This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer File: HuXdRp9xw40T9Xxil5YiTMAg3BU.cer (raw, json) Hash identifier: oe0LoUzTsHoZIhpnUxjNhm2IE1Nnkt3LBUzXh15ZYe0= Subject key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB5B18595DB679AB6CF86FD8CE905E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57531 IP: 91.232.188.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5b:18:59:5d:b6:79:ab:6c:f8:6f:d8:ce:90:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ee5dd469f71c38d13f57c629796224cc020dc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:e4:7c:9c:a2:47:d5:45:66:f7:0c:73:95: 34:45:13:ac:31:50:3d:0d:66:60:0b:f8:3c:f7:2a: f6:e8:0d:c0:af:88:82:0d:3d:0e:ab:aa:ed:a4:cf: 50:74:e2:1f:59:f2:0e:a5:06:1e:70:ca:d2:82:57: 64:9f:43:d3:1e:db:06:b8:3e:5b:bf:20:c6:e0:e3: 24:71:7e:3b:bf:d3:0e:ec:f8:8c:d8:c6:fb:99:1c: 35:9d:9a:af:7c:9c:bd:46:f8:36:d9:d9:0e:8d:36: 40:2a:37:24:65:ad:ea:e0:dc:fd:ed:64:f2:ee:3d: cc:7d:3e:7e:04:49:51:4f:35:9e:81:00:fd:b9:c7: c2:16:16:27:33:46:3a:4f:f1:7f:2b:46:38:04:1d: 3d:10:aa:85:8b:f4:1c:66:c0:e8:0d:5d:b6:53:c1: c0:6e:dd:13:05:ba:35:67:f4:f4:a1:9c:80:63:46: e9:c7:49:6f:62:fb:5e:bf:6a:b0:17:ea:4a:74:5c: a1:2e:e3:09:d2:c1:b4:1f:ad:1e:9e:f5:cd:97:ed: a7:09:68:20:c2:0a:ac:1d:89:2c:50:43:75:16:e9: e9:43:c8:ae:7a:64:2e:0e:d5:db:67:90:2d:2c:5f: ab:84:13:49:88:15:3b:1f:23:26:bc:cc:7e:c7:ba: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.188.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57531 Signature Algorithm: sha256WithRSAEncryption 37:ee:69:8b:a6:33:71:b3:42:e2:07:28:73:6d:ea:f5:43:cb: 01:0f:7a:67:1f:be:57:34:00:53:e1:64:ab:b8:5a:78:25:21: 8c:21:4a:b9:19:be:00:31:fe:e9:17:d1:e9:6e:bb:2d:f8:90: a3:08:0a:d6:56:2a:2d:81:d3:9a:e8:ed:71:a6:4c:e0:6c:bc: 51:8c:cb:48:5e:01:d1:53:f8:7d:c4:40:57:76:fa:a4:55:90: 0b:ed:56:e3:b2:32:ea:28:8b:2f:30:4c:22:1b:c1:3f:9f:d8: 02:e2:30:9c:f0:c0:f1:94:a9:3b:69:6a:03:49:b3:de:25:aa: 28:6a:12:a4:7c:c7:b0:58:14:46:ea:a2:a6:52:94:16:c2:33: d8:ac:09:38:e7:ee:d0:06:29:32:30:8c:7f:d9:17:7b:60:00: 1e:b2:46:84:e1:a6:07:18:f9:27:7b:bc:0a:09:8a:a8:d5:c1: 76:c9:57:85:b5:48:dc:60:3a:74:76:d4:cc:2a:6e:d4:8c:d4: 0e:28:2d:c1:7c:ff:df:9b:3a:7a:fc:53:fd:72:5b:27:b7:3f: 44:bb:76:ac:7c:77:a3:76:4c:96:5e:4e:a4:5c:13:2b:6b:f3: a4:a3:b2:e9:8e:ec:d2:9d:4d:28:35:7b:d4:cc:be:28:01:52: 2b:27:77:9a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9y1sYWV22eats+G/YzpBeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWU1ZGQ0NjlmNzFjMzhkMTNmNTdjNjI5Nzk2MjI0Y2MwMjBkYzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3rkfJyiR9VFZvcMc5U0RROsMVA9 DWZgC/g89yr26A3Ar4iCDT0Oq6rtpM9QdOIfWfIOpQYecMrSgldkn0PTHtsGuD5b vyDG4OMkcX47v9MO7PiM2Mb7mRw1nZqvfJy9Rvg22dkOjTZAKjckZa3q4Nz97WTy 7j3MfT5+BElRTzWegQD9ucfCFhYnM0Y6T/F/K0Y4BB09EKqFi/QcZsDoDV22U8HA bt0TBbo1Z/T0oZyAY0bpx0lvYvtev2qwF+pKdFyhLuMJ0sG0H60envXNl+2nCWgg wgqsHYksUEN1FunpQ8iuemQuDtXbZ5AtLF+rhBNJiBU7HyMmvMx+x7rvtQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFB7l3UafccONE/V8YpeWIkzAINwVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzI2ZTg5 OC02MTJjLTQ4NWYtYjAyNy1mNDIyNDMwNmJhMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMjZlODk4 LTYxMmMtNDg1Zi1iMDI3LWY0MjI0MzA2YmEzNS8xL0h1WGRScDl4dzQwVDlYeGls NVlpVE1BZzNCVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+i8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDguzANBgkqhkiG9w0BAQsFAAOCAQEAN+5pi6YzcbNC4gcoc23q9UPLAQ96Zx++ VzQAU+Fkq7haeCUhjCFKuRm+ADH+6RfR6W67LfiQowgK1lYqLYHTmujtcaZM4Gy8 UYzLSF4B0VP4fcRAV3b6pFWQC+1W47Iy6iiLLzBMIhvBP5/YAuIwnPDA8ZSpO2lq A0mz3iWqKGoSpHzHsFgURuqiplKUFsIz2KwJOOfu0AYpMjCMf9kXe2AAHrJGhOGm Bxj5J3u8CgmKqNXBdslXhbVI3GA6dHbUzCpu1IzUDigtwXz/35s6evxT/XJbJ7c/ RLt2rHx3o3ZMll5OpFwTK2vzpKOy6Y7s0p1NKDV71My+KAFSKyd3mg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:42 2026 by rpki-client