This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer File: HCz1cnHCuPBLqn5jqbgQPVID1_g.cer (raw, json) Hash identifier: tF6hf3b1EeQkvkqEvButqrCbwEwRRnlGBmjvq7yfYSQ= Subject key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12561DFDA017860F80FD5FFB5DA780 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206496 AS: 208455 AS: 212564 IP: 45.15.32.0/22 IP: 185.185.64.0/22 IP: 185.198.14.0/24 IP: 2a0b:4a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:56:1d:fd:a0:17:86:0f:80:fd:5f:fb:5d:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:79:f8:5a:56:0f:12:6d:e6:14:21:9d:5f:f9: e2:09:88:20:da:d7:d2:d4:08:98:a5:c7:a2:ff:3d: 42:d1:b8:9d:03:dc:40:ad:19:7b:29:06:20:32:dc: ad:c2:22:c7:1a:e0:bc:73:a0:a8:c4:29:cd:3b:07: 02:9e:51:19:a3:13:f5:80:43:7d:59:f9:f9:90:c8: 38:64:8e:de:be:d5:73:61:c6:df:7a:6d:05:1d:9d: d9:e0:38:4b:50:70:c0:eb:68:ca:61:ea:b6:45:a6: bd:b5:9d:79:c1:d9:5d:f2:8b:69:0e:ba:0a:97:70: b2:ce:b2:ed:6f:ac:2a:4f:f7:d9:6e:b7:d4:7d:37: 43:f2:57:31:db:bc:cc:87:78:89:a3:be:57:02:98: 64:05:dc:4e:51:ff:ab:e7:dc:1a:a8:f1:d0:cb:c9: 21:1a:70:b4:9b:00:dd:ca:5b:49:f5:82:e4:bf:15: 91:19:41:99:2f:40:47:2b:58:d8:e6:de:4c:08:c2: bf:04:63:52:ec:ff:12:af:80:c2:cc:c5:40:ca:5c: a7:b5:93:2b:71:a5:f6:b7:70:b5:de:a9:f2:eb:14: fc:bc:b6:e3:d0:c6:5b:91:7e:0e:d3:a2:0b:ec:53: 5f:8b:96:df:da:31:7a:f4:5f:f3:95:e0:a4:fa:1f: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.32.0/22 185.185.64.0/22 185.198.14.0/24 IPv6: 2a0b:4a80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206496 208455 212564 Signature Algorithm: sha256WithRSAEncryption 6c:ec:b7:d7:0d:73:97:e8:6c:4a:cf:59:67:a8:68:7f:8e:90: 40:63:a0:fa:cb:eb:f4:43:7d:af:6e:2a:d8:6b:57:7f:44:9f: 45:34:a3:78:f4:d1:67:1d:9e:14:08:75:e2:77:24:53:42:00: 3b:3d:7f:95:0c:0d:9f:14:cd:22:f4:3c:7e:f3:f6:e0:de:43: 34:94:18:92:a7:fd:ae:dc:c0:a1:ab:3a:70:4e:f5:ac:05:b7: ab:30:2a:f5:cf:00:e8:d0:02:da:ab:5c:a9:df:9c:04:a2:0c: 9e:bb:0d:fe:a2:48:42:4f:7d:3e:ce:df:d0:82:74:31:ee:a4: 28:86:e2:8e:51:24:9d:3c:73:3b:e0:be:4b:9e:57:83:15:43: 0e:7b:d5:02:62:a8:4a:a4:e2:67:dd:a5:01:98:84:ca:57:8b: 2e:fc:c5:4b:28:2a:6c:91:12:a0:52:d9:7c:59:6d:e1:60:42: e7:22:b2:a1:c9:b0:02:cd:aa:24:91:2f:b6:69:f1:2d:08:4e: 78:95:67:d2:62:4d:62:74:ff:b2:36:15:20:14:15:b1:f8:fa: 16:42:15:dc:00:2e:c7:ea:e4:d2:21:08:ac:5a:1c:10:bf:7d: 54:f4:69:f5:ad:6e:66:0b:5d:b1:4d:89:6b:17:99:f8:ac:f8: 8c:2d:3f:97 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt8ElYd/aAXhg+A/V/7XaeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzJjZjU3MjcxYzJiOGYwNGJhYTdlNjNhOWI4MTAzZDUyMDNkN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3n4WlYPEm3mFCGdX/niCYgg2tfS 1AiYpcei/z1C0bidA9xArRl7KQYgMtytwiLHGuC8c6CoxCnNOwcCnlEZoxP1gEN9 Wfn5kMg4ZI7evtVzYcbfem0FHZ3Z4DhLUHDA62jKYeq2Raa9tZ15wdld8otpDroK l3CyzrLtb6wqT/fZbrfUfTdD8lcx27zMh3iJo75XAphkBdxOUf+r59waqPHQy8kh GnC0mwDdyltJ9YLkvxWRGUGZL0BHK1jY5t5MCMK/BGNS7P8Sr4DCzMVAylyntZMr caX2t3C13qny6xT8vLbj0MZbkX4O06IL7FNfi5bf2jF69F/zleCk+h8aLQIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFBws9XJxwrjwS6p+Y6m4ED1SA9f4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzVhYmM5 Mi1mNTVhLTQ1NDgtOWEwMC01YjQ1MzZhNzllODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNWFiYzky LWY1NWEtNDU0OC05YTAwLTViNDUzNmE3OWU4Mi8xL0hDejFjbkhDdVBCTHFuNWpx YmdRUFZJRDFfZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLQ8gAwQCublAAwQAucYOMA0EAgACMAcDBQMq C0qAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwMmoAIDAy5HAgMDPlQwDQYJKoZI hvcNAQELBQADggEBAGzst9cNc5fobErPWWeoaH+OkEBjoPrL6/RDfa9uKthrV39E n0U0o3j00WcdnhQIdeJ3JFNCADs9f5UMDZ8UzSL0PH7z9uDeQzSUGJKn/a7cwKGr OnBO9awFt6swKvXPAOjQAtqrXKnfnASiDJ67Df6iSEJPfT7O39CCdDHupCiG4o5R JJ08czvgvkueV4MVQw571QJiqEqk4mfdpQGYhMpXiy78xUsoKmyREqBS2XxZbeFg QucisqHJsALNqiSRL7Zp8S0ITniVZ9JiTWJ0/7I2FSAUFbH4+hZCFdwALsfq5NIh CKxaHBC/fVT0afWtbmYLXbFNiWsXmfis+IwtP5c= -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:33 2026 by rpki-client