This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer File: Hms-F_m50MMT0FMCNCUnWydF_IM.cer (raw, json) Hash identifier: NpFb1PbMHowkfKoWDVA0NARDQciqmfse+kqj8aEBiVo= Subject key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77592F6F049AE39E46E539A7AFFC1288 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 160.78.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2f:6f:04:9a:e3:9e:46:e5:39:a7:af:fc:12:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:cc:85:9c:c3:79:70:0a:78:75:f6:af:ce: 03:83:23:2f:79:36:56:83:3b:87:1d:2e:68:f3:2c: 04:33:a6:be:96:a5:ff:ec:87:41:bf:b3:2d:d1:6e: 63:a8:08:4e:51:b9:c2:26:0f:f6:20:c5:b7:c9:4d: 46:ec:5c:98:f0:18:27:15:a8:b3:20:b5:7e:52:fc: f2:ed:d8:c2:9f:0f:84:de:b0:e4:08:2c:85:2a:6c: 40:97:e4:3b:61:0c:ec:b9:66:ac:2a:c0:c3:c0:47: 61:bf:92:69:b1:7c:31:28:d9:9a:51:24:1d:f1:6c: d8:77:7a:12:f6:a8:e6:a6:23:c4:e2:30:93:a5:95: fa:1f:17:ee:ef:af:5d:74:b5:e4:ec:ad:d1:24:e7: 5d:3a:55:17:34:b2:39:39:e5:41:04:69:c6:d6:5d: 75:65:ad:aa:81:b2:3d:f3:35:89:01:85:4d:f1:a2: 46:cc:b7:a9:53:5b:4c:b1:ea:03:50:2d:5e:9d:8f: d9:21:84:19:1c:1e:10:e4:bb:71:65:a5:de:8c:48: 83:64:91:5c:fa:b6:67:bc:22:cc:de:03:36:b3:2c: 5c:61:9f:11:86:9e:79:ba:1e:aa:83:b6:93:70:f1: 39:79:24:43:8f:59:f0:45:c4:5d:c9:fc:3d:21:9e: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.78.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:f9:8c:5c:45:20:41:cb:92:54:4c:12:22:78:f1:2d:f6:f3: 62:88:83:26:1f:43:ba:ed:49:9b:6d:7a:d5:6c:73:a6:9f:bf: b6:8a:88:e6:da:7a:86:40:4b:f9:38:30:df:c8:8b:ec:a0:7d: ba:dc:54:20:52:d8:7e:4f:7c:cc:38:9d:43:7a:90:b1:e2:b0: 36:1d:d9:59:27:d0:43:6b:32:9e:8d:da:17:9b:32:c7:3c:89: b1:cb:2b:70:e0:52:a1:f6:f2:28:c6:0b:01:63:53:c0:92:95: af:a6:44:00:33:49:29:38:d5:9e:a1:b1:99:5e:fc:60:c6:86: 9e:6a:2c:b1:7f:86:3e:80:cb:a6:f4:e7:44:46:b9:57:5a:45: e1:9b:e6:d2:eb:b5:6e:f6:eb:b2:8f:da:cc:9b:bb:c7:c4:4e: 3a:32:78:ed:5a:6e:ca:8c:f2:77:96:f9:f2:0d:3a:9c:3d:42: b2:9b:fa:02:e7:e6:a4:06:2b:5c:9f:ac:fb:84:3f:97:81:b3: d4:71:63:f7:4e:28:dd:52:a4:89:2e:eb:85:c5:f4:22:31:80: d7:78:cf:5e:dc:d9:a6:80:55:1e:41:53:b1:d4:aa:f4:4d:c3: 34:bb:16:4a:2d:86:ef:a9:e8:8d:d3:37:d8:9d:f5:44:1e:b5: 4e:92:4f:5c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt3WS9vBJrjnkblOaev/BKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTZiM2UxN2Y5YjlkMGMzMTNkMDUzMDIzNDI1Mjc1YjI3NDVmYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/fMhZzDeXAKeHX2r84DgyMveTZW gzuHHS5o8ywEM6a+lqX/7IdBv7Mt0W5jqAhOUbnCJg/2IMW3yU1G7FyY8BgnFaiz ILV+Uvzy7djCnw+E3rDkCCyFKmxAl+Q7YQzsuWasKsDDwEdhv5JpsXwxKNmaUSQd 8WzYd3oS9qjmpiPE4jCTpZX6Hxfu769ddLXk7K3RJOddOlUXNLI5OeVBBGnG1l11 Za2qgbI98zWJAYVN8aJGzLepU1tMseoDUC1enY/ZIYQZHB4Q5LtxZaXejEiDZJFc +rZnvCLM3gM2syxcYZ8Rhp55uh6qg7aTcPE5eSRDj1nwRcRdyfw9IZ65IwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFB5rPhf5udDDE9BTAjQlJ1snRfyDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzU2ZDIw MC00MTZkLTQ0MzAtODVjOC04N2QzZTE4MWU1OTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvNTZkMjAw LTQxNmQtNDQzMC04NWM4LTg3ZDNlMTgxZTU5NC8xL0htcy1GX201ME1NVDBGTUNO Q1VuV3lkRl9JTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAoE4wDQYJKoZIhvcNAQELBQADggEBAI/5jFxF IEHLklRMEiJ48S3282KIgyYfQ7rtSZttetVsc6afv7aKiObaeoZAS/k4MN/Ii+yg fbrcVCBS2H5PfMw4nUN6kLHisDYd2Vkn0ENrMp6N2hebMsc8ibHLK3DgUqH28ijG CwFjU8CSla+mRAAzSSk41Z6hsZle/GDGhp5qLLF/hj6Ay6b050RGuVdaReGb5tLr tW7267KP2sybu8fETjoyeO1absqM8neW+fINOpw9QrKb+gLn5qQGK1yfrPuEP5eB s9RxY/dOKN1SpIku64XF9CIxgNd4z17c2aaAVR5BU7HUqvRNwzS7Fkothu+p6I3T N9id9UQetU6ST1w= -----END CERTIFICATE-----Generated at Tue Feb 10 01:20:47 2026 by rpki-client