This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer File: HDRPEVl1lIgoU6eVgd0r94nusx8.cer (raw, json) Hash identifier: g1C9lnRMaXTqn1S4aKis8+xGcy1rA7BptwqTQ6cptTI= Subject key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13CB2E5B98658F72CDC6201BD959F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.50.228.0/22 IP: 2a01:ade0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:cb:2e:5b:98:65:8f:72:cd:c6:20:1b:d9:59:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c344f11597594882853a79581dd2bf789eeb31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:d4:8c:66:8b:05:69:c3:d9:dc:28:d6:f4: fb:ed:9e:ed:4c:8f:d8:9d:c5:99:7e:bf:8d:b1:e8: 1c:4f:93:40:dd:14:e4:9e:12:6f:fa:b3:79:9d:23: 2b:e9:c1:50:d4:74:e4:47:51:56:80:e9:74:64:2f: ee:e2:d6:cd:ab:e8:10:c2:e3:cd:cd:ec:db:dc:2c: ee:50:d2:8d:2e:d1:b3:62:3d:e0:20:8e:d2:c6:19: 5d:c3:21:53:cb:9f:de:b8:4a:2f:2b:ae:e3:92:b3: 6b:30:76:6e:6c:0b:0f:71:ca:a9:d7:20:57:0b:15: 81:42:52:9b:22:0f:99:28:36:87:ca:ff:69:f5:62: fa:4f:8a:9b:5e:67:30:bc:06:9d:46:8f:82:58:ac: 57:02:44:a5:ad:80:41:f5:b3:b1:04:b7:61:e9:63: 5f:bb:fd:4d:e6:33:e1:2e:9a:ee:f0:85:e9:f9:21: 9e:a4:09:87:49:d7:51:bf:ea:6a:61:8a:a8:93:d2: 5d:9f:57:5b:98:de:4e:46:6e:69:70:19:93:90:e7: 76:14:b9:43:46:a0:3a:d0:92:38:b0:dc:4f:a6:33: 1a:80:cb:2c:17:63:b1:43:04:b6:f0:f5:06:49:d8: d0:ac:a7:40:91:90:87:9b:a4:fb:6e:d7:b0:aa:62: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.228.0/22 IPv6: 2a01:ade0::/32 Signature Algorithm: sha256WithRSAEncryption 85:a1:47:ad:21:c1:47:86:98:90:73:74:11:63:a6:7e:63:97: ef:d0:eb:df:eb:53:c0:ee:6a:59:44:9a:d0:d6:27:31:64:3a: 11:50:f9:3a:ad:34:4a:e1:cd:99:70:88:45:21:e7:f6:d2:7e: 53:f4:0b:54:fb:15:8b:ec:a9:12:66:b8:cc:41:51:04:43:c8: b3:dc:11:69:8f:29:8a:e9:0b:15:5f:8a:69:82:41:f1:01:01: 14:43:d5:3e:71:a3:de:02:20:cf:6a:73:84:fe:ca:1f:cd:82: 71:30:ab:47:60:2f:e2:6a:4f:40:2a:2e:90:81:0f:a1:4a:f3: cc:fe:9d:d7:7c:b2:b7:f3:56:6c:43:8c:80:0e:7c:29:52:de: 3f:e5:8d:d7:75:d3:c1:f0:8c:e1:96:7d:db:d4:81:5e:58:b2: 70:33:b1:66:2b:ef:4f:58:f9:c1:0a:69:d3:22:79:14:2b:65: 13:45:e6:32:27:58:15:52:69:81:d2:73:c4:0b:e6:cc:78:49: 82:89:7e:c2:e8:04:07:5a:d2:aa:83:08:41:0a:1c:88:d7:47: 27:b9:bc:2c:5b:0a:34:12:cd:7f:58:9a:4c:bc:cc:8b:70:07: ee:76:dd:dd:fe:52:ad:0a:4d:b3:fb:78:99:b3:b0:73:49:8a: 6d:cb:e9:f1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/E8suW5hlj3LNxiAb2Vn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzM0NGYxMTU5NzU5NDg4Mjg1M2E3OTU4MWRkMmJmNzg5ZWViMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFDUjGaLBWnD2dwo1vT77Z7tTI/Y ncWZfr+NsegcT5NA3RTknhJv+rN5nSMr6cFQ1HTkR1FWgOl0ZC/u4tbNq+gQwuPN zezb3CzuUNKNLtGzYj3gII7SxhldwyFTy5/euEovK67jkrNrMHZubAsPccqp1yBX CxWBQlKbIg+ZKDaHyv9p9WL6T4qbXmcwvAadRo+CWKxXAkSlrYBB9bOxBLdh6WNf u/1N5jPhLpru8IXp+SGepAmHSddRv+pqYYqok9Jdn1dbmN5ORm5pcBmTkOd2FLlD RqA60JI4sNxPpjMagMssF2OxQwS28PUGSdjQrKdAkZCHm6T7btewqmJpJwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBw0TxFZdZSIKFOnlYHdK/eJ7rMfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2YwNjE5 MS1iMGE4LTQ5NTAtYjAyNy1kZWVjNmZjZjJkOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvZjA2MTkx LWIwYTgtNDk1MC1iMDI3LWRlZWM2ZmNmMmQ5NS8xL0hEUlBFVmwxbElnb1U2ZVZn ZDByOTRudXN4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTLkMA0EAgACMAcDBQAqAa3gMA0GCSqGSIb3 DQEBCwUAA4IBAQCFoUetIcFHhpiQc3QRY6Z+Y5fv0Ovf61PA7mpZRJrQ1icxZDoR UPk6rTRK4c2ZcIhFIef20n5T9AtU+xWL7KkSZrjMQVEEQ8iz3BFpjymK6QsVX4pp gkHxAQEUQ9U+caPeAiDPanOE/sofzYJxMKtHYC/iak9AKi6QgQ+hSvPM/p3XfLK3 81ZsQ4yADnwpUt4/5Y3XddPB8Izhln3b1IFeWLJwM7FmK+9PWPnBCmnTInkUK2UT ReYyJ1gVUmmB0nPEC+bMeEmCiX7C6AQHWtKqgwhBChyI10cnubwsWwo0Es1/WJpM vMyLcAfudt3d/lKtCk2z+3iZs7BzSYpty+nx -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:52 2026 by rpki-client