This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer File: Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer (raw, json) Hash identifier: r//a1EbDBFHeE+FuljYblQUdlJsJbbv9Ykn+6/oCeDU= Subject key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A29E957A35389E22D1392AB8F73EA3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a0d:7180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9e:95:7a:35:38:9e:22:d1:39:2a:b8:f7:3e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:26:2b:f1:f5:3b:5d:6d:b9:39:b5:f8:67: f7:38:94:61:8d:79:6e:14:ac:c7:fa:ca:3e:3e:ed: f9:a3:3f:bd:25:df:b2:1f:91:40:39:71:47:f0:f9: 39:86:dd:af:4d:db:b3:4a:3d:8f:b2:c2:99:7a:1e: e2:42:52:85:ae:8e:1d:ef:ef:4f:5a:2c:ae:53:c0: ef:3d:18:f2:7c:10:ad:a1:ea:c1:e7:1c:6a:44:ff: 0d:6f:5a:b8:9e:64:d9:11:e8:1e:36:db:31:97:65: e6:ee:ea:e0:13:9c:a9:b2:b4:42:43:1b:fd:83:26: b4:f4:9b:39:df:93:89:86:d7:6d:8e:6c:29:1a:d3: 86:c2:40:51:49:07:23:8f:23:25:49:5a:71:a6:fa: ce:b9:5e:95:e6:05:2d:cb:ab:99:e2:09:3d:c4:d6: c5:e3:ba:07:11:7f:0c:32:b6:ee:a1:70:19:62:e7: ff:a5:3b:8f:d2:99:ff:ed:f3:66:96:5a:0b:54:25: 35:c4:19:57:f5:86:76:2f:de:06:ee:3e:f0:4e:60: 23:06:f7:0d:9a:e9:cc:a7:b6:c0:9f:5a:fb:dd:4f: 6f:fc:0a:5a:b0:ee:3b:f0:12:f2:9a:cd:c9:39:3b: 43:95:34:94:91:32:d8:da:5d:37:bc:72:a0:5e:c2: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:7180::/29 Signature Algorithm: sha256WithRSAEncryption 80:b6:fb:1f:b0:e4:84:66:42:9c:b9:95:50:3e:8c:d7:98:5b: 2d:85:f2:b1:1a:2a:da:e5:47:c6:06:c7:33:e5:4a:81:06:17: 60:cd:68:b6:56:16:73:92:48:52:4c:8b:03:1a:54:40:eb:cf: f8:d6:30:9f:6b:57:45:6a:89:f1:ae:a7:a8:0b:4b:03:51:ce: 30:c0:e3:8f:79:5f:62:50:ed:83:29:57:66:60:ed:38:32:74: a8:a5:cf:8a:4f:b5:73:e1:a4:af:27:30:89:dc:d9:00:06:d3: 96:f7:9c:05:5b:5a:fb:14:08:a0:28:19:1e:6e:25:c0:40:0f: d7:31:8d:75:af:28:c1:be:76:c5:01:96:7c:45:75:f3:99:d2: 6d:2a:db:29:18:fa:e5:41:b6:16:77:36:f7:66:cc:a0:76:41: d5:fa:85:f5:b5:df:7e:a7:f1:bb:0c:28:4d:3f:8f:1e:57:a0: 38:15:c9:24:8f:ef:4b:14:30:bc:f6:ae:2f:2f:57:a4:8d:19: b9:10:de:67:38:7d:59:43:7d:2f:81:2e:ff:b1:b8:ee:7e:ac: 9f:a2:c1:ac:b3:e7:43:fc:0a:7d:7d:39:9d:7e:e9:70:0d:0c: 85:5f:1a:6c:68:c6:31:37:7a:b8:1f:a5:c4:32:91:4e:66:9c: c8:21:66:4e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt4op6VejU4niLROSq49z6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWRjM2E5N2YxY2NhZWY3ZjEwODY5OTFjZjdiMTBhNDEwY2UxOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEMmK/H1O11tuTm1+Gf3OJRhjXlu FKzH+so+Pu35oz+9Jd+yH5FAOXFH8Pk5ht2vTduzSj2PssKZeh7iQlKFro4d7+9P WiyuU8DvPRjyfBCtoerB5xxqRP8Nb1q4nmTZEegeNtsxl2Xm7urgE5ypsrRCQxv9 gya09Js535OJhtdtjmwpGtOGwkBRSQcjjyMlSVpxpvrOuV6V5gUty6uZ4gk9xNbF 47oHEX8MMrbuoXAZYuf/pTuP0pn/7fNmlloLVCU1xBlX9YZ2L94G7j7wTmAjBvcN munMp7bAn1r73U9v/ApasO478BLyms3JOTtDlTSUkTLY2l03vHKgXsKUewIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFB7cOpfxzK738Qhpkc97EKQQzhlCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzBkMDcy NC01NWY1LTQ3NTUtOTljMi02MTI2NTFhZTNlYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMGQwNzI0 LTU1ZjUtNDc1NS05OWMyLTYxMjY1MWFlM2ViMy8xL0h0dzZsX0hNcnZmeENHbVJ6 M3NRcEJET0dVSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg1xgDANBgkqhkiG9w0BAQsFAAOCAQEAgLb7 H7DkhGZCnLmVUD6M15hbLYXysRoq2uVHxgbHM+VKgQYXYM1otlYWc5JIUkyLAxpU QOvP+NYwn2tXRWqJ8a6nqAtLA1HOMMDjj3lfYlDtgylXZmDtODJ0qKXPik+1c+Gk rycwidzZAAbTlvecBVta+xQIoCgZHm4lwEAP1zGNda8owb52xQGWfEV185nSbSrb KRj65UG2Fnc292bMoHZB1fqF9bXffqfxuwwoTT+PHlegOBXJJI/vSxQwvPauLy9X pI0ZuRDeZzh9WUN9L4Eu/7G47n6sn6LBrLPnQ/wKfX05nX7pcA0MhV8abGjGMTd6 uB+lxDKRTmacyCFmTg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:21 2026 by rpki-client