This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer (raw, json) Hash identifier: hs4TlChwsc6nmjKx64cwmBgLTL5r+nH6oEbxfRcxM+M= Subject key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775932B7852A8A0262A2C8A56FEB0631 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50876 IP: 193.202.123.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:32:b7:85:2a:8a:02:62:a2:c8:a5:6f:eb:06:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:62:41:cd:85:59:86:f2:72:c1:18:2e:00: a0:ce:61:fe:77:7a:4c:61:a9:e9:b9:c3:45:35:a2: 67:c7:20:a7:46:c3:81:13:80:29:33:78:d9:1b:fc: 04:01:2a:0e:e3:bf:92:81:7e:19:6b:ef:60:d0:8e: 7b:7d:94:4b:64:c4:12:cb:8e:58:ca:1b:7e:95:5c: 3b:5a:70:c2:cb:69:1e:c6:39:1e:07:b0:73:6d:90: 20:67:51:47:b6:65:20:0a:54:aa:bb:ed:58:15:fd: 19:ec:c1:44:9f:94:d7:9f:ce:b8:c1:ff:44:05:a9: d3:f3:9e:07:a8:d9:18:b0:e8:4c:ea:96:02:54:c0: 41:49:32:0a:e2:c0:a4:b8:27:49:d0:f1:c4:1f:10: a8:27:87:39:2d:44:cb:2d:4b:be:86:e9:98:17:06: ac:1a:4b:7b:c0:64:3c:7e:79:28:3f:17:00:82:8e: 5e:f8:c4:4a:cc:50:24:a2:61:3d:47:02:9e:e1:ef: 7d:f0:89:1c:2d:70:bd:75:8d:56:0d:6b:68:32:9d: 32:1a:a7:98:a8:d7:67:82:22:82:c0:c8:83:37:8b: 70:52:1e:16:d6:5a:fa:49:b6:67:3d:f9:28:d8:d4: f2:34:3f:48:43:1c:ff:2a:b2:2c:92:eb:9f:8b:a4: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.123.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50876 Signature Algorithm: sha256WithRSAEncryption 90:97:bd:10:d4:b3:86:17:7e:9b:e4:76:47:f9:80:e4:19:02: 64:06:b6:5e:c4:2d:25:dc:db:44:74:44:b3:8d:32:fe:c2:ec: fd:da:24:77:2a:1e:d9:d1:ab:0a:32:c4:5b:1f:e6:4e:87:51: f2:77:11:8c:b3:d3:82:42:e3:e0:4e:45:72:29:a7:80:6c:84: 1f:21:ec:f4:cb:0f:26:6d:08:5f:6d:0e:d8:05:56:74:5c:f9: f4:64:db:14:c8:c8:2d:0f:7b:72:93:83:65:39:d1:f9:41:b5: 83:99:67:9c:f2:60:9e:3d:15:2b:9c:a7:9f:dc:12:92:34:98: c3:84:3e:78:2d:8b:07:30:65:05:c0:d8:ed:7b:85:e9:71:d9: 4b:0a:7f:80:01:d9:fe:5e:2d:25:02:4e:9d:dc:59:05:6d:36: 38:6b:66:fc:74:d5:e1:86:c3:03:9b:46:46:4b:39:ad:01:04: 57:4c:af:67:2a:f4:92:2a:01:ff:50:12:36:6a:b7:60:af:40: bb:51:ed:d7:5b:80:50:d7:65:ff:d0:d6:cd:45:98:62:ea:86: 54:15:5a:8e:92:95:8c:99:d1:1c:5f:fe:66:71:4c:a2:f4:95: 00:b2:fb:ac:ed:3f:6a:eb:44:02:a2:25:3e:0d:f8:41:6a:fd: 95:63:9d:be -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WTK3hSqKAmKiyKVv6wYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGRkMTVlZjJmNTlhYmI5NWYyZDliZTVjZWUzMzAzODg4NjIzYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7BiQc2FWYbycsEYLgCgzmH+d3pM YanpucNFNaJnxyCnRsOBE4ApM3jZG/wEASoO47+SgX4Za+9g0I57fZRLZMQSy45Y yht+lVw7WnDCy2kexjkeB7BzbZAgZ1FHtmUgClSqu+1YFf0Z7MFEn5TXn864wf9E BanT854HqNkYsOhM6pYCVMBBSTIK4sCkuCdJ0PHEHxCoJ4c5LUTLLUu+humYFwas Gkt7wGQ8fnkoPxcAgo5e+MRKzFAkomE9RwKe4e998IkcLXC9dY1WDWtoMp0yGqeY qNdngiKCwMiDN4twUh4W1lr6SbZnPfko2NTyND9IQxz/KrIskuufi6QFMQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFB3dFe8vWau5Xy2b5c7jMDiIYjuXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzBhZmE4 OC1iNTI2LTQ3NjMtOTUyOC04YjYwZTRiOTRiY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMGFmYTg4 LWI1MjYtNDc2My05NTI4LThiNjBlNGI5NGJjZi8xL0hkMFY3eTlacTdsZkxadmx6 dU13T0loaU81Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcp7MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDGvDANBgkqhkiG9w0BAQsFAAOCAQEAkJe9ENSzhhd+m+R2R/mA5BkCZAa2XsQt JdzbRHREs40y/sLs/dokdyoe2dGrCjLEWx/mTodR8ncRjLPTgkLj4E5FcimngGyE HyHs9MsPJm0IX20O2AVWdFz59GTbFMjILQ97cpODZTnR+UG1g5lnnPJgnj0VK5yn n9wSkjSYw4Q+eC2LBzBlBcDY7XuF6XHZSwp/gAHZ/l4tJQJOndxZBW02OGtm/HTV 4YbDA5tGRks5rQEEV0yvZyr0kioB/1ASNmq3YK9Au1Ht11uAUNdl/9DWzUWYYuqG VBVajpKVjJnRHF/+ZnFMovSVALL7rO0/autEAqIlPg34QWr9lWOdvg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:31 2026 by rpki-client