This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer (raw, json) Hash identifier: FZky56p5v/lLawArL4kBtKSWMPH+SKnt4XbPemxauPs= Subject key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6BE040561398EE357691D1BD2A0C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209803 IP: 193.32.156.0/22 IP: 2a09:880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:be:04:05:61:39:8e:e3:57:69:1d:1b:d2:a0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:29:9a:98:10:28:79:21:2f:47:92:d4:b4:b3: 01:15:88:6e:24:33:e9:b6:88:a5:f9:9d:ea:1c:84: ef:d5:93:c4:71:90:da:eb:0a:18:72:7e:79:2f:57: 8a:f6:2e:30:26:7e:96:ff:f8:64:ce:ba:db:b6:63: 44:54:f9:30:d0:b3:71:c6:45:e4:12:da:60:5b:b9: 47:7e:f5:49:c0:3c:af:4c:3a:8a:11:30:ae:2d:d6: a6:f4:77:8f:1c:12:4e:ef:76:80:cf:da:b5:0c:e3: cc:cb:c3:f1:40:27:26:dd:98:80:8c:cf:6e:2d:b5: f3:c5:ae:5e:4d:49:34:56:47:c1:99:38:a5:d6:a8: 1e:11:cd:78:78:bd:62:58:52:d8:ca:71:43:18:f0: de:dd:c2:4a:d6:47:86:70:be:45:a2:02:c4:93:71: 03:29:1c:bf:e5:84:78:cb:f5:ea:49:8d:69:11:2c: ad:4a:a7:94:a8:54:fe:4b:7d:53:a4:3a:0f:7a:e5: 01:63:80:88:e9:72:64:08:a8:19:40:ea:a1:53:a9: 95:5c:2d:d8:04:79:4c:fb:2d:6d:e5:c2:51:18:14: ae:e1:9b:a9:38:3b:1b:bf:49:81:09:48:fe:7d:5d: 5b:83:68:24:f5:48:36:38:10:70:be:c0:47:81:06: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.156.0/22 IPv6: 2a09:880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209803 Signature Algorithm: sha256WithRSAEncryption 61:48:50:99:4d:04:db:a6:46:56:6d:0b:47:05:19:a5:7a:46: 10:fb:a9:d3:58:f0:86:6f:9f:6b:8d:b4:12:b4:ee:a9:52:3e: 84:71:1c:e3:66:b2:8c:fe:5f:60:0c:aa:df:b9:63:68:45:fb: 79:3c:39:df:c2:52:27:0c:fd:d3:29:b2:a0:d7:2e:53:78:b7: 33:d1:fa:49:c9:cc:25:8e:07:0b:93:b2:db:db:0f:5c:9b:f3: b9:92:47:bf:e0:28:34:4b:ad:0f:b9:9c:db:dd:ee:7b:26:c0: 96:62:2d:d5:d2:2f:32:88:d6:d0:8b:1d:53:2e:fe:0d:60:a0: 18:b3:a0:c7:03:34:32:0d:b7:c2:e1:73:3c:6a:ea:ab:5e:ba: 69:53:5e:19:bc:34:e6:06:c3:d7:8d:6a:f1:79:14:13:53:5d: 30:c9:02:b8:f7:05:54:c5:80:ae:de:2f:81:18:06:c9:71:88: d3:27:e3:55:f0:c4:2f:72:f5:33:ae:87:95:a5:52:58:e7:09: fe:2e:0d:1f:7e:2a:27:f0:eb:ba:b1:90:e8:8c:7d:7d:cb:fa: dd:ad:a1:d4:9f:96:93:7d:f4:9c:85:ff:35:c1:27:50:89:ab: 20:24:4b:5f:33:92:4b:80:7a:79:c5:ea:0e:b1:65:af:f8:73: 1b:c5:bd:42 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xr4EBWE5juNXaR0b0qDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGQ5YTk0Njc5ZWM5YWIzM2U2NWUwNjljOWFhNDQwZGIyNzNlMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiimamBAoeSEvR5LUtLMBFYhuJDPp toil+Z3qHITv1ZPEcZDa6woYcn55L1eK9i4wJn6W//hkzrrbtmNEVPkw0LNxxkXk EtpgW7lHfvVJwDyvTDqKETCuLdam9HePHBJO73aAz9q1DOPMy8PxQCcm3ZiAjM9u LbXzxa5eTUk0VkfBmTil1qgeEc14eL1iWFLYynFDGPDe3cJK1keGcL5FogLEk3ED KRy/5YR4y/XqSY1pESytSqeUqFT+S31TpDoPeuUBY4CI6XJkCKgZQOqhU6mVXC3Y BHlM+y1t5cJRGBSu4ZupODsbv0mBCUj+fV1bg2gk9Ug2OBBwvsBHgQbi6wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB3ZqUZ57JqzPmXgacmqRA2yc+FOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2EzYjli OS0yMTdjLTQxYzktOTQ3Ni0yN2RkMGFkMmFkZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYTNiOWI5 LTIxN2MtNDFjOS05NDc2LTI3ZGQwYWQyYWRmMy8xL0hkbXBSbm5zbXJNLVplQnB5 YXBFRGJKejRVNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwSCcMA0EAgACMAcDBQMqCQiAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMzizANBgkqhkiG9w0BAQsFAAOCAQEAYUhQmU0E26ZG Vm0LRwUZpXpGEPup01jwhm+fa420ErTuqVI+hHEc42ayjP5fYAyq37ljaEX7eTw5 38JSJwz90ymyoNcuU3i3M9H6ScnMJY4HC5Oy29sPXJvzuZJHv+AoNEutD7mc293u eybAlmIt1dIvMojW0IsdUy7+DWCgGLOgxwM0Mg23wuFzPGrqq166aVNeGbw05gbD 141q8XkUE1NdMMkCuPcFVMWArt4vgRgGyXGI0yfjVfDEL3L1M66HlaVSWOcJ/i4N H34qJ/DrurGQ6Ix9fcv63a2h1J+Wk330nIX/NcEnUImrICRLXzOSS4B6ecXqDrFl r/hzG8W9Qg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:02 2026 by rpki-client