This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HC0dvEglgyXCs1iYTGFkE3P5L8c.cer File: HC0dvEglgyXCs1iYTGFkE3P5L8c.cer (raw, json) Hash identifier: 5wXuFfb+h52B4gtRyC5hXCGh6d/fJJQt9VUoB/ZKsPE= Subject key identifier: 1C:2D:1D:BC:48:25:83:25:C2:B3:58:98:4C:61:64:13:73:F9:2F:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1F71B1C926255D98D720C0CFAD2D88C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.cc/repo/networkservices/0/1C2D1DBC48258325C2B358984C61641373F92FC7.mft caRepository: rsync://rpki.cc/repo/networkservices/0/ Notify URL: https://rpki.cc/rrdp/notification.xml Certificate not before: Mon 02 Feb 2026 17:41:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50224 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:71:b1:c9:26:25:5d:98:d7:20:c0:cf:ad:2d:88:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 17:41:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c2d1dbc48258325c2b358984c61641373f92fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:42:12:9d:c5:62:34:01:9e:d7:c9:0d:f4:9d: db:d7:5e:dc:a7:e4:02:53:e5:0c:57:1c:a5:e0:0b: 2d:e0:aa:79:c3:b5:3d:d4:7d:31:5a:f4:1b:2c:b2: ba:ca:d8:a9:f4:d3:9a:92:0a:14:a3:1d:a2:50:7b: ab:f0:14:d0:68:4c:c2:a8:e2:c4:b8:23:f0:b4:fc: 82:a4:db:c1:26:18:18:20:4a:3e:9d:f7:8e:90:22: ee:21:ee:67:b5:93:9c:ad:4f:bd:3f:06:86:c3:0f: ff:99:10:3d:fc:30:f1:10:e5:42:c5:c0:c0:f4:e1: a5:44:4b:77:3c:ec:c3:d3:31:63:70:da:cb:f9:b2: cd:a8:b1:34:5a:a0:1d:8d:ee:d1:c0:66:ec:01:05: 69:61:69:7c:33:c6:b5:78:03:08:b5:d6:24:f5:11: 3d:0a:c2:b8:47:71:ad:f6:e5:bf:37:4e:a0:94:41: 48:6d:75:be:5e:f4:fb:e1:c7:1c:f4:f5:45:78:de: a5:03:6a:bc:97:57:45:13:0a:72:0e:46:98:a9:49: a4:5e:2a:60:63:de:0a:6b:97:af:6a:80:44:d1:c0: 22:e0:f1:7b:66:70:e1:3b:70:5d:c9:9d:4f:d8:e8: 94:2f:de:ea:7c:8e:c1:b5:5b:06:bc:c8:e4:d6:40: 2b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2D:1D:BC:48:25:83:25:C2:B3:58:98:4C:61:64:13:73:F9:2F:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.cc/repo/networkservices/0/ RPKI Manifest - URI:rsync://rpki.cc/repo/networkservices/0/1C2D1DBC48258325C2B358984C61641373F92FC7.mft RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50224 Signature Algorithm: sha256WithRSAEncryption 1e:f7:68:31:0b:01:31:dc:3f:7b:8b:a4:b6:4e:b0:77:0b:fd: b8:9c:f2:4c:a9:d8:ee:6e:6e:39:87:c1:57:f3:04:40:66:f6: 04:81:c6:4d:96:35:9a:0e:92:73:f9:f2:4d:b8:63:36:31:27: 7f:6c:66:4a:bb:f8:0d:a8:54:2e:e2:3b:75:b2:98:11:d8:cf: f9:37:e8:46:62:17:bf:df:17:8a:6f:cd:f5:5f:86:b0:6c:78: a2:af:66:d4:ad:d3:d4:98:49:b0:c2:9e:bd:30:26:23:32:8c: 43:28:fe:63:9f:f8:6e:51:29:18:c1:14:37:85:23:00:71:49: 16:8f:b9:75:43:52:8a:85:6e:0b:a6:84:5e:3b:26:89:39:ae: 89:ec:4f:31:e6:09:fb:f2:5a:ff:b4:95:35:d3:b8:be:be:4b: ab:18:7c:55:74:af:0e:91:0e:a1:15:be:35:4b:b6:8a:49:ff: a8:04:28:ab:80:5a:63:c4:79:16:07:b2:31:74:8c:e6:5e:91: 93:a2:29:31:27:df:5e:c0:2e:d1:de:bb:7b:41:c9:69:eb:49: bc:ab:2c:69:5e:1d:6d:4f:0c:36:d5:2a:b0:f2:82:b3:c2:c4: 8e:9a:ad:fa:bd:1b:07:71:dd:85:38:c6:75:6c:ff:50:13:81: 67:46:d5:13 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZwfcbHJJiVdmNcgwM+tLYjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTc0MTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzJkMWRiYzQ4MjU4MzI1YzJiMzU4OTg0YzYxNjQxMzczZjkyZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ISncViNAGe18kN9J3b117cp+QC U+UMVxyl4Ast4Kp5w7U91H0xWvQbLLK6ytip9NOakgoUox2iUHur8BTQaEzCqOLE uCPwtPyCpNvBJhgYIEo+nfeOkCLuIe5ntZOcrU+9PwaGww//mRA9/DDxEOVCxcDA 9OGlREt3POzD0zFjcNrL+bLNqLE0WqAdje7RwGbsAQVpYWl8M8a1eAMItdYk9RE9 CsK4R3Gt9uW/N06glEFIbXW+XvT74ccc9PVFeN6lA2q8l1dFEwpyDkaYqUmkXipg Y94Ka5evaoBE0cAi4PF7ZnDhO3BdyZ1P2OiUL97qfI7BtVsGvMjk1kArOwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFBwtHbxIJYMlwrNYmExhZBNz+S/HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgdkGCCsGAQUFBwELBIHMMIHJMDMGCCsGAQUFBzAFhidyc3lu YzovL3Jwa2kuY2MvcmVwby9uZXR3b3Jrc2VydmljZXMvMC8wXwYIKwYBBQUHMAqG U3JzeW5jOi8vcnBraS5jYy9yZXBvL25ldHdvcmtzZXJ2aWNlcy8wLzFDMkQxREJD NDgyNTgzMjVDMkIzNTg5ODRDNjE2NDEzNzNGOTJGQzcubWZ0MDEGCCsGAQUFBzAN hiVodHRwczovL3Jwa2kuY2MvcnJkcC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRS MFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFV TFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEMDANBgkqhkiG 9w0BAQsFAAOCAQEAHvdoMQsBMdw/e4uktk6wdwv9uJzyTKnY7m5uOYfBV/MEQGb2 BIHGTZY1mg6Sc/nyTbhjNjEnf2xmSrv4DahULuI7dbKYEdjP+TfoRmIXv98Xim/N 9V+GsGx4oq9m1K3T1JhJsMKevTAmIzKMQyj+Y5/4blEpGMEUN4UjAHFJFo+5dUNS ioVuC6aEXjsmiTmuiexPMeYJ+/Ja/7SVNdO4vr5Lqxh8VXSvDpEOoRW+NUu2ikn/ qAQoq4BaY8R5FgeyMXSM5l6Rk6IpMSffXsAu0d67e0HJaetJvKssaV4dbU8MNtUq sPKCs8LEjpqt+r0bB3HdhTjGdWz/UBOBZ0bVEw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:36 2026 by rpki-client