This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer File: HWHLS77lzdfs7adWCqJJxtEfI6k.cer (raw, json) Hash identifier: gLhRbQLLNpDk/g9t9DXVfu6Ve4iiYH5k22DDmeyIFzI= Subject key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66C62E0FA6015FB64A76B393A76DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198142 IP: 193.150.26.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:62:e0:fa:60:15:fb:64:a7:6b:39:3a:76:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:f6:5c:fa:ea:1a:4b:44:ba:5b:69:0d:fc: e6:93:c9:57:f6:8c:2f:d8:a1:88:7b:5d:78:5c:24: 67:8c:a3:c7:86:da:39:2c:df:7f:02:a0:54:fc:d0: 62:9d:20:0c:0c:c3:de:43:dd:77:fe:0c:ea:19:f2: 31:3b:e8:5e:b2:07:19:6d:8c:59:a0:9a:75:03:80: 19:cc:7a:f8:35:e0:b5:3b:de:60:ae:f0:dc:87:fe: fc:18:ff:eb:50:79:83:99:0f:f4:34:11:bf:22:2f: af:0c:77:83:a7:9d:55:9c:02:52:32:1e:01:15:a0: d7:cd:1e:ee:18:d1:40:cb:c0:4e:db:2c:5b:26:8a: 59:72:6f:0f:c3:82:39:d5:0c:ae:38:23:d4:41:b1: 86:43:2b:f2:75:1e:a4:48:41:75:94:90:30:9c:d2: 68:ca:dd:92:f3:06:de:13:d0:62:e4:03:99:b6:4f: 0d:bd:a2:68:c8:33:1b:5e:a2:57:42:d4:27:78:d7: c0:a2:dd:08:32:56:19:66:f5:47:f9:d1:e3:83:e8: 1b:6a:2a:ed:72:fe:a8:08:60:01:32:41:79:a1:f6: 8d:4c:a8:c6:24:1d:93:76:cf:52:bd:50:72:df:e1: 83:e8:67:5f:2c:7e:9e:ed:0a:7a:1e:77:1b:53:02: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.26.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198142 Signature Algorithm: sha256WithRSAEncryption 27:81:98:67:3a:93:46:4a:96:79:62:29:6d:f9:5d:c5:34:22: 11:53:93:75:5b:5f:5a:f9:2b:b5:6a:dc:86:bd:bf:4d:5f:0a: 85:9f:dc:a2:d1:da:11:3a:04:1d:e5:50:7c:30:07:75:83:f0: f0:72:8c:4b:fc:b7:11:54:0f:77:92:f0:fc:e2:ba:24:5f:ce: 40:25:9b:e6:00:e7:36:ae:af:7e:55:5b:c2:ea:3e:09:3a:92: 41:d0:95:6a:f4:5a:73:00:7d:0a:b2:fb:41:2e:c3:d2:33:f1: d3:4c:0d:f0:df:b1:a3:56:84:30:a1:d4:e9:c8:51:2c:ee:50: 52:3b:9a:a1:cf:b9:fd:ad:9c:3c:67:95:c5:52:d8:aa:8e:3e: 06:a8:ff:f0:f1:40:42:e3:84:82:d5:16:ba:4e:07:c0:8e:b2: 71:cd:26:b2:ae:04:6a:93:bf:b3:7c:c5:d7:bd:d0:cd:bd:75: 1d:21:ae:63:42:99:19:52:cd:dd:93:4e:65:b5:25:50:0e:30: b6:b9:15:85:a4:22:18:c6:ac:2b:f8:85:e0:9a:59:12:40:b0: f5:3d:97:2a:01:34:54:73:3c:97:35:b0:9c:14:f2:4d:bb:5a: 77:82:1d:28:cc:be:d9:01:03:0c:84:11:fc:12:5d:bd:02:68: 0d:9c:ea:5a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xmxi4PpgFftkp2s5OnbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDYxY2I0YmJlZTVjZGQ3ZWNlZGE3NTYwYWEyNDljNmQxMWYyM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGv2XPrqGktEultpDfzmk8lX9owv 2KGIe114XCRnjKPHhto5LN9/AqBU/NBinSAMDMPeQ913/gzqGfIxO+hesgcZbYxZ oJp1A4AZzHr4NeC1O95grvDch/78GP/rUHmDmQ/0NBG/Ii+vDHeDp51VnAJSMh4B FaDXzR7uGNFAy8BO2yxbJopZcm8Pw4I51QyuOCPUQbGGQyvydR6kSEF1lJAwnNJo yt2S8wbeE9Bi5AOZtk8NvaJoyDMbXqJXQtQneNfAot0IMlYZZvVH+dHjg+gbairt cv6oCGABMkF5ofaNTKjGJB2Tds9SvVBy3+GD6GdfLH6e7Qp6HncbUwIY2wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFB1hy0u+5c3X7O2nVgqiScbRHyOpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2L2IyZjVm OS1kMzRhLTQ3YTMtYmI1NC0wODcxZmRiNmE0ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvYjJmNWY5 LWQzNGEtNDdhMy1iYjU0LTA4NzFmZGI2YTRmYS8xL0hXSExTNzdsemRmczdhZFdD cUpKeHRFZkk2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwZYaMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMF/jANBgkqhkiG9w0BAQsFAAOCAQEAJ4GYZzqTRkqWeWIpbfldxTQiEVOTdVtf WvkrtWrchr2/TV8KhZ/cotHaEToEHeVQfDAHdYPw8HKMS/y3EVQPd5Lw/OK6JF/O QCWb5gDnNq6vflVbwuo+CTqSQdCVavRacwB9CrL7QS7D0jPx00wN8N+xo1aEMKHU 6chRLO5QUjuaoc+5/a2cPGeVxVLYqo4+Bqj/8PFAQuOEgtUWuk4HwI6ycc0msq4E apO/s3zF173Qzb11HSGuY0KZGVLN3ZNOZbUlUA4wtrkVhaQiGMasK/iF4JpZEkCw 9T2XKgE0VHM8lzWwnBTyTbtad4IdKMy+2QEDDIQR/BJdvQJoDZzqWg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:14 2026 by rpki-client