This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer File: HTHgIH7TynaEoD6I-aHeKSLdRd4.cer (raw, json) Hash identifier: 0nYWECjFyivZzUQK6NLAeRZQTVoisgNo2tAF23zTNCw= Subject key identifier: 1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB414E0BB57D6E8F0F9DA4D0A137C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.68.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:41:4e:0b:b5:7d:6e:8f:0f:9d:a4:d0:a1:37:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:21:71:30:bb:08:14:20:55:2d:29:88:fc: 69:f3:3c:c7:c2:1c:5b:40:bd:4b:9a:c2:02:b0:8d: b7:8c:b9:c1:e6:b2:9c:17:a2:e4:8b:28:09:2b:c3: a6:e7:a1:d6:a2:c4:40:32:5b:16:76:2e:8f:d0:94: 98:c1:41:bc:bd:99:de:23:8b:49:8b:9d:33:9f:dc: d1:d5:8a:24:4a:c1:56:47:e2:6a:62:a0:a3:e2:cc: 75:5e:3d:2e:10:5f:47:bb:2a:1a:ab:70:ec:d7:e5: b8:68:87:fe:61:15:fa:a3:a2:44:a7:c2:e3:4e:6e: 35:77:e6:e0:44:cb:f1:5e:74:f8:d8:17:9a:4f:9a: 34:de:ec:97:75:5b:12:31:a4:6e:51:91:ac:6d:1e: c3:fa:6f:e3:f2:06:1d:e6:a9:cb:48:ce:6b:46:68: d0:3e:e3:00:1b:be:05:08:f6:0e:64:78:2a:0f:fa: 5a:ac:30:51:52:53:13:77:5f:2a:36:0b:e9:98:81: 77:87:07:17:ed:6a:99:60:ee:c2:cb:2b:1b:1f:cf: fe:8c:3b:33:d3:35:89:7c:56:61:04:a4:b7:06:27: 6c:a8:01:44:29:5f:16:cf:ee:a1:4a:e3:b7:1e:83: a8:be:a7:95:48:07:88:6f:33:1b:e2:3c:37:b7:4d: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.68.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:51:d8:de:e5:96:ed:83:41:50:48:f7:98:bf:91:d2:fa:1b: 11:2e:61:31:e9:03:38:14:28:65:e1:97:8f:e5:c0:62:74:e4: e4:a2:ac:cd:25:94:d7:a7:e5:29:83:81:d4:6d:2d:6c:df:ea: 10:e1:20:2f:39:2c:78:65:ff:bf:23:7e:a0:85:11:51:ea:50: 36:cc:64:d2:94:7e:fe:63:0d:3c:67:ba:a4:53:38:52:75:4d: b9:7e:cc:23:4a:e6:a9:d7:e8:c2:04:82:ab:f0:29:58:42:dd: f4:75:4f:20:41:51:d7:39:a6:7e:75:68:1b:f5:39:bb:8a:df: c0:e3:1b:41:a0:3e:0c:6c:72:f7:15:83:6c:2b:f7:3a:62:b0: d6:c9:8f:e4:d1:49:99:d2:d9:6b:04:38:a9:4e:22:a4:87:60: c2:bf:6a:d1:8e:67:68:7b:0e:cb:ea:32:41:e1:f1:4a:3a:70: af:8f:28:2f:65:16:5e:9e:e7:67:31:1f:9e:d5:97:fd:e5:07: fe:a2:50:ce:56:60:65:cf:b4:7d:7e:f4:54:f3:1d:ec:94:94: 0d:ae:48:57:62:15:c9:ad:ef:0f:28:06:fc:20:b8:d6:69:58: 7b:3d:91:8a:b7:0c:67:6c:91:d8:e9:58:53:9d:a5:b0:f3:85: ed:f2:a3:2f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt260FOC7V9bo8PnaTQoTfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDMxZTAyMDdlZDNjYTc2ODRhMDNlODhmOWExZGUyOTIyZGQ0NWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspEhcTC7CBQgVS0piPxp8zzHwhxb QL1LmsICsI23jLnB5rKcF6LkiygJK8Om56HWosRAMlsWdi6P0JSYwUG8vZneI4tJ i50zn9zR1YokSsFWR+JqYqCj4sx1Xj0uEF9Huyoaq3Ds1+W4aIf+YRX6o6JEp8Lj Tm41d+bgRMvxXnT42BeaT5o03uyXdVsSMaRuUZGsbR7D+m/j8gYd5qnLSM5rRmjQ PuMAG74FCPYOZHgqD/parDBRUlMTd18qNgvpmIF3hwcX7WqZYO7CyysbH8/+jDsz 0zWJfFZhBKS3BidsqAFEKV8Wz+6hSuO3HoOovqeVSAeIbzMb4jw3t03ZAwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFB0x4CB+08p2hKA+iPmh3iki3UXeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzczMGUz OC1mZjg5LTQzZTEtOTRmZS1hMWI3NzhmNGQwN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvNzMwZTM4 LWZmODktNDNlMS05NGZlLWExYjc3OGY0ZDA3ZC8xL0hUSGdJSDdUeW5hRW9ENkkt YUhlS1NMZFJkNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjUQwDQYJKoZIhvcNAQELBQADggEBACJR2N7l lu2DQVBI95i/kdL6GxEuYTHpAzgUKGXhl4/lwGJ05OSirM0llNen5SmDgdRtLWzf 6hDhIC85LHhl/78jfqCFEVHqUDbMZNKUfv5jDTxnuqRTOFJ1Tbl+zCNK5qnX6MIE gqvwKVhC3fR1TyBBUdc5pn51aBv1ObuK38DjG0GgPgxscvcVg2wr9zpisNbJj+TR SZnS2WsEOKlOIqSHYMK/atGOZ2h7DsvqMkHh8Uo6cK+PKC9lFl6e52cxH57Vl/3l B/6iUM5WYGXPtH1+9FTzHeyUlA2uSFdiFcmt7w8oBvwguNZpWHs9kYq3DGdskdjp WFOdpbDzhe3yoy8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:02 2026 by rpki-client