This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer File: HgilntmPWaDqDmxDecMPW9XyCCE.cer (raw, json) Hash identifier: MmFRdYNH/ZZJYzmDTmw4gMUQ0uNWAe7y5wKR07sWZAk= Subject key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E7BF2C66ED9C1BD041EF84EC54506 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.169.26.0/23 IP: 193.169.92.0/23 IP: 2a0f:d680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7b:f2:c6:6e:d9:c1:bd:04:1e:f8:4e:c5:45:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:1b:97:cd:31:3e:b1:37:e6:0b:1b:75:ed: dd:7a:5a:c7:b9:26:e9:24:f1:7a:ef:28:a9:46:f4: 03:c7:84:ba:71:3f:c4:48:37:a6:95:36:2d:34:f7: fd:d4:39:a1:22:70:a8:c9:8f:00:5f:b3:c1:27:18: fc:68:3b:4f:81:64:18:87:f9:c1:b8:0b:00:04:23: d6:38:1d:fc:9b:5b:ed:36:63:14:3a:0e:c0:0d:33: 43:00:4c:33:f7:20:21:d6:88:fd:f6:35:59:12:15: fb:2e:1a:6e:6a:85:41:c3:8c:8f:23:3d:54:f5:98: 46:42:a3:ba:fa:6f:e9:7f:4c:4b:57:79:ab:4d:a8: b6:53:71:83:a2:7d:2e:a5:a2:fe:cd:b3:ea:f7:1b: 46:61:57:c3:7d:c8:c1:ba:85:6b:ee:7d:a2:39:53: 45:84:66:ad:eb:29:e5:24:f7:d2:28:c2:e2:86:ff: 4b:3e:93:d7:35:64:0c:85:0a:6f:c4:7b:4f:3a:5f: fe:03:80:a3:7b:96:48:4e:fb:2b:be:54:be:e9:a7: fc:b0:ea:a9:aa:f4:c9:8c:b0:16:0e:fc:22:52:76: 14:3a:25:9d:cd:46:00:ea:7b:7c:f3:aa:8d:98:8d: f6:df:56:7d:ec:2e:17:77:e8:e8:7e:15:6f:6b:b6: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.26.0/23 193.169.92.0/23 IPv6: 2a0f:d680::/29 Signature Algorithm: sha256WithRSAEncryption 8f:93:c3:56:44:b0:7c:c6:34:fe:1e:03:b7:b4:42:b4:9a:7c: d0:77:4a:ca:47:99:c1:de:cb:34:61:2b:e3:7e:7e:1f:90:7c: b8:ce:e5:bc:1c:de:3a:92:ae:12:5b:ba:0e:d0:52:b3:94:01: 91:49:a5:4b:99:20:e3:8e:3c:9b:33:12:de:0f:c6:f0:17:6a: c7:d0:96:fb:60:8c:00:83:b1:2b:29:ae:44:64:79:64:3b:14: ed:2b:83:17:a9:da:59:5b:f7:f1:ea:e4:55:58:3f:00:45:fb: 58:ec:c3:9a:2e:6b:0c:fa:4f:e4:df:8e:41:8d:98:27:eb:f2: c2:e2:3c:b3:5c:54:d2:30:44:83:a8:cd:e2:9b:65:ee:86:78: 73:8d:e6:59:5c:40:e2:2f:32:2b:c5:1b:41:70:9a:f5:ac:0b: e2:1b:3d:1b:7a:29:bd:b5:95:c2:0c:ba:ec:b9:3f:d9:e6:71: 99:1c:6f:9e:4a:6b:7c:f7:e2:f7:c5:39:04:7e:8d:14:0b:2b: 40:82:49:48:99:4a:56:b4:0d:8e:18:e4:04:f9:d4:28:b2:02: 09:bd:4e:01:eb:ef:1b:c5:9b:3d:1d:88:9c:ac:51:ea:6b:b6: 48:8d:0c:f4:0e:3e:4c:d2:e0:87:a8:d9:3c:09:3a:d3:55:66: a6:f1:86:f8 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt5fnvyxm7Zwb0EHvhOxUUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTA4YTU5ZWQ5OGY1OWEwZWEwZTZjNDM3OWMzMGY1YmQ1ZjIwODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg0bl80xPrE35gsbde3delrHuSbp JPF67yipRvQDx4S6cT/ESDemlTYtNPf91DmhInCoyY8AX7PBJxj8aDtPgWQYh/nB uAsABCPWOB38m1vtNmMUOg7ADTNDAEwz9yAh1oj99jVZEhX7LhpuaoVBw4yPIz1U 9ZhGQqO6+m/pf0xLV3mrTai2U3GDon0upaL+zbPq9xtGYVfDfcjBuoVr7n2iOVNF hGat6ynlJPfSKMLihv9LPpPXNWQMhQpvxHtPOl/+A4Cje5ZITvsrvlS+6af8sOqp qvTJjLAWDvwiUnYUOiWdzUYA6nt886qNmI3231Z97C4Xd+jofhVva7Y9AwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFB4IpZ7Zj1mg6g5sQ3nDD1vV8gghMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0LzVlMmY0 Yi00MjlmLTQzMjctYjc0Ny0xZjQwNzNiYTQzNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNWUyZjRi LTQyOWYtNDMyNy1iNzQ3LTFmNDA3M2JhNDM2Zi8xL0hnaWxudG1QV2FEcURteERl Y01QVzlYeUNDRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwakaAwQBwalcMA0EAgACMAcDBQMqD9aAMA0G CSqGSIb3DQEBCwUAA4IBAQCPk8NWRLB8xjT+HgO3tEK0mnzQd0rKR5nB3ss0YSvj fn4fkHy4zuW8HN46kq4SW7oO0FKzlAGRSaVLmSDjjjybMxLeD8bwF2rH0Jb7YIwA g7ErKa5EZHlkOxTtK4MXqdpZW/fx6uRVWD8ARftY7MOaLmsM+k/k345BjZgn6/LC 4jyzXFTSMESDqM3im2XuhnhzjeZZXEDiLzIrxRtBcJr1rAviGz0beim9tZXCDLrs uT/Z5nGZHG+eSmt89+L3xTkEfo0UCytAgklImUpWtA2OGOQE+dQosgIJvU4B6+8b xZs9HYicrFHqa7ZIjQz0Dj5M0uCHqNk8CTrTVWam8Yb4 -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:16 2026 by rpki-client