This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer (raw, json) Hash identifier: 5l2pBb3jRMqhkw2iDQL9cKYCW/qYFNM42Q11D5B6h2E= Subject key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC0E6D8298BF4C21C132C02927954F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.253.8.0/24 IP: 2a12:85c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0e:6d:82:98:bf:4c:21:c1:32:c0:29:27:95:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b0:95:e4:a6:0b:1a:fe:51:ac:db:79:a2:a9: 8a:80:42:bd:d2:a8:d3:cc:c3:bd:a6:66:52:4a:fb: dd:f7:7f:60:3c:b8:47:e7:e2:95:38:82:05:b5:57: e7:99:c5:35:a5:61:e4:d7:a7:7b:a3:78:bb:33:ba: 60:fb:c6:7b:62:63:c5:a0:8a:3c:3a:47:5c:62:95: 9b:c6:68:9e:1f:28:14:11:cd:8f:c2:06:c1:89:53: 82:e3:52:40:28:ad:af:f8:f3:87:92:c8:20:68:df: 89:85:68:f8:64:98:17:63:33:36:26:a8:1d:8a:8e: d6:a3:12:26:3a:79:68:d8:24:c1:fe:e3:ed:e6:70: 26:ae:25:56:a4:da:78:15:08:ce:2b:02:2f:2e:c9: b2:dc:fc:a8:a3:b3:a7:8f:67:72:56:03:86:57:b1: 22:c7:d4:2a:6f:57:23:51:f3:ad:c1:ab:18:38:75: 99:e6:6a:9b:90:e9:54:42:fb:20:ec:45:ad:38:9d: 28:1a:09:2b:ba:8c:a1:c8:6f:a7:45:48:77:3f:50: bf:5a:b4:af:0d:62:21:af:df:ef:fd:35:8e:1b:1e: e6:8d:c8:54:4e:59:cb:97:b3:51:98:5a:19:a6:58: 61:4a:15:69:b9:d5:9f:0a:03:6a:33:49:62:25:8a: d2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.8.0/24 IPv6: 2a12:85c0::/29 Signature Algorithm: sha256WithRSAEncryption 06:a6:da:1c:21:f2:8b:9e:cf:67:a7:53:27:b7:9b:8d:c7:7d: 52:a1:93:c0:38:a6:1f:79:29:27:30:d5:72:d0:81:54:ba:c1: 9b:1d:e7:f0:1e:c9:78:83:04:79:96:a0:cb:29:be:fd:67:6d: 9a:3e:a4:9a:0a:57:7f:8e:5b:ef:e9:a8:ee:0b:c2:2b:0b:43: a3:41:cd:86:aa:78:05:f6:a2:2d:b9:9e:53:b2:78:a2:4b:3b: f9:7a:65:50:76:23:ff:21:7f:d5:24:69:9f:0d:08:84:5f:4c: e7:71:7d:f1:83:51:18:f0:c6:3c:60:18:91:50:5a:4e:54:d8: 75:5a:b0:26:e4:5a:5e:26:4e:47:2e:f9:cf:a6:5b:d9:28:80: f0:be:80:ca:41:b3:3e:ea:a9:33:68:fe:b5:53:4e:b4:d4:04: 6b:2f:dc:6e:b6:67:e1:ae:9a:16:e7:2a:6a:c0:95:c4:36:49: 9c:a8:7e:cf:4e:ed:d1:6f:85:93:eb:99:b8:26:ad:47:9e:4e: 3e:f5:c8:4e:a1:ab:ac:7a:0d:3e:a1:47:d7:06:a3:66:13:d9: b2:88:0e:02:df:78:3e:bb:30:71:4f:83:b0:de:5f:c8:16:72: 81:c1:53:ee:08:6b:0f:0f:f4:30:10:e4:f7:27:c7:df:00:b3: 25:6a:df:b9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57A5tgpi/TCHBMsApJ5VPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2ZiMDg3ZmZiN2Y2MWNlMTEzZjY5MzQ1ZTRkNTBhMTEzODA4ZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77CV5KYLGv5RrNt5oqmKgEK90qjT zMO9pmZSSvvd939gPLhH5+KVOIIFtVfnmcU1pWHk16d7o3i7M7pg+8Z7YmPFoIo8 OkdcYpWbxmieHygUEc2PwgbBiVOC41JAKK2v+POHksggaN+JhWj4ZJgXYzM2Jqgd io7WoxImOnlo2CTB/uPt5nAmriVWpNp4FQjOKwIvLsmy3Pyoo7Onj2dyVgOGV7Ei x9Qqb1cjUfOtwasYOHWZ5mqbkOlUQvsg7EWtOJ0oGgkruoyhyG+nRUh3P1C/WrSv DWIhr9/v/TWOGx7mjchUTlnLl7NRmFoZplhhShVpudWfCgNqM0liJYrSEwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFBz7CH/7f2HOET9pNF5NUKETgI/qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2ZkZDUx ZS1iY2ExLTQ4OTItYjk3YS02OWFhNTNjNjlkNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZmRkNTFl LWJjYTEtNDg5Mi1iOTdhLTY5YWE1M2M2OWQ1NC8xL0hQc0lmX3RfWWM0UlAyazBY azFRb1JPQWotby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuf0IMA0EAgACMAcDBQMqEoXAMA0GCSqGSIb3 DQEBCwUAA4IBAQAGptocIfKLns9np1Mnt5uNx31SoZPAOKYfeSknMNVy0IFUusGb HefwHsl4gwR5lqDLKb79Z22aPqSaCld/jlvv6ajuC8IrC0OjQc2GqngF9qItuZ5T sniiSzv5emVQdiP/IX/VJGmfDQiEX0zncX3xg1EY8MY8YBiRUFpOVNh1WrAm5Fpe Jk5HLvnPplvZKIDwvoDKQbM+6qkzaP61U0601ARrL9xutmfhrpoW5ypqwJXENkmc qH7PTu3Rb4WT65m4Jq1Hnk4+9chOoauseg0+oUfXBqNmE9myiA4C33g+uzBxT4Ow 3l/IFnKBwVPuCGsPD/QwEOT3J8ffALMlat+5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:38 2026 by rpki-client