This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer File: HCTxyq-zII64J6B4JkF7y5STQS8.cer (raw, json) Hash identifier: R1KZfKdl7yh4p7LYrLmuwXl4hLDjTrOVfsQn87tyhsw= Subject key identifier: 1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B56827AB9E946D1AE4AAAEBACCFA6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215473 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:56:82:7a:b9:e9:46:d1:ae:4a:aa:eb:ac:cf:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c24f1caafb3208eb827a07826417bcb9493412f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:75:77:93:88:4c:aa:90:5c:3c:e8:28:7a: 22:7d:59:61:5c:ab:db:88:56:44:73:d6:57:28:32: 9e:ba:05:fa:db:cd:31:5f:a1:ee:03:51:d3:00:3b: f0:b9:99:70:07:88:99:34:40:62:9d:fc:b1:f9:d4: fe:ef:58:a0:96:ad:49:1b:6b:9d:55:72:f7:73:98: c3:64:73:6e:e4:ad:1f:ae:ef:3a:6f:1f:16:89:5d: cc:42:f4:54:cb:14:b8:37:5b:13:93:98:aa:2a:46: e4:f0:95:52:ae:49:c6:d1:9e:98:15:4c:c2:99:1e: 59:ea:ac:77:d2:59:a6:6d:c1:1f:1e:ee:5b:07:17: 0b:05:b9:7f:79:50:58:5c:ba:e0:6d:de:17:81:3b: ec:7e:61:0d:ca:5c:75:c1:aa:58:84:bc:56:96:be: 13:f8:74:1c:60:fe:8d:74:54:8b:a2:41:36:71:9e: a1:23:0c:69:c7:f7:6c:4f:11:31:ee:25:46:68:57: cc:4d:9a:c0:5f:b3:50:65:3c:1e:ac:bf:29:59:04: 19:b1:25:9b:70:28:3a:ea:28:fe:b2:60:c8:86:b2: 8c:9e:82:8d:ec:e4:ed:ba:c4:f6:79:68:49:e3:7a: 38:0d:ae:1a:e6:d4:ee:3a:0f:14:70:31:72:33:f3: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215473 Signature Algorithm: sha256WithRSAEncryption 5f:59:39:4c:7b:02:83:57:bd:49:1a:d4:77:75:85:c5:87:02: b9:ad:9c:c3:88:d5:bd:1d:85:37:95:86:87:20:74:da:d1:84: b9:39:73:d5:8d:dc:04:f4:2a:47:39:04:a3:2b:63:a1:3d:46: dd:bf:9a:96:07:00:80:bb:e2:11:67:ba:03:44:b7:c8:30:46: 85:ec:23:16:45:43:f1:02:cb:62:f3:22:44:3e:94:00:7b:3f: 0c:2e:a7:14:dc:22:60:01:27:a4:11:28:bb:90:72:6e:29:59: 41:ca:77:09:bd:7d:2a:1f:45:d6:49:81:7c:b3:1f:eb:34:1b: 66:3b:e7:f0:ac:b1:2c:51:36:10:b0:27:fb:33:0f:21:22:72: 11:72:9d:7b:ef:12:ef:41:cb:a6:5d:a4:13:5c:bd:9e:55:8e: 04:7a:bc:a5:46:24:3e:ca:14:d4:71:9c:4a:cb:87:ee:15:fb: 47:ca:54:79:0a:17:27:9c:af:45:eb:47:19:39:75:82:4e:ef: eb:ba:fb:7a:54:a8:ad:83:a6:3f:25:4b:bf:c2:c0:93:96:3a: 41:f5:e2:07:12:84:c3:db:ad:66:67:79:f8:9a:00:d7:6e:b9: 9d:19:0c:6c:d5:18:dd:3a:3a:20:f7:f6:95:4f:88:5c:cd:c9: 72:8d:84:c1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9W1aCernpRtGuSqrrrM+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzI0ZjFjYWFmYjMyMDhlYjgyN2EwNzgyNjQxN2JjYjk0OTM0MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FN1d5OITKqQXDzoKHoifVlhXKvb iFZEc9ZXKDKeugX6280xX6HuA1HTADvwuZlwB4iZNEBinfyx+dT+71iglq1JG2ud VXL3c5jDZHNu5K0fru86bx8WiV3MQvRUyxS4N1sTk5iqKkbk8JVSrknG0Z6YFUzC mR5Z6qx30lmmbcEfHu5bBxcLBbl/eVBYXLrgbd4XgTvsfmENylx1wapYhLxWlr4T +HQcYP6NdFSLokE2cZ6hIwxpx/dsTxEx7iVGaFfMTZrAX7NQZTwerL8pWQQZsSWb cCg66ij+smDIhrKMnoKN7OTtusT2eWhJ43o4Da4a5tTuOg8UcDFyM/NQ/wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBwk8cqvsyCOuCegeCZBe8uUk0EvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2I1NWZk ZS0yYjU1LTQ3YmUtOGQ2NC03ZGNmZmZhZTI3OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYjU1ZmRl LTJiNTUtNDdiZS04ZDY0LTdkY2ZmZmFlMjc4Yy8xL0hDVHh5cS16SUk2NEo2QjRK a0Y3eTVTVFFTOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJsTANBgkqhkiG9w0BAQsFAAOCAQEAX1k5THsCg1e9 SRrUd3WFxYcCua2cw4jVvR2FN5WGhyB02tGEuTlz1Y3cBPQqRzkEoytjoT1G3b+a lgcAgLviEWe6A0S3yDBGhewjFkVD8QLLYvMiRD6UAHs/DC6nFNwiYAEnpBEou5By bilZQcp3Cb19Kh9F1kmBfLMf6zQbZjvn8KyxLFE2ELAn+zMPISJyEXKde+8S70HL pl2kE1y9nlWOBHq8pUYkPsoU1HGcSsuH7hX7R8pUeQoXJ5yvRetHGTl1gk7v67r7 elSorYOmPyVLv8LAk5Y6QfXiBxKEw9utZmd5+JoA1265nRkMbNUY3To6IPf2lU+I XM3Jco2EwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:33 2026 by rpki-client