This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer File: HhH4prKDtSYE2TKiWJO4ZAQSHos.cer (raw, json) Hash identifier: odTy1dMohW6vpY6hrcCWjHe7T5d1wlNJ5BC5Y6EsHRQ= Subject key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8ACC6D793314716A517A625978853 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.227.44.0/22 IP: 193.111.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ac:c6:d7:93:31:47:16:a5:17:a6:25:97:88:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e11f8a6b283b52604d932a25893b86404121e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:24:9c:f8:9e:20:77:54:a7:d8:d5:52:d8: 62:dd:58:00:c6:78:cb:91:56:a2:80:64:42:06:79: df:c5:96:8a:7e:5d:39:ac:87:84:28:5a:e3:84:ac: c1:2d:7d:bc:e9:e3:ec:cd:51:c9:d7:74:33:af:37: e5:de:d6:fe:1e:40:fc:46:db:8d:fa:a9:e5:e2:23: 78:17:37:43:09:58:10:c4:a1:a5:95:ec:68:de:41: 11:5f:e7:27:2c:f4:73:6d:b6:75:48:b1:14:2b:5b: 8c:d9:38:ef:49:38:57:27:30:8b:d8:a8:7a:f3:7e: 21:f0:d1:03:b9:f3:a3:d7:99:63:e7:d4:5e:e6:5f: 9e:e8:0d:78:96:f4:ba:75:72:cb:c8:37:65:46:68: c6:44:bc:45:0e:61:f5:76:33:1f:ec:3f:20:bd:12: 0a:26:91:56:de:1f:10:2f:29:02:d2:7b:a5:20:8e: ea:4e:d9:02:6a:d1:46:d9:5a:90:fd:1d:46:4a:93: fd:a6:88:45:8a:4e:73:be:e2:93:c3:54:16:be:fc: ff:02:de:23:dc:c6:2b:dd:fd:c3:00:90:a0:7f:5a: f1:8e:b6:ad:98:f2:01:d7:ed:5d:c8:2a:78:43:03: 7b:9d:ef:af:35:68:e1:e3:27:b0:53:6e:fd:27:a7: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.44.0/22 193.111.252.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:bf:d6:2c:9b:5d:1b:2f:88:4a:e0:7a:4d:66:d1:ca:84:b6: 42:49:f3:9c:ad:94:b3:7f:58:38:99:b1:a8:73:de:8f:08:65: a9:f2:a8:ec:76:e1:62:20:61:6b:0d:b8:97:3b:40:39:ad:59: 45:f5:b6:1f:d3:0b:73:bd:71:c4:ce:8a:99:eb:f8:8d:2e:2a: 34:7b:2b:bb:37:9b:a6:30:36:f2:cb:a0:7e:f4:d4:54:6c:c6: c0:1b:0b:61:9d:77:8d:34:50:1c:56:2d:85:66:88:49:72:6b: e0:f3:68:f0:f3:e7:c8:ac:73:28:43:28:11:bb:b8:d6:a1:65: f9:57:db:c7:1f:dd:00:d9:be:57:4a:e8:8e:2e:fa:1c:1d:71: ca:8d:80:09:4d:2c:56:2d:72:2e:71:27:b7:da:e6:77:51:10: 52:2e:70:db:52:f4:11:1a:23:4e:61:78:5f:d6:05:af:fb:b8: 85:31:c7:80:f8:6e:fe:41:b8:b7:5e:17:6b:97:d6:ee:e8:6c: 0d:cd:87:76:18:a3:53:d1:25:16:3f:9f:59:0f:03:d6:91:53: 36:24:ba:59:0b:26:2c:74:6a:38:c5:43:ec:4f:92:6e:7f:f6: ee:fe:d1:b6:ad:74:27:7a:2d:71:33:4f:29:5c:3d:35:8d:fa: a3:3a:2b:a9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6yKzG15MxRxalF6Yll4hTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTExZjhhNmIyODNiNTI2MDRkOTMyYTI1ODkzYjg2NDA0MTIxZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvMknPieIHdUp9jVUthi3VgAxnjL kVaigGRCBnnfxZaKfl05rIeEKFrjhKzBLX286ePszVHJ13Qzrzfl3tb+HkD8RtuN +qnl4iN4FzdDCVgQxKGllexo3kERX+cnLPRzbbZ1SLEUK1uM2TjvSThXJzCL2Kh6 834h8NEDufOj15lj59Re5l+e6A14lvS6dXLLyDdlRmjGRLxFDmH1djMf7D8gvRIK JpFW3h8QLykC0nulII7qTtkCatFG2VqQ/R1GSpP9pohFik5zvuKTw1QWvvz/At4j 3MYr3f3DAJCgf1rxjratmPIB1+1dyCp4QwN7ne+vNWjh4yewU279J6e8EwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFB4R+Kayg7UmBNkyoliTuGQEEh6LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2M5ZWI1 NS1lNTkzLTRjZDctODcxNC0xYTU5MzE5NGM3OTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvYzllYjU1 LWU1OTMtNGNkNy04NzE0LTFhNTkzMTk0Yzc5OC8xL0hoSDRwcktEdFNZRTJUS2lX Sk80WkFRU0hvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW+MsAwQCwW/8MA0GCSqGSIb3DQEBCwUAA4IB AQAqv9Ysm10bL4hK4HpNZtHKhLZCSfOcrZSzf1g4mbGoc96PCGWp8qjsduFiIGFr DbiXO0A5rVlF9bYf0wtzvXHEzoqZ6/iNLio0eyu7N5umMDbyy6B+9NRUbMbAGwth nXeNNFAcVi2FZohJcmvg82jw8+fIrHMoQygRu7jWoWX5V9vHH90A2b5XSuiOLvoc HXHKjYAJTSxWLXIucSe32uZ3URBSLnDbUvQRGiNOYXhf1gWv+7iFMceA+G7+Qbi3 Xhdrl9bu6GwNzYd2GKNT0SUWP59ZDwPWkVM2JLpZCyYsdGo4xUPsT5Juf/bu/tG2 rXQnei1xM08pXD01jfqjOiup -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:16 2026 by rpki-client