This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer File: Hx3pNv8XhLeClri8S0sDgbKT7RA.cer (raw, json) Hash identifier: rbhtJ5uhiY1Ou4z2cjxAcd6wL8vOsMaclQjjOxZS0yc= Subject key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F157AF3DF925D38A2501842BB7905F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209913 IP: 91.199.186.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7a:f3:df:92:5d:38:a2:50:18:42:bb:79:05:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:92:4d:1e:be:81:45:ad:e2:9e:44:dd:97: 76:98:0d:d8:e4:b8:5d:b7:dc:ec:2a:01:db:e5:45: ea:26:da:cd:85:40:63:82:b5:a0:58:f0:c7:df:7e: 04:68:46:c8:ba:d3:13:9e:8c:75:53:98:71:f7:03: c4:c2:00:62:1c:d5:f2:8f:04:a6:b4:b5:6c:5c:76: fb:af:c8:ba:fb:20:bc:09:27:26:ad:97:4a:48:71: b5:ce:b3:17:7b:f2:56:95:91:c8:48:b4:64:b9:60: 8c:e4:bb:be:4b:90:f0:aa:b8:9d:af:6b:a9:bf:5e: 19:33:f9:37:05:4f:91:90:2e:35:7b:ba:da:6b:f6: b2:5c:b0:1b:54:5b:8e:20:0a:fc:a2:53:71:4a:48: e2:d8:eb:68:94:6c:c8:23:ea:7f:48:0a:dc:90:08: 56:57:5a:51:11:6a:6c:e0:36:3b:93:b1:af:71:db: 38:bb:c9:db:9a:a1:5b:45:5a:00:26:7d:5a:ab:47: fa:c9:5d:79:97:f7:c4:75:c2:6b:64:31:9d:68:70: ba:f2:57:67:b6:e2:69:9e:90:bc:e3:9e:8f:36:c4: 9f:e0:1f:12:a6:15:13:d2:08:08:c7:35:31:a9:38: ea:9c:ec:aa:48:67:2d:95:c2:aa:1e:41:09:37:32: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.186.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209913 Signature Algorithm: sha256WithRSAEncryption 80:03:2e:cf:f8:c5:c4:2b:5f:43:11:5e:07:ec:e6:9c:f7:c3: 15:4e:0d:fa:19:45:b6:32:2f:36:2c:ba:06:b8:21:bf:e3:78: 50:d7:0b:b3:60:f3:33:8b:1e:63:f6:36:1e:39:25:8f:91:90: 89:f0:d5:36:0e:7b:4f:70:18:94:d5:d1:2e:63:40:76:43:54: 55:d8:ae:df:54:ef:df:df:50:b4:1b:b9:07:dd:48:fc:1b:75: fd:ab:c3:ba:5d:28:67:d6:08:0a:ea:3c:98:d5:ab:6a:bc:3a: aa:04:74:d8:3f:e7:a1:c7:96:86:9a:e7:5b:85:48:5d:48:84: e4:ba:99:c3:1b:66:11:9b:8b:70:3f:d9:0c:9b:72:01:10:88: 85:97:b8:1a:3c:52:03:1e:c5:27:9a:4f:e5:89:c6:d1:18:40: 00:ca:21:67:63:6a:c4:6d:c6:25:7e:6f:fc:f4:3e:09:cf:56: 50:ab:9d:aa:d4:4b:30:72:dc:dd:e0:29:77:16:3e:f4:21:b2: d4:b9:4d:39:ed:5d:9b:96:f8:67:20:d0:1e:5c:c0:84:8a:db: c7:41:bd:30:98:06:17:bc:d7:71:b8:c6:27:23:07:d5:64:e8: c9:9a:f3:8a:fe:91:cb:a8:4b:a0:42:20:90:17:34:ad:89:f5: 9d:30:24:0d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FXrz35JdOKJQGEK7eQX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjFkZTkzNmZmMTc4NGI3ODI5NmI4YmM0YjRiMDM4MWIyOTNlZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX+STR6+gUWt4p5E3Zd2mA3Y5Lhd t9zsKgHb5UXqJtrNhUBjgrWgWPDH334EaEbIutMTnox1U5hx9wPEwgBiHNXyjwSm tLVsXHb7r8i6+yC8CScmrZdKSHG1zrMXe/JWlZHISLRkuWCM5Lu+S5Dwqridr2up v14ZM/k3BU+RkC41e7raa/ayXLAbVFuOIAr8olNxSkji2OtolGzII+p/SArckAhW V1pREWps4DY7k7Gvcds4u8nbmqFbRVoAJn1aq0f6yV15l/fEdcJrZDGdaHC68ldn tuJpnpC8456PNsSf4B8SphUT0ggIxzUxqTjqnOyqSGctlcKqHkEJNzKG0wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFB8d6Tb/F4S3gpa4vEtLA4Gyk+0QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2LzQ0OWFl Ni01OTQzLTQ2ZDAtYjAwYy05MjdiODYzNTZmYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvNDQ5YWU2 LTU5NDMtNDZkMC1iMDBjLTkyN2I4NjM1NmZhNy8xL0h4M3BOdjhYaExlQ2xyaThT MHNEZ2JLVDdSQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8e6MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMz+TANBgkqhkiG9w0BAQsFAAOCAQEAgAMuz/jFxCtfQxFeB+zmnPfDFU4N+hlF tjIvNiy6Brghv+N4UNcLs2DzM4seY/Y2Hjklj5GQifDVNg57T3AYlNXRLmNAdkNU Vdiu31Tv399QtBu5B91I/Bt1/avDul0oZ9YICuo8mNWrarw6qgR02D/noceWhprn W4VIXUiE5LqZwxtmEZuLcD/ZDJtyARCIhZe4GjxSAx7FJ5pP5YnG0RhAAMohZ2Nq xG3GJX5v/PQ+Cc9WUKudqtRLMHLc3eApdxY+9CGy1LlNOe1dm5b4ZyDQHlzAhIrb x0G9MJgGF7zXcbjGJyMH1WToyZrziv6Ry6hLoEIgkBc0rYn1nTAkDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:20 2026 by rpki-client