This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer File: HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer (raw, json) Hash identifier: OtAliWISbFoT/hR4ViP8Dt0+5IxMMNqqpecph0T2C2o= Subject key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1F6B469C4B1BD7B9BFD6E87161011 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.119.52.0/22 IP: 2a06:8940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f6:b4:69:c4:b1:bd:7b:9b:fd:6e:87:16:10:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:83:a9:e0:e2:6e:6c:97:79:9c:83:f9:4d: 34:d9:e9:c9:de:32:aa:5e:28:e7:44:cf:e8:74:a5: da:28:09:be:7b:73:0b:e0:84:83:93:ce:f3:62:c4: ec:83:82:cd:51:ab:9f:19:08:69:32:e5:35:ff:f3: b7:4d:4d:43:7a:d9:fa:b8:91:64:67:d1:78:7e:a5: 66:51:b5:7b:61:ea:d1:c2:3c:16:c8:92:26:8d:0a: e8:67:8b:6e:a8:9a:71:54:e9:9e:4c:1f:aa:90:3c: c6:08:7e:13:7f:b1:1b:0a:73:f9:42:cc:e7:45:31: 16:7a:9b:de:ae:0b:ac:e4:9e:48:4c:57:21:f8:20: 5f:dd:a3:3a:cf:40:98:a4:6b:4d:63:75:79:6e:69: cc:32:1d:46:46:e3:2c:42:87:67:c5:61:07:eb:65: f7:21:9e:24:b9:00:05:53:93:5e:67:94:4f:84:00: 15:b1:fa:6a:96:70:ef:cb:bf:e2:fa:cb:4e:4e:25: 47:04:dd:33:47:d7:b5:ca:f7:08:5a:6a:cb:ae:7d: 6e:11:d8:b5:33:eb:99:f4:d0:5e:32:23:8b:5d:ea: 46:36:a2:f8:61:d8:dd:cb:e4:3b:23:07:0b:5c:79: 46:98:98:49:c1:c3:67:e6:33:3a:39:80:25:08:a0: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.52.0/22 IPv6: 2a06:8940::/29 Signature Algorithm: sha256WithRSAEncryption 89:f9:f2:0d:a6:5a:1c:db:ab:ea:44:48:e2:0f:cb:cd:5d:e8: 05:96:d1:bf:eb:6f:d7:2f:10:1c:1a:93:e7:69:c5:59:42:93: 53:49:c8:c7:a2:6c:98:b0:ed:06:6f:ff:19:f9:6d:ee:bf:87: 8e:2a:b7:94:cd:b4:cd:2d:a6:0c:82:7a:a2:04:a7:47:a8:1b: b1:26:78:55:48:f3:bd:02:67:e9:d4:ce:f8:d5:c3:9c:67:59: 36:1d:5e:61:37:c6:f1:34:44:22:01:f6:8d:c4:ad:fd:8e:59: 20:d7:3d:ca:6e:ea:b1:02:17:c6:5f:06:49:34:e8:47:1e:1e: fc:4e:ac:6f:50:d6:ed:b4:e3:3e:0b:54:7f:1a:cc:dc:ea:b0: 80:8d:55:db:45:3b:1e:26:c8:29:a2:9b:c6:84:67:39:77:e8: 15:df:54:bf:f9:7c:e0:71:30:8c:0f:63:d6:a3:96:6a:10:38: 89:86:63:64:45:f2:2e:fd:ff:56:8b:d3:3f:41:16:a5:d2:91: fe:08:88:93:d2:23:3f:53:c4:3e:a6:e6:d7:a1:fb:76:23:4f: c3:18:1e:9f:b8:4b:72:d7:68:19:cc:6f:2e:9a:0f:d9:47:96: 9d:03:f0:b9:dd:3e:39:1b:1b:94:b4:c7:8f:a2:49:f4:bb:6f: 8e:67:5d:48 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/8fa0acSxvXub/W6HFhARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGU1ZGJjMGI2MTA0ODVkMGY3ZTIxOTRkOGY4MTZkNmMxNDQ1MzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPaDqeDibmyXeZyD+U002enJ3jKq XijnRM/odKXaKAm+e3ML4ISDk87zYsTsg4LNUaufGQhpMuU1//O3TU1Detn6uJFk Z9F4fqVmUbV7YerRwjwWyJImjQroZ4tuqJpxVOmeTB+qkDzGCH4Tf7EbCnP5Qszn RTEWepvergus5J5ITFch+CBf3aM6z0CYpGtNY3V5bmnMMh1GRuMsQodnxWEH62X3 IZ4kuQAFU5NeZ5RPhAAVsfpqlnDvy7/i+stOTiVHBN0zR9e1yvcIWmrLrn1uEdi1 M+uZ9NBeMiOLXepGNqL4Ydjdy+Q7IwcLXHlGmJhJwcNn5jM6OYAlCKAmgwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFB3l28C2EEhdD34hlNj4FtbBRFMmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2U3N2I4 My1hMjNiLTQ4OTctYjRkZC02OGVlZGY1ZjY2YmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvZTc3Yjgz LWEyM2ItNDg5Ny1iNGRkLTY4ZWVkZjVmNjZiYy8xL0hlWGJ3TFlRU0YwUGZpR1Uy UGdXMXNGRVV5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXc0MA0EAgACMAcDBQMqBolAMA0GCSqGSIb3 DQEBCwUAA4IBAQCJ+fINploc26vqREjiD8vNXegFltG/62/XLxAcGpPnacVZQpNT ScjHomyYsO0Gb/8Z+W3uv4eOKreUzbTNLaYMgnqiBKdHqBuxJnhVSPO9Amfp1M74 1cOcZ1k2HV5hN8bxNEQiAfaNxK39jlkg1z3KbuqxAhfGXwZJNOhHHh78TqxvUNbt tOM+C1R/Gszc6rCAjVXbRTseJsgpopvGhGc5d+gV31S/+XzgcTCMD2PWo5ZqEDiJ hmNkRfIu/f9Wi9M/QRal0pH+CIiT0iM/U8Q+pubXoft2I0/DGB6fuEty12gZzG8u mg/ZR5adA/C53T45GxuUtMePokn0u2+OZ11I -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:57 2026 by rpki-client