This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer File: HFGW3tW6XWhucJXG1cY4xrj4uto.cer (raw, json) Hash identifier: 6SkJTddRrqbMNKUs0KWXEZlFU6rbVmstriXyBdh1RxA= Subject key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3CA46C67706E43AE6C5B549DD6BAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.206.208.0/23 IP: 91.207.0.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ca:46:c6:77:06:e4:3a:e6:c5:b5:49:dd:6b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e1:36:b2:ca:46:76:b5:fe:46:5e:9a:fc:33: 9c:c0:15:74:35:e4:40:ae:a3:86:43:2e:94:a2:84: 07:f6:ae:8e:3c:73:03:a7:3b:89:77:6f:94:b7:70: 86:e3:58:dc:99:1b:2b:10:da:57:25:17:85:8a:b5: ad:1d:ca:6a:7f:0b:64:35:a6:c0:fb:2a:15:33:af: 4a:f8:d6:98:af:62:f6:f3:02:65:9e:6b:54:6a:d6: 66:df:60:7c:b2:66:73:fb:cb:66:73:76:04:6f:13: 01:f6:dd:d2:02:6e:66:a1:55:91:4a:5e:82:e9:a3: 48:07:ca:99:1b:0d:7a:8f:e3:a6:b6:da:94:82:28: 8c:87:b4:b2:7b:89:45:4c:76:53:ff:2d:84:d8:e3: 17:3d:10:73:da:6e:e5:b8:0a:ce:fe:a3:ce:18:f4: aa:ef:c7:9a:be:52:fc:d8:8a:50:0f:41:81:bc:01: 1a:8e:32:9f:5a:5a:d9:24:be:2f:70:e8:46:d7:d1: 5a:23:01:04:43:1e:1d:85:34:8d:1d:92:e9:ad:5d: e6:61:24:2a:30:54:d0:91:27:d2:20:26:8d:f3:d2: 8b:77:25:4c:a9:e4:81:d8:95:dc:b9:c1:2d:fb:4d: 68:1e:79:47:8a:c1:b5:42:d3:ff:bd:24:3c:0b:80: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.208.0/23 91.207.0.0/23 Signature Algorithm: sha256WithRSAEncryption 49:72:4c:c5:5c:57:7d:18:34:df:aa:66:a2:7a:00:3c:cd:e6: 82:e4:5b:26:2b:0b:51:4f:3a:c9:b8:79:88:8b:4a:91:f3:43: 79:aa:be:c1:5b:03:00:c8:f4:16:0f:17:60:58:16:33:99:e1: 3f:7e:75:5e:58:38:16:1a:a8:91:6e:5a:66:18:4c:bc:0b:a7: 49:16:08:d7:2b:e8:44:97:45:cb:52:5f:1b:13:c9:53:d4:15: 15:7e:84:b8:ef:0f:9d:3c:93:f6:51:4a:fb:37:ba:d6:a4:09: 81:c7:2b:25:11:66:5a:95:de:59:f3:03:58:3b:7a:62:e8:8e: 62:52:ad:8f:1d:5a:8d:67:21:a3:29:6e:5b:a1:e6:7c:69:d3: 11:d0:21:aa:f1:58:38:4a:2c:72:32:ca:49:2c:ab:14:dc:5a: 25:f5:98:cc:1a:27:4e:78:e9:1a:e6:8a:7e:d4:b5:57:e5:30: e1:b9:61:6d:a7:d8:eb:8a:b9:5d:1c:b3:a8:dd:91:29:ee:eb: b9:4a:ca:30:66:0e:61:06:bc:bc:b7:4c:e9:0e:d6:5a:03:ab: 38:85:f6:73:95:bc:d1:32:d8:90:05:55:f2:08:76:ea:7e:4d: 18:ea:a4:d8:b0:51:6a:c1:0a:53:ca:40:b1:3f:41:bc:ec:33: 89:85:18:a9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7o8pGxncG5DrmxbVJ3WutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzUxOTZkZWQ1YmE1ZDY4NmU3MDk1YzZkNWM2MzhjNmI4ZjhiYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OE2sspGdrX+Rl6a/DOcwBV0NeRA rqOGQy6UooQH9q6OPHMDpzuJd2+Ut3CG41jcmRsrENpXJReFirWtHcpqfwtkNabA +yoVM69K+NaYr2L28wJlnmtUatZm32B8smZz+8tmc3YEbxMB9t3SAm5moVWRSl6C 6aNIB8qZGw16j+OmttqUgiiMh7Sye4lFTHZT/y2E2OMXPRBz2m7luArO/qPOGPSq 78eavlL82IpQD0GBvAEajjKfWlrZJL4vcOhG19FaIwEEQx4dhTSNHZLprV3mYSQq MFTQkSfSICaN89KLdyVMqeSB2JXcucEt+01oHnlHisG1QtP/vSQ8C4BXKQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBxRlt7Vul1obnCVxtXGOMa4+LraMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzE1OWZh My0zMTZlLTRmNWUtOGI2MS0yMGJmMjc1ZmQwZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTU5ZmEz LTMxNmUtNGY1ZS04YjYxLTIwYmYyNzVmZDBlNy8xL0hGR1czdFc2WFdodWNKWEcx Y1k0eHJqNHV0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW87QAwQBW88AMA0GCSqGSIb3DQEBCwUAA4IB AQBJckzFXFd9GDTfqmaiegA8zeaC5FsmKwtRTzrJuHmIi0qR80N5qr7BWwMAyPQW DxdgWBYzmeE/fnVeWDgWGqiRblpmGEy8C6dJFgjXK+hEl0XLUl8bE8lT1BUVfoS4 7w+dPJP2UUr7N7rWpAmBxyslEWZald5Z8wNYO3pi6I5iUq2PHVqNZyGjKW5boeZ8 adMR0CGq8Vg4SixyMspJLKsU3Fol9ZjMGidOeOka5op+1LVX5TDhuWFtp9jrirld HLOo3ZEp7uu5SsowZg5hBry8t0zpDtZaA6s4hfZzlbzRMtiQBVXyCHbqfk0Y6qTY sFFqwQpTykCxP0G87DOJhRip -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:37 2026 by rpki-client