This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HBvoBtpEgce6pWenHeTuJE2Yzgk.cer File: HBvoBtpEgce6pWenHeTuJE2Yzgk.cer (raw, json) Hash identifier: Tp16G4EM4LN5BoDlIDedS7veJNKp1QsUQxQZH5l9r8g= Subject key identifier: 1C:1B:E8:06:DA:44:81:C7:BA:A5:67:A7:1D:E4:EE:24:4D:98:CE:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B8F19D2E7A4AF05BD5996FCF6753F6885 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/5f73b3-e695-4bbf-82a3-82a30fdc24f9/1/HBvoBtpEgce6pWenHeTuJE2Yzgk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/5f73b3-e695-4bbf-82a3-82a30fdc24f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 05 Jan 2026 16:59:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42780 IP: 2a0a:53c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:19:d2:e7:a4:af:05:bd:59:96:fc:f6:75:3f:68:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 5 16:59:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c1be806da4481c7baa567a71de4ee244d98ce09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:57:5d:b6:b9:3f:e4:03:65:c6:53:08:e1: c7:6b:31:5d:ee:65:3b:4e:39:02:57:c6:cb:02:14: 4f:1b:52:b0:b9:5d:94:78:10:85:0d:e0:f4:a9:0a: 59:8b:fa:3c:a5:62:b7:b7:58:f2:dc:ef:ab:75:81: 96:90:2f:e4:d2:41:e7:bd:b6:56:95:fa:7b:d2:41: a5:5b:e0:de:a1:10:bc:a8:b6:f4:5d:f9:7f:71:5d: 02:0d:5b:69:22:af:50:bd:0f:d9:d0:53:7f:68:c1: 4c:01:f1:70:24:78:de:ed:f8:c3:5d:c6:4e:bb:49: 61:40:c6:8c:fa:15:20:01:06:c1:ea:79:ca:ca:a6: ef:55:5b:83:42:18:7e:7b:01:74:56:99:44:3c:89: 93:0a:6b:9e:7c:48:80:96:50:29:f5:45:e8:f8:8a: f8:0d:b9:3f:73:97:c6:d3:48:cd:b9:83:b3:51:41: 90:db:df:bf:93:34:b9:ba:be:78:08:6b:0f:08:71: 0b:6b:37:ee:47:e3:95:1a:74:1a:c5:47:3c:f4:18: a9:e9:1a:44:21:26:c7:5f:97:60:fc:c2:96:f9:59: 23:ca:f1:82:fa:f5:08:2a:30:1d:53:9a:13:12:cf: 3e:20:19:3c:43:44:97:ee:42:f9:24:9e:73:c4:55: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1B:E8:06:DA:44:81:C7:BA:A5:67:A7:1D:E4:EE:24:4D:98:CE:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5f73b3-e695-4bbf-82a3-82a30fdc24f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5f73b3-e695-4bbf-82a3-82a30fdc24f9/1/HBvoBtpEgce6pWenHeTuJE2Yzgk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:53c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42780 Signature Algorithm: sha256WithRSAEncryption 63:7d:ee:9a:2b:19:d7:e6:ef:6d:4c:a3:5f:5f:a7:a8:0f:49: 58:4e:ef:b8:22:cf:8e:56:c0:03:d4:fb:24:33:71:11:23:a3: 11:06:76:d3:c8:ce:56:d1:f1:6d:4d:a8:70:58:ad:d7:1f:f6: c6:98:0f:df:b6:b7:15:cc:2a:2b:ac:22:95:95:6e:92:f1:df: 37:8f:cf:7c:b9:ab:ec:4f:5b:77:ed:bb:47:2a:18:ed:0a:a9: 03:8c:5d:ef:a8:ab:c7:98:19:d3:cf:4e:74:33:18:ba:07:f4: 3f:05:09:94:63:27:b5:9e:35:82:59:0b:f9:5c:98:5a:30:3d: 77:bd:c0:a3:ea:2d:ff:f3:76:f0:ed:2d:6d:b4:a4:ce:57:d0: dc:58:0e:49:75:59:b1:41:97:51:60:ff:ec:f1:ee:ed:d7:b1: 74:53:93:6b:6a:ee:20:50:22:fc:f8:00:8b:e7:92:fd:46:ba: 34:a9:68:fb:eb:70:6e:9b:8e:8e:2f:8b:cc:b5:bc:8f:6d:b9: 21:93:d7:6c:a8:c3:cb:99:a0:c9:f9:b3:f5:74:a3:98:9d:b2: 51:54:18:3f:0b:89:f9:2a:d3:46:47:6b:35:fb:11:63:14:74: 06:c2:aa:50:8a:12:e4:75:c3:29:bf:7a:b1:56:de:cc:15:fb: f6:f8:ad:62 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZuPGdLnpK8FvVmW/PZ1P2iFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA1MTY1OTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzFiZTgwNmRhNDQ4MWM3YmFhNTY3YTcxZGU0ZWUyNDRkOThjZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJVXXba5P+QDZcZTCOHHazFd7mU7 TjkCV8bLAhRPG1KwuV2UeBCFDeD0qQpZi/o8pWK3t1jy3O+rdYGWkC/k0kHnvbZW lfp70kGlW+DeoRC8qLb0Xfl/cV0CDVtpIq9QvQ/Z0FN/aMFMAfFwJHje7fjDXcZO u0lhQMaM+hUgAQbB6nnKyqbvVVuDQhh+ewF0VplEPImTCmuefEiAllAp9UXo+Ir4 Dbk/c5fG00jNuYOzUUGQ29+/kzS5ur54CGsPCHELazfuR+OVGnQaxUc89Bip6RpE ISbHX5dg/MKW+VkjyvGC+vUIKjAdU5oTEs8+IBk8Q0SX7kL5JJ5zxFX2zwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFBwb6AbaRIHHuqVnpx3k7iRNmM4JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzVmNzNi My1lNjk1LTRiYmYtODJhMy04MmEzMGZkYzI0ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNWY3M2Iz LWU2OTUtNGJiZi04MmEzLTgyYTMwZmRjMjRmOS8xL0hCdm9CdHBFZ2NlNnBXZW5I ZVR1SkUyWXpnay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgpTwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMApxwwDQYJKoZIhvcNAQELBQADggEBAGN97porGdfm721Mo19fp6gPSVhO77gi z45WwAPU+yQzcREjoxEGdtPIzlbR8W1NqHBYrdcf9saYD9+2txXMKiusIpWVbpLx 3zePz3y5q+xPW3ftu0cqGO0KqQOMXe+oq8eYGdPPTnQzGLoH9D8FCZRjJ7WeNYJZ C/lcmFowPXe9wKPqLf/zdvDtLW20pM5X0NxYDkl1WbFBl1Fg/+zx7u3XsXRTk2tq 7iBQIvz4AIvnkv1GujSpaPvrcG6bjo4vi8y1vI9tuSGT12yow8uZoMn5s/V0o5id slFUGD8Lifkq00ZHazX7EWMUdAbCqlCKEuR1wym/erFW3swV+/b4rWI= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:33 2026 by rpki-client