This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer File: HyAOBxBBRee6mHap0-55Kgc2TTY.cer (raw, json) Hash identifier: XvDHS8GVqBDE2aaWvVqAF35MecLIUJye7xQ3FYVoOMo= Subject key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F148A7847CAE2C03AB323AF716CC0AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60614 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:8a:78:47:ca:e2:c0:3a:b3:23:af:71:6c:c0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f200e07104145e7ba9876a9d3ee792a07364d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:38:23:ae:6c:a4:73:8a:37:fa:fd:d2:aa: ed:e1:0f:8a:ae:84:23:c6:e9:04:3e:1c:5e:e9:7a: cf:29:38:8a:02:5e:4a:42:67:95:01:b8:df:2d:12: 1b:a6:2a:46:8b:b6:cd:e3:e0:4a:ca:fa:28:16:b3: 7b:d0:41:36:0d:2a:33:91:5c:98:b7:f7:bc:44:c2: 5c:1b:22:68:2c:ef:47:12:af:cb:58:e7:df:01:85: 12:72:b3:58:50:0a:79:4c:1a:08:9b:80:ea:2e:ce: 16:d9:cc:17:d9:b7:d8:77:5f:66:d2:f0:88:f6:f8: 73:ae:4a:77:21:c5:f7:dc:c4:cf:7e:c8:bc:4e:73: 07:e1:1b:97:30:11:68:29:7e:04:39:71:ca:ec:47: d6:a8:ef:a7:97:10:c1:cd:05:ee:a6:51:1c:b3:ba: da:0c:b2:f5:37:c0:1e:d1:39:a2:37:cc:4b:2c:b6: ad:68:cf:d5:36:0d:89:65:74:bd:e4:4b:97:ed:c2: dd:b8:4a:cc:24:59:32:4e:ee:de:18:71:db:9a:91: 12:b8:a1:e5:1d:40:80:88:d4:05:48:16:51:d9:61: 58:0e:ea:4b:82:cb:12:ab:0d:98:48:9d:c1:6b:48: 8f:26:c3:7d:0a:2e:45:26:98:00:77:cf:53:d7:9c: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 60614 Signature Algorithm: sha256WithRSAEncryption 40:3c:f0:5f:3a:01:95:34:08:a6:0e:a8:a3:0a:b8:8a:b6:b1: 98:4f:bb:a7:18:2a:3e:a0:01:85:ea:ee:ef:25:ee:3c:3c:b2: 03:10:c6:ff:38:a2:11:40:71:10:c2:18:7a:7d:57:3c:71:04: 2f:c8:22:0a:a3:81:d3:69:49:b4:b1:d5:40:4a:e2:62:7d:92: dd:00:02:3d:eb:f3:b2:3e:0b:7f:ad:53:33:1b:cc:36:af:1b: af:23:fb:54:00:64:7d:b9:31:2a:97:66:7d:e2:4a:87:6f:be: 24:f3:9a:63:85:c7:82:39:71:7c:52:e5:c6:d7:9a:fd:8c:cf: 30:0a:4f:af:da:60:83:04:68:8f:2b:b4:74:45:88:51:35:eb: 54:0a:47:b2:30:09:7e:4f:dd:54:76:1b:ad:37:9d:e6:c9:72: c3:1f:30:5e:6f:cf:fc:9f:38:8e:98:2a:d6:dd:4f:36:b0:a4: 5b:67:37:4b:ec:fa:ee:40:c3:47:b4:68:1f:5d:50:47:06:a9: cc:db:0e:5f:44:66:51:b7:4a:2a:76:b8:82:2c:1c:8f:83:b5: 84:f8:eb:17:74:3c:a3:e5:f7:a3:8b:39:d8:20:42:33:38:cc: 74:5a:ff:4a:16:bd:b6:72:0d:08:2a:05:5d:9f:6a:38:82:44: 6d:78:18:4a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FIp4R8riwDqzI69xbMCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjIwMGUwNzEwNDE0NWU3YmE5ODc2YTlkM2VlNzkyYTA3MzY0ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXw4I65spHOKN/r90qrt4Q+KroQj xukEPhxe6XrPKTiKAl5KQmeVAbjfLRIbpipGi7bN4+BKyvooFrN70EE2DSozkVyY t/e8RMJcGyJoLO9HEq/LWOffAYUScrNYUAp5TBoIm4DqLs4W2cwX2bfYd19m0vCI 9vhzrkp3IcX33MTPfsi8TnMH4RuXMBFoKX4EOXHK7EfWqO+nlxDBzQXuplEcs7ra DLL1N8Ae0TmiN8xLLLataM/VNg2JZXS95EuX7cLduErMJFkyTu7eGHHbmpESuKHl HUCAiNQFSBZR2WFYDupLgssSqw2YSJ3Ba0iPJsN9Ci5FJpgAd89T15yedwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFB8gDgcQQUXnuph2qdPueSoHNk02MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzQ2ZGFi Zi05NjI2LTRkMWYtYTg5ZS03NzVhN2VjMWNhMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNDZkYWJm LTk2MjYtNGQxZi1hODllLTc3NWE3ZWMxY2EzMy8xL0h5QU9CeEJCUmVlNm1IYXAw LTU1S2djMlRUWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsxjANBgkqhkiG9w0BAQsFAAOCAQEAQDzwXzoBlTQI pg6oowq4iraxmE+7pxgqPqABheru7yXuPDyyAxDG/ziiEUBxEMIYen1XPHEEL8gi CqOB02lJtLHVQEriYn2S3QACPevzsj4Lf61TMxvMNq8bryP7VABkfbkxKpdmfeJK h2++JPOaY4XHgjlxfFLlxtea/YzPMApPr9pggwRojyu0dEWIUTXrVApHsjAJfk/d VHYbrTed5slywx8wXm/P/J84jpgq1t1PNrCkW2c3S+z67kDDR7RoH11QRwapzNsO X0RmUbdKKna4giwcj4O1hPjrF3Q8o+X3o4s52CBCMzjMdFr/Sha9tnINCCoFXZ9q OIJEbXgYSg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:04 2026 by rpki-client