This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer (raw, json) Hash identifier: +Zp+DzlEr+Iu+TlFzaol8bTcsInSIxIYeuAotvFrNJg= Subject key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE00454F012E2EC9CAC3BF216C09A6D5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 10:05:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48284 IP: 5.199.176.0/21 IP: 88.133.240.0/21 IP: 94.125.72.0/21 IP: 109.70.192.0/21 IP: 109.235.224.0/21 IP: 130.255.104.0/21 IP: 185.35.208.0/22 IP: 212.237.168.0/21 IP: 213.193.216.0/21 IP: 2a02:778::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:04:54:f0:12:e2:ec:9c:ac:3b:f2:16:c0:9a:6d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 10:05:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:12:b5:96:c1:3a:28:05:d3:41:5e:61:41:5c: be:f5:7b:4e:08:bd:f9:9a:7a:09:bb:0d:98:3f:3c: 70:66:1d:90:71:6f:6c:55:44:cc:cf:6e:33:f9:dc: 87:02:56:f5:58:5f:b5:2e:2c:9b:0e:f5:91:5e:26: 3a:6e:7d:c9:95:02:76:ff:fc:6c:0a:5c:27:25:2e: cb:a6:8f:ba:85:1a:33:44:7d:3f:ec:e9:8b:92:17: 55:6d:9d:6e:6e:de:aa:3d:0b:fa:d0:84:dc:2b:d7: b8:67:43:a6:5f:f9:17:2f:bb:50:db:59:84:e8:ee: ea:66:40:b8:2a:7f:18:6a:ba:5b:d7:d5:8f:86:1a: 10:d1:1b:eb:f2:57:43:68:4b:75:da:7c:b8:a6:cf: 49:11:dd:e2:90:a8:03:c8:b2:d1:5b:2c:6f:63:94: bd:80:0e:27:dd:a7:a1:a2:20:4b:44:1d:2f:ff:3b: 99:2c:57:a7:b7:99:d8:04:69:b2:bd:49:c7:d1:ea: d4:ab:1d:38:35:8a:c0:be:9c:2c:27:a8:c9:b9:ca: a3:6b:c0:4e:e3:21:5a:c4:f2:22:cc:ef:81:6d:6e: fd:96:fa:8e:7c:28:8e:49:18:3a:65:76:b9:ff:74: 12:fb:82:b2:7f:98:0e:a6:be:51:28:e4:aa:33:b5: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.176.0/21 88.133.240.0/21 94.125.72.0/21 109.70.192.0/21 109.235.224.0/21 130.255.104.0/21 185.35.208.0/22 212.237.168.0/21 213.193.216.0/21 IPv6: 2a02:778::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48284 Signature Algorithm: sha256WithRSAEncryption 4e:4e:4e:d3:cc:2d:2d:7f:64:d3:af:24:d6:a8:40:01:b4:3b: 5d:3d:bf:ef:1b:c5:79:97:46:f0:64:ed:31:3b:84:a8:d0:5c: 26:56:12:80:de:38:c8:f4:9b:e6:cb:64:2f:8a:46:9a:8e:7f: 66:a9:64:84:a0:53:02:bf:bb:26:bc:ff:fb:f5:9f:ae:74:16: df:c1:c6:43:e1:7f:fd:1b:95:48:27:55:0f:9c:91:2a:6b:3c: 6d:75:c9:c2:58:29:5e:14:b6:9c:04:32:bf:17:65:91:4c:13: dc:de:a1:58:e6:48:f2:e7:56:f1:63:8a:e6:cf:11:f1:f6:51: dc:c3:79:4e:8b:15:1e:cf:d7:4f:ef:b0:92:13:59:1b:b3:64: b8:88:b5:cd:1f:1d:a2:f0:52:89:61:f5:d1:6a:39:48:de:ba: fc:51:ca:51:1d:3d:77:44:10:e8:be:5e:6a:04:01:32:8f:42: 75:03:3e:0c:6e:f6:a9:e1:3e:7a:80:a7:2b:de:c2:ac:27:62: 06:f6:1f:ef:2a:1b:3a:17:fc:3e:f2:af:8a:17:1b:66:ca:7f: fb:c9:92:e5:65:2f:94:56:cf:b9:db:ec:50:d6:b1:2a:3d:f1: a0:38:2c:c6:f6:6a:96:ab:83:ab:d2:a3:c9:a6:08:a3:bc:e6: ca:69:81:4a -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZvgBFTwEuLsnKw78hbAmm1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTAwNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzM5ZDU3OTM2ZGQyZDE1MjE0NDNlNjhkYWRkOWQwOTQ5Y2RlMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xK1lsE6KAXTQV5hQVy+9XtOCL35 mnoJuw2YPzxwZh2QcW9sVUTMz24z+dyHAlb1WF+1LiybDvWRXiY6bn3JlQJ2//xs ClwnJS7Lpo+6hRozRH0/7OmLkhdVbZ1ubt6qPQv60ITcK9e4Z0OmX/kXL7tQ21mE 6O7qZkC4Kn8Yarpb19WPhhoQ0Rvr8ldDaEt12ny4ps9JEd3ikKgDyLLRWyxvY5S9 gA4n3aehoiBLRB0v/zuZLFent5nYBGmyvUnH0erUqx04NYrAvpwsJ6jJucqja8BO 4yFaxPIizO+BbW79lvqOfCiOSRg6ZXa5/3QS+4Kyf5gOpr5RKOSqM7VMUwIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFBw51Xk23S0VIUQ+aNrdnQlJzeM/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2QzODU2 Zi0wMjljLTQ0NmEtYWU3ZC1kN2M1ZGE3YzE2NzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZDM4NTZm LTAyOWMtNDQ2YS1hZTdkLWQ3YzVkYTdjMTY3Ni8xL0hEblZlVGJkTFJVaFJENW8y dDJkQ1VuTjR6OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQDBcewAwQDWIXwAwQDXn1IAwQDbUbAAwQDbevg AwQDgv9oAwQCuSPQAwQD1O2oAwQD1cHYMA0EAgACMAcDBQMqAgd4MBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8nDANBgkqhkiG9w0BAQsFAAOCAQEATk5O08wtLX9k 068k1qhAAbQ7XT2/7xvFeZdG8GTtMTuEqNBcJlYSgN44yPSb5stkL4pGmo5/Zqlk hKBTAr+7Jrz/+/WfrnQW38HGQ+F//RuVSCdVD5yRKms8bXXJwlgpXhS2nAQyvxdl kUwT3N6hWOZI8udW8WOK5s8R8fZR3MN5TosVHs/XT++wkhNZG7NkuIi1zR8dovBS iWH10Wo5SN66/FHKUR09d0QQ6L5eagQBMo9CdQM+DG72qeE+eoCnK97CrCdiBvYf 7yobOhf8PvKvihcbZsp/+8mS5WUvlFbPudvsUNaxKj3xoDgsxvZqlquDq9KjyaYI o7zmymmBSg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:46 2026 by rpki-client