This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer File: HT0ETAkeiLgLSyaeu3lrPyRUS18.cer (raw, json) Hash identifier: 9KvfMspaFthiphABO/3WdIwscjJjUXDkL0S16/AYJhI= Subject key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8681355ED856580C9E9003777A046 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51257 IP: 171.22.146.0/24 IP: 2a05:d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:68:13:55:ed:85:65:80:c9:e9:00:37:77:a0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:15:0b:95:59:07:18:1d:95:55:66:d1:ca: eb:66:ff:3b:55:97:26:44:17:da:59:ee:d4:48:cc: a6:6f:76:6c:8e:bf:7c:2b:37:19:29:de:b5:23:3b: e9:df:f4:9c:3a:c7:8f:5f:a5:01:7d:91:0a:92:c7: e2:1d:8e:1f:7e:fe:53:a2:80:74:56:1e:f3:58:51: 43:5a:eb:46:94:c4:b7:30:98:61:82:96:85:e1:d7: fe:e6:3c:83:7a:d3:76:cd:23:2a:e4:6f:1e:b6:ac: ce:9f:ff:87:44:38:6f:cc:a3:bf:10:4a:b6:c1:22: cd:2d:7c:3f:5b:6a:60:71:d7:e0:ea:f0:bb:5b:67: bb:36:0a:b2:8e:4a:43:02:71:4a:3d:ac:4b:9b:9e: 7c:69:4d:0b:a9:1a:f0:5a:97:62:67:a8:85:96:e6: 31:d2:af:42:20:52:6c:c9:73:ec:e1:8f:61:d1:cc: 93:95:e3:64:ac:c0:51:86:49:71:14:fd:8f:5b:51: 7b:dc:0f:06:30:ba:4f:09:a3:32:26:43:a4:77:78: 1c:0f:ff:fa:b6:ed:4c:c1:93:c8:32:78:a0:9c:a7: b8:13:1e:18:d0:b9:46:2a:e5:50:a4:96:14:7d:a0: 0e:3c:d5:91:66:2f:42:33:10:ff:69:32:0b:70:09: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.146.0/24 IPv6: 2a05:d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51257 Signature Algorithm: sha256WithRSAEncryption a4:0c:af:a4:a9:bc:fc:dc:f4:41:c5:b0:4b:95:02:f5:34:22: d7:a4:43:c2:dc:af:4c:fa:88:f8:41:30:4a:35:2a:28:63:64: 75:35:9c:c7:7b:f5:c7:4b:b9:87:b6:b3:65:f0:b2:5a:81:ba: 02:e5:22:c9:96:cb:ba:15:3d:c4:ca:cb:97:4e:22:d0:d8:ff: ff:48:51:4f:11:a6:89:c2:17:4a:38:d5:95:c3:11:b2:92:1a: fb:20:b8:2b:c6:ce:56:41:fe:51:b7:7d:f6:38:11:a3:e8:98: d2:ea:67:2f:28:94:4b:0d:91:87:84:b3:43:ed:72:82:19:ac: 7c:b9:03:f8:46:c2:0c:45:c8:a6:d8:e9:7a:82:ac:e2:e8:bc: f6:ef:6a:ab:d0:63:a1:e4:6a:3c:6b:bf:2f:00:97:b9:01:2f: d4:e6:00:0b:13:46:21:97:57:4f:6a:02:80:17:4c:a5:d8:13: 89:04:a1:f3:f3:7b:5d:8f:31:1a:0b:3a:47:61:24:f1:dd:0b: 2c:51:6a:53:6f:3c:ca:8b:56:cc:c9:cf:05:71:59:40:85:85: 3c:f1:8b:d0:36:40:32:b5:ee:b9:a3:50:3d:bd:6c:c3:35:08: 92:09:c6:db:c2:38:38:6e:b0:95:c1:22:0d:9d:eb:5e:9c:a6: 37:51:e6:ef -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yGgTVe2FZYDJ6QA3d6BGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDNkMDQ0YzA5MWU4OGI4MGI0YjI2OWViYjc5NmIzZjI0NTQ0YjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse4VC5VZBxgdlVVm0crrZv87VZcm RBfaWe7USMymb3Zsjr98KzcZKd61Izvp3/ScOsePX6UBfZEKksfiHY4ffv5TooB0 Vh7zWFFDWutGlMS3MJhhgpaF4df+5jyDetN2zSMq5G8etqzOn/+HRDhvzKO/EEq2 wSLNLXw/W2pgcdfg6vC7W2e7NgqyjkpDAnFKPaxLm558aU0LqRrwWpdiZ6iFluYx 0q9CIFJsyXPs4Y9h0cyTleNkrMBRhklxFP2PW1F73A8GMLpPCaMyJkOkd3gcD//6 tu1MwZPIMnignKe4Ex4Y0LlGKuVQpJYUfaAOPNWRZi9CMxD/aTILcAnQowIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB09BEwJHoi4C0smnrt5az8kVEtfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzI0NjQ2 Ni02MDdhLTQ0ZGEtOWNiZi1jNDE3NDQyZWZmOTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMjQ2NDY2 LTYwN2EtNDRkYS05Y2JmLWM0MTc0NDJlZmY5My8xL0hUMEVUQWtlaUxnTFN5YWV1 M2xyUHlSVVMxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAqxaSMA0EAgACMAcDBQMqBQ2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDIOTANBgkqhkiG9w0BAQsFAAOCAQEApAyvpKm8/Nz0 QcWwS5UC9TQi16RDwtyvTPqI+EEwSjUqKGNkdTWcx3v1x0u5h7azZfCyWoG6AuUi yZbLuhU9xMrLl04i0Nj//0hRTxGmicIXSjjVlcMRspIa+yC4K8bOVkH+Ubd99jgR o+iY0upnLyiUSw2Rh4SzQ+1yghmsfLkD+EbCDEXIptjpeoKs4ui89u9qq9BjoeRq PGu/LwCXuQEv1OYACxNGIZdXT2oCgBdMpdgTiQSh8/N7XY8xGgs6R2Ek8d0LLFFq U288yotWzMnPBXFZQIWFPPGL0DZAMrXuuaNQPb1swzUIkgnG28I4OG6wlcEiDZ3r XpymN1Hm7w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:27 2026 by rpki-client