This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer File: H_HOmuJWMQK_jqcqieBhUu9wWLI.cer (raw, json) Hash identifier: yOPOFE/aeh/DemikZNYnAPJdvZLHDNGzmwFNxisfQ+k= Subject key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3398273F238845E0AFDEAA286B700 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199540 IP: 185.144.98.0/24 IP: 2a13:ae80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:39:82:73:f2:38:84:5e:0a:fd:ea:a2:86:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:a0:59:b3:5a:3c:cb:0d:1e:fd:60:0e:6d: 94:cf:08:40:59:cb:b6:24:29:34:6b:24:31:55:67: 34:38:56:cc:b4:40:7e:b5:0a:96:b0:04:4d:1f:e6: 7f:47:fd:41:c3:fb:db:81:4e:ad:c2:f4:92:8d:f9: 23:94:5f:03:b6:ed:f1:e4:b5:9c:69:ff:af:40:43: 03:e0:68:59:c9:06:9b:8c:1f:bd:0e:d2:dc:80:73: 26:ac:d7:71:a6:89:30:14:d0:03:88:1f:f4:5d:27: 16:bd:92:6f:1f:3e:45:c1:48:9a:3d:73:8f:f8:ce: 8e:88:a0:f2:60:74:71:35:49:f9:e2:68:20:df:0c: b6:cc:75:8b:c7:3c:4a:2c:d5:4e:6d:29:d5:a1:84: 13:ee:e3:fa:bb:22:62:29:3a:8d:60:6c:ec:72:c3: 3b:9d:1e:18:c8:7b:5d:42:44:40:ff:9d:2a:93:71: 6e:b4:d6:0a:e9:17:95:00:f1:f9:49:e3:f5:0b:84: 9c:b8:ae:2d:65:e3:3d:78:4c:f4:14:50:64:01:df: 9d:dc:f9:4b:03:06:b6:12:b7:19:c0:62:d8:31:2c: 52:37:ba:a1:07:6f:8a:76:1f:72:f8:33:6a:a8:77: 82:04:e1:5f:aa:0b:44:8c:a4:15:7e:f4:eb:64:c3: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.98.0/24 IPv6: 2a13:ae80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199540 Signature Algorithm: sha256WithRSAEncryption 6f:4b:8f:8b:87:d8:90:88:94:bd:19:9c:8e:49:7a:f6:af:86: aa:be:19:6f:55:a1:4c:0f:85:fe:9c:1d:d5:62:23:ff:f8:f8: f0:f4:c6:98:63:fe:78:9a:94:6f:66:ce:ed:66:35:93:d4:e5: 89:1b:39:1d:8a:a1:57:c8:c1:33:62:53:0b:e5:a8:f3:7c:b0: 8e:95:dc:aa:4c:6a:9d:70:fa:20:8e:64:b8:99:0c:5c:b3:6d: 9c:29:51:bc:aa:24:c5:3c:fe:09:12:0c:81:c9:4c:ae:8b:68: 09:94:f3:57:6f:e1:49:98:13:50:68:d1:7a:66:09:66:07:c1: a7:df:e1:5c:71:6b:e2:f0:67:f3:a3:d2:29:29:89:2b:4d:ad: 26:64:bc:31:f3:9d:d3:3d:ec:2e:85:75:58:bf:45:f1:6c:7a: 0a:b5:51:8a:c4:c6:91:71:ee:b0:4d:2e:06:7e:c2:55:7e:f3: 2a:1a:25:fa:16:f8:b2:56:ed:f7:cb:0e:b4:3b:64:08:f8:a8: e8:7f:5c:09:52:95:bb:16:d0:ee:bb:b6:7e:cd:fe:31:c8:3f: f6:b1:f2:6d:7f:2a:c1:8a:da:0c:ac:d1:fc:db:d8:bb:53:93: f2:0d:57:04:c9:cf:a6:40:28:cf:cf:98:db:f2:47:77:4b:64: b5:53:81:20 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7ozmCc/I4hF4K/eqihrcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmYxY2U5YWUyNTYzMTAyYmY4ZWE3MmE4OWUwNjE1MmVmNzA1OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKKgWbNaPMsNHv1gDm2UzwhAWcu2 JCk0ayQxVWc0OFbMtEB+tQqWsARNH+Z/R/1Bw/vbgU6twvSSjfkjlF8Dtu3x5LWc af+vQEMD4GhZyQabjB+9DtLcgHMmrNdxpokwFNADiB/0XScWvZJvHz5FwUiaPXOP +M6OiKDyYHRxNUn54mgg3wy2zHWLxzxKLNVObSnVoYQT7uP6uyJiKTqNYGzscsM7 nR4YyHtdQkRA/50qk3FutNYK6ReVAPH5SeP1C4ScuK4tZeM9eEz0FFBkAd+d3PlL Awa2ErcZwGLYMSxSN7qhB2+Kdh9y+DNqqHeCBOFfqgtEjKQVfvTrZMPnkQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB/xzpriVjECv46nKongYVLvcFiyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2FiMTEy ZC00MGUxLTQxZDQtYTcyNC1hNzYyOTllODU1OWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvYWIxMTJk LTQwZTEtNDFkNC1hNzI0LWE3NjI5OWU4NTU5Zi8xL0hfSE9tdUpXTVFLX2pxY3Fp ZUJoVXU5d1dMSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuZBiMA0EAgACMAcDBQAqE66AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLdDANBgkqhkiG9w0BAQsFAAOCAQEAb0uPi4fYkIiU vRmcjkl69q+Gqr4Zb1WhTA+F/pwd1WIj//j48PTGmGP+eJqUb2bO7WY1k9TliRs5 HYqhV8jBM2JTC+Wo83ywjpXcqkxqnXD6II5kuJkMXLNtnClRvKokxTz+CRIMgclM rotoCZTzV2/hSZgTUGjRemYJZgfBp9/hXHFr4vBn86PSKSmJK02tJmS8MfOd0z3s LoV1WL9F8Wx6CrVRisTGkXHusE0uBn7CVX7zKhol+hb4slbt98sOtDtkCPio6H9c CVKVuxbQ7ru2fs3+Mcg/9rHybX8qwYraDKzR/NvYu1OT8g1XBMnPpkAoz8+Y2/JH d0tktVOBIA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:53 2026 by rpki-client