This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer (raw, json) Hash identifier: Afcog38HLKMqznWpGsyllEHBoBDcp3Sragcrf8TZ+4M= Subject key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F59341AA6B57029DBA84050B4F4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31440 IP: 195.128.224.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:93:41:aa:6b:57:02:9d:ba:84:05:0b:4f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c9:e8:eb:c1:03:28:1b:26:65:1b:c3:50:42: 40:3c:db:6d:82:e2:2b:63:20:88:52:da:a8:fe:bf: 03:8e:4d:a8:d3:f1:ce:d7:b8:9e:f1:14:fa:af:4c: f1:cb:20:26:6d:7f:6c:b1:4b:df:77:c8:91:7b:c5: d6:8f:1d:72:b3:6f:4b:b0:66:95:ea:ff:39:da:37: b1:a2:4d:60:f6:b8:54:fe:9e:9e:56:ec:03:6d:7d: d9:2d:8b:0a:3f:0a:cf:f0:a0:69:be:88:60:3a:1b: 64:38:94:ae:ff:c6:d2:f1:2a:66:17:e5:88:f4:32: ae:98:e5:f4:39:23:78:03:77:35:ca:36:77:41:07: b6:ed:b9:50:37:8f:27:ae:bb:63:3e:f1:7e:11:bf: b7:38:bd:35:93:ff:40:38:e4:2c:6a:0e:07:17:74: 15:2f:41:c7:af:d7:1e:38:c3:da:84:c8:f5:d0:fc: b0:1e:ac:bf:96:10:82:0d:e0:27:f5:18:84:28:fe: 06:43:42:8a:c7:9c:d0:74:d5:a4:17:12:92:9a:95: cc:fe:20:85:41:31:db:9c:1f:dd:db:bb:2c:85:eb: dd:1f:11:28:05:c5:0b:90:2c:13:c8:51:ab:23:5a: 8c:29:ca:d1:bc:4d:ee:e4:04:a7:ff:c6:da:32:a7: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.128.224.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31440 Signature Algorithm: sha256WithRSAEncryption 79:e9:38:5d:3e:ba:b5:b6:21:c8:2b:83:44:de:c9:2e:5d:71: d6:05:83:65:e5:4e:0c:d9:98:f3:9c:92:58:33:21:c3:df:42: 65:dd:a6:e5:c6:60:ab:a0:8b:a1:9b:41:ae:f5:3f:28:1e:30: dc:67:3f:d6:58:a2:fa:9a:d8:38:b7:1a:4a:be:69:95:31:c7: d6:1f:8d:d9:c1:b0:ec:f3:f6:e5:e6:1b:3a:25:da:b6:af:56: 11:e2:7c:c8:b8:06:28:4e:9f:19:46:07:e4:24:54:2f:b6:80: a4:21:16:00:41:bb:37:50:72:0c:de:c4:6e:bc:4d:a1:3b:f7: 66:37:ad:05:e6:e8:40:19:a0:a1:23:b3:68:29:3d:39:dc:34: c4:d9:e0:b2:59:f5:dc:9c:c9:bb:f3:12:14:d6:15:9a:57:3a: fa:e8:b6:5d:aa:df:00:3b:81:c0:32:38:ef:31:35:46:4f:86: a4:b0:f0:a8:fe:a1:a9:bd:bc:c1:a1:9b:84:03:c5:ba:62:2d: 44:26:d9:ec:28:a1:cb:b6:30:bf:38:33:40:53:95:e3:48:a5: 3d:b3:51:f4:51:51:92:f5:85:75:8e:fc:d1:ea:1e:74:61:9c: 96:37:29:07:c3:95:e2:f6:56:dd:9b:b3:e8:f6:77:3d:68:4a: 1c:30:ab:4a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NPWTQaprVwKduoQFC09KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2VlZDNkOTAxYWIwZTlkMGY2ODNlMGU3MWMyOTQzZmQ2YmU2ZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cno68EDKBsmZRvDUEJAPNttguIr YyCIUtqo/r8Djk2o0/HO17ie8RT6r0zxyyAmbX9ssUvfd8iRe8XWjx1ys29LsGaV 6v852jexok1g9rhU/p6eVuwDbX3ZLYsKPwrP8KBpvohgOhtkOJSu/8bS8SpmF+WI 9DKumOX0OSN4A3c1yjZ3QQe27blQN48nrrtjPvF+Eb+3OL01k/9AOOQsag4HF3QV L0HHr9ceOMPahMj10PywHqy/lhCCDeAn9RiEKP4GQ0KKx5zQdNWkFxKSmpXM/iCF QTHbnB/d27sshevdHxEoBcULkCwTyFGrI1qMKcrRvE3u5ASn/8baMqfOdwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFBzu09kBqw6dD2g+DnHClD/Wvm2UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzdjZWM1 Yi00NTUyLTRlZDItOTlkZC02MDMyNGE2ZTQyNzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvN2NlYzVi LTQ1NTItNGVkMi05OWRkLTYwMzI0YTZlNDI3Ni8xL0hPN1QyUUdyRHAwUGFENE9j Y0tVUDlhLWJaUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw4DgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnrQMA0GCSqGSIb3DQEBCwUAA4IBAQB56ThdPrq1tiHIK4NE3skuXXHWBYNl5U4M 2ZjznJJYMyHD30Jl3ablxmCroIuhm0Gu9T8oHjDcZz/WWKL6mtg4txpKvmmVMcfW H43ZwbDs8/bl5hs6Jdq2r1YR4nzIuAYoTp8ZRgfkJFQvtoCkIRYAQbs3UHIM3sRu vE2hO/dmN60F5uhAGaChI7NoKT053DTE2eCyWfXcnMm78xIU1hWaVzr66LZdqt8A O4HAMjjvMTVGT4aksPCo/qGpvbzBoZuEA8W6Yi1EJtnsKKHLtjC/ODNAU5XjSKU9 s1H0UVGS9YV1jvzR6h50YZyWNykHw5Xi9lbdm7Po9nc9aEocMKtK -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:48 2026 by rpki-client