f1:dd:a9:e9:b8:01:5a:33:e8: 3e:52:98:aa:ba:90:15:7a:06:ca:d8:c6:18:1d:fd:ed:d4:7b: c1:00:be:6f:d2:24:f2:4e:25:ad:1a:e4:50:63:ab:17:e6:14: b2:dc:8e:91:e9:a5:bd:61:5f:e1:5c:1c:51:59:d7:52:dc:e1: 68:10:aa:44:7f:5f:78:1a:51:fd:4f:48:52:8b:ef:ff:75:26: e0:59:ef:ef:75:88:cb:29:42:c6:47:f6:17:32:46:4f:b9:73: fe:fe:f7:08:cd:66:38:50:11:9d:bb:80:62:d1:a8:1a:0e:a2: 58:b9:29:f4:5f:e0:23:af:f0:35:d8:ed:f2:aa:1a:74:5b:ab: 6d:73:0c:c3:4d:02:7c:a8:0b:05:d4:28:3b:70:ca:73:f5:2d: a0:f5:ae:cb:fa:7a:b5:5d:f4:b8:a1:2c:82:c3:66:df:2d:bb: 08:0e:50:e7:15:04:ef:82:82:fc:46:27:f2:e9:b0:fb:74:8f: 44:25:49:d3:f7:97:b4:2a:ee:8e:1c:e7:85:30:7c:71:3a:df: 33:7c:cd:d3:e3:78:de:07:20:32:08:86:33:18:a1:a2:5c:0b: 3a:21:90:30:3f:08:06:45:e2:c1:38:fd:9e:7c:80:0c:ef:9e: 28:0a:09:81 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt7o9BAv5hxvwcA148zcDyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmNkZDQxMGUxMjUwMjJkZTA3Y2E1OTYzZjkyZjc4ZThmODk0ODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb+HtwEDsIRm31LAxT4uxS49GYCM mMICa4nnOBM9Kr7VL+vEIANrI7mPqyYzyavOHZWqymlKk63gJasJzYB1fUGSx5GQ 8l6iZCrpbobekv7Iu9m8k5ZlSbDfRzMHdcQq+oskgAxyHtDvvQZAxarBwEFNWWJF qu2Ya8QNGR/k5jdd6r1pdC5cDtaBDh6UztNLfDNvAp2SAH1Cb7LhWpskuUgPPkNU XXqIl3PkQKlN49TlXceTTJo1tnmG1QYg5PdNr8qF/CWP3Sul/grsytkCER3NTRLi NyATObaAKTWoAF5vrX51q9j1VC6NN8oU1TiAHDWJvIvsKIHAk1DItV00nwIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFB/N1BDhJQIt4Hyllj+S946PiUhuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzVmYTgx Yi0xZjNmLTQ4MmQtOTUyNS1hYjY5ZGE4ZjM3ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNWZhODFi LTFmM2YtNDgyZC05NTI1LWFiNjlkYThmMzdlYy8xL0g4M1VFT0VsQWkzZ2ZLV1dQ NUwzam8tSlNHNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAW/ARAwQCuUoYAwQBvHQ2AwQAwmmVMA0EAgAC MAcDBQAqAIrgMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwMRpgIDAxchAgMDNnUw DQYJKoZIhvcNAQELBQADggEBAD5FrTyLSrtIMvHdqem4AVoz6D5SmKq6kBV6BsrY xhgd/e3Ue8EAvm/SJPJOJa0a5FBjqxfmFLLcjpHppb1hX+FcHFFZ11Lc4WgQqkR/ X3gaUf1PSFKL7/91JuBZ7+91iMspQsZH9hcyRk+5c/7+9wjNZjhQEZ27gGLRqBoO oli5KfRf4COv8DXY7fKqGnRbq21zDMNNAnyoCwXUKDtwynP1LaD1rsv6erVd9Lih LILDZt8tuwgOUOcVBO+CgvxGJ/LpsPt0j0QlSdP3l7Qq7o4c54UwfHE63zN8zdPj eN4HIDIIhjMYoaJcCzohkDA/CAZF4sE4/Z58gAzvnigKCYE= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:51 2026 by rpki-client