This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer File: HSixjfJE24nyuXpscmKXM7OIYC8.cer (raw, json) Hash identifier: HrkU2e8Nut1RA847uOYF0mX7zQNmuDvooC5yzVIb9kA= Subject key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C704090BC6A3129CC57FE583BF49D2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33856 IP: 185.98.252.0/22 IP: 2a04:6600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:04:09:0b:c6:a3:12:9c:c5:7f:e5:83:bf:49:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d28b18df244db89f2b97a6c72629733b388602f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:26:4a:f2:ec:16:85:e4:00:e6:23:53:14: 0c:40:7a:3c:2f:32:2d:89:94:d1:5a:24:22:a2:ba: 0d:7e:85:35:d1:7f:02:0b:e6:3b:f4:5f:a0:a1:c7: dc:76:b7:7e:b1:8c:d0:52:f8:e7:72:1b:c0:05:95: 28:ca:f2:c8:87:20:5c:a7:da:a3:9d:69:70:60:03: 86:18:48:33:f6:aa:43:85:41:57:9c:a4:00:80:13: ee:9d:0a:d1:f3:67:53:b0:06:d7:b3:e5:a2:f0:77: 10:8a:c3:03:22:64:2a:c7:28:ff:ad:86:1c:44:1a: 0d:8e:b6:f9:de:7d:2a:6c:cf:40:b6:50:d1:00:41: 1b:9d:17:f4:39:5c:88:b3:58:b0:4c:89:44:c5:95: c3:6d:45:a8:7d:ca:1d:fa:24:1e:e6:c7:a9:3a:8b: 1d:d1:11:8b:c0:c9:9a:7f:fc:6b:18:84:91:d0:bc: 30:d3:9a:6f:06:b5:c5:0a:06:cf:97:cf:3a:0f:23: ca:5a:42:90:ab:ff:dc:4c:6d:62:4f:2e:9f:25:92: fa:df:09:b4:df:1c:ab:6a:c6:66:ce:15:f9:c7:1d: 86:4c:03:69:07:da:27:42:47:ca:7a:d1:09:4a:9c: e8:86:bc:50:d6:1b:aa:46:d4:13:8b:af:48:7c:3b: e5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.252.0/22 IPv6: 2a04:6600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33856 Signature Algorithm: sha256WithRSAEncryption 22:a0:d5:3f:78:c0:73:c1:f9:ec:a7:14:5b:1c:a4:6b:5b:fa: 90:0c:85:17:67:50:1a:34:9f:c8:3e:bf:fe:2e:30:db:c7:86: 3e:a8:de:06:9b:60:69:0c:c0:2f:7f:08:df:7a:3c:09:64:91: 1c:46:81:1f:c9:a7:48:20:97:af:1d:27:51:db:6c:da:b8:ef: ed:ed:13:b7:2d:7b:3e:c2:6b:6b:7d:6b:56:58:ff:ba:34:d0: 9f:86:5d:6c:1f:b6:2c:0a:36:a6:d8:8b:cd:eb:34:50:29:e5: 12:6f:1a:44:a1:fe:9c:78:63:79:ad:bc:1b:8c:5f:db:bd:d2: c5:a4:c9:4a:e8:aa:b9:96:57:30:a6:3b:5f:5e:fb:bf:d2:6b: ee:f7:6b:f5:fc:fb:d5:96:d4:18:08:a8:87:c4:45:ab:dc:5a: a2:f3:46:92:4c:a8:6a:a1:4a:fd:4a:d4:3d:3e:f3:9b:35:e1: 5f:a2:1d:a4:91:f6:6e:b9:79:ff:06:76:08:91:39:66:8c:f3: 86:e2:1e:66:47:c2:69:8f:44:f5:a2:a8:f1:df:af:8a:13:b4: 64:50:19:c9:f7:04:b7:24:b3:4b:7c:ce:32:c6:df:bd:ae:d6: 60:c6:cd:dc:79:ee:a6:5a:bc:8d:38:94:50:a0:f9:cd:36:32: 31:92:9d:32 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xwQJC8ajEpzFf+WDv0nSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDI4YjE4ZGYyNDRkYjg5ZjJiOTdhNmM3MjYyOTczM2IzODg2MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMkmSvLsFoXkAOYjUxQMQHo8LzIt iZTRWiQioroNfoU10X8CC+Y79F+gocfcdrd+sYzQUvjnchvABZUoyvLIhyBcp9qj nWlwYAOGGEgz9qpDhUFXnKQAgBPunQrR82dTsAbXs+Wi8HcQisMDImQqxyj/rYYc RBoNjrb53n0qbM9AtlDRAEEbnRf0OVyIs1iwTIlExZXDbUWofcod+iQe5sepOosd 0RGLwMmaf/xrGISR0Lww05pvBrXFCgbPl886DyPKWkKQq//cTG1iTy6fJZL63wm0 3xyrasZmzhX5xx2GTANpB9onQkfKetEJSpzohrxQ1huqRtQTi69IfDvllQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB0osY3yRNuJ8rl6bHJilzOziGAvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5Lzg4NzYy MC1mMzg1LTQzZjQtOWJlMi1hOTljMzkwOTBkYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvODg3NjIw LWYzODUtNDNmNC05YmUyLWE5OWMzOTA5MGRiNC8xL0hTaXhqZkpFMjRueXVYcHNj bUtYTTdPSVlDOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWL8MA0EAgACMAcDBQMqBGYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCEQDANBgkqhkiG9w0BAQsFAAOCAQEAIqDVP3jAc8H5 7KcUWxyka1v6kAyFF2dQGjSfyD6//i4w28eGPqjeBptgaQzAL38I33o8CWSRHEaB H8mnSCCXrx0nUdts2rjv7e0Tty17PsJra31rVlj/ujTQn4ZdbB+2LAo2ptiLzes0 UCnlEm8aRKH+nHhjea28G4xf273SxaTJSuiquZZXMKY7X177v9Jr7vdr9fz71ZbU GAioh8RFq9xaovNGkkyoaqFK/UrUPT7zmzXhX6IdpJH2brl5/wZ2CJE5ZozzhuIe ZkfCaY9E9aKo8d+vihO0ZFAZyfcEtySzS3zOMsbfva7WYMbN3Hnuplq8jTiUUKD5 zTYyMZKdMg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:25 2026 by rpki-client