This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer File: Hay9x9yHS9i-Izb1Znzfd72YDHc.cer (raw, json) Hash identifier: PCASOzjARkIPuY9Lqb4ozfT+wQTTNv4TIgrbj8Ok1iQ= Subject key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F155FD5A2CA8CB7FD6B30625777FD4B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199749 IP: 84.39.32.0/19 IP: 185.47.80.0/22 IP: 2a01:8920::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5f:d5:a2:ca:8c:b7:fd:6b:30:62:57:77:fd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:56:30:06:d0:9a:5b:9b:fb:39:58:7d:80: 6d:1b:a1:ab:f9:28:11:13:f9:9e:c8:d1:64:1d:86: 67:02:fc:76:d7:89:3b:83:e7:9d:26:f3:96:12:1d: 72:55:01:76:22:40:ce:39:46:2e:d7:82:bd:40:e3: c2:48:e2:63:a2:62:c8:de:ea:58:22:c9:f2:1e:ab: 28:4b:f9:db:04:00:35:b7:6a:0c:c3:13:5a:06:3c: 54:3f:d5:e4:b0:af:fa:f1:83:55:0a:37:8b:f7:1d: ff:2d:fe:6f:29:46:91:01:34:5b:a0:22:7a:1a:fb: ce:fd:4d:97:f5:e5:48:bf:2c:71:3c:41:ee:95:cf: 09:85:7c:76:25:9b:64:07:58:b8:66:15:ab:75:be: 31:1e:c3:1a:99:14:f5:c3:3a:86:ce:4b:32:01:50: 12:1a:a3:18:a9:39:d8:6f:b9:21:36:cf:1d:62:16: 42:c0:2b:36:d5:eb:fe:6f:45:15:54:f0:14:36:f1: c3:55:e8:75:d0:f9:9e:2a:f5:e1:a5:0b:93:1c:1b: 4d:06:a3:26:60:96:87:63:97:0b:ed:31:09:b9:63: df:f0:29:e9:16:2f:3e:47:f9:70:74:68:98:37:3d: 88:da:6d:d3:d6:d8:49:c5:80:e6:d1:e5:bf:df:90: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.39.32.0/19 185.47.80.0/22 IPv6: 2a01:8920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199749 Signature Algorithm: sha256WithRSAEncryption 8c:ea:30:2c:7c:d1:5a:cf:ab:ca:f9:f7:4d:c1:82:80:e8:35: 86:13:95:ae:e7:d2:33:ed:45:e6:77:eb:4c:e1:3f:3e:29:81: 4c:c4:c6:68:4a:2c:40:82:8d:f2:0c:9e:90:82:03:a5:aa:41: a6:9b:0e:9c:43:52:a7:a1:8b:60:2d:67:f3:32:5d:c1:5d:79: a5:6f:e3:a6:20:21:b4:76:6e:d3:c2:dd:39:5d:a4:eb:d1:42: a7:57:7c:56:b1:8d:fc:09:3b:e6:77:77:df:96:a9:87:67:67: fd:66:70:c5:6b:ed:5a:50:85:69:be:c4:d2:a4:06:9d:e6:db: 31:4e:65:c1:0e:3a:01:77:ba:61:3e:75:fb:d3:cf:37:54:d0: 46:05:e5:5c:cb:b1:00:38:d5:13:bb:b3:1d:b3:4b:73:00:50: aa:9f:64:c1:19:a1:de:a7:99:56:62:df:c1:cf:32:7d:a4:33: db:e6:db:e4:9d:cb:f6:9d:d8:e4:e2:4d:4c:7c:52:4d:77:bb: 47:00:32:f1:ee:70:5c:70:79:4b:1d:f2:78:5a:2e:7e:59:00: da:e9:78:22:95:c4:07:7f:0f:c7:99:76:6d:34:3e:f1:aa:2c: 83:56:00:78:82:bd:a6:ee:b2:37:1a:97:fe:9a:b9:47:bf:7c: 9d:1a:ee:d1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FV/VosqMt/1rMGJXd/1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGFjYmRjN2RjODc0YmQ4YmUyMzM2ZjU2NjdjZGY3N2JkOTgwYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtlWMAbQmlub+zlYfYBtG6Gr+SgR E/meyNFkHYZnAvx214k7g+edJvOWEh1yVQF2IkDOOUYu14K9QOPCSOJjomLI3upY IsnyHqsoS/nbBAA1t2oMwxNaBjxUP9XksK/68YNVCjeL9x3/Lf5vKUaRATRboCJ6 GvvO/U2X9eVIvyxxPEHulc8JhXx2JZtkB1i4ZhWrdb4xHsMamRT1wzqGzksyAVAS GqMYqTnYb7khNs8dYhZCwCs21ev+b0UVVPAUNvHDVeh10PmeKvXhpQuTHBtNBqMm YJaHY5cL7TEJuWPf8CnpFi8+R/lwdGiYNz2I2m3T1thJxYDm0eW/35DKvQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFB2svcfch0vYviM29WZ833e9mAx3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmL2YwNGY4 NS03YjA0LTQ4N2MtYTFlNy1mNzFhMjIxNDVkNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvZjA0Zjg1 LTdiMDQtNDg3Yy1hMWU3LWY3MWEyMjE0NWQ0ZS8xL0hheTl4OXlIUzlpLUl6YjFa bnpmZDcyWURIYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFVCcgAwQCuS9QMA0EAgACMAcDBQAqAYkgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMMRTANBgkqhkiG9w0BAQsFAAOCAQEAjOow LHzRWs+ryvn3TcGCgOg1hhOVrufSM+1F5nfrTOE/PimBTMTGaEosQIKN8gyekIID papBppsOnENSp6GLYC1n8zJdwV15pW/jpiAhtHZu08LdOV2k69FCp1d8VrGN/Ak7 5nd335aph2dn/WZwxWvtWlCFab7E0qQGnebbMU5lwQ46AXe6YT51+9PPN1TQRgXl XMuxADjVE7uzHbNLcwBQqp9kwRmh3qeZVmLfwc8yfaQz2+bb5J3L9p3Y5OJNTHxS TXe7RwAy8e5wXHB5Sx3yeFouflkA2ul4IpXEB38Px5l2bTQ+8aosg1YAeIK9pu6y NxqX/pq5R798nRru0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:39 2026 by rpki-client