This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer (raw, json) Hash identifier: 2oHyuxkuJhqUdjB6IIJR/jwg7TYNAWhFCeZZEX/E77w= Subject key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AEC36688EE5CCDD5447C1EE421BA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44788 IP: 91.199.242.0/24 IP: 91.212.98.0/24 IP: 178.250.0.0/21 IP: 185.235.84.0/22 IP: 2a02:2638::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ec:36:68:8e:e5:cc:dd:54:47:c1:ee:42:1b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:b3:6f:63:59:13:02:07:a1:7e:d5:65:25: 5f:73:ab:53:40:96:9f:60:06:9b:fa:7c:b1:41:1b: ce:27:72:fe:3c:ba:08:fa:b7:c4:f0:df:ae:9c:1a: 2f:84:dc:fc:e0:9f:97:62:9e:09:b7:9c:d1:0b:6c: e7:1c:09:c4:0c:3d:d0:38:7a:eb:1c:52:07:2b:f4: d8:c5:66:47:56:43:91:83:b0:85:e7:46:40:f6:7f: da:7f:64:eb:1b:ed:36:ac:0b:44:fd:f0:c0:30:e7: 15:a6:77:5d:b0:3b:60:ef:af:30:16:58:76:73:ba: 6a:fd:9c:7a:0f:e1:05:41:53:2e:7e:00:d2:78:eb: 37:76:46:91:8f:8e:eb:61:c1:9b:3b:2c:d6:b9:c3: 05:b3:08:b9:82:3f:20:71:59:13:0b:87:cb:6f:30: ca:be:be:37:3c:64:fd:a3:40:e4:cc:0d:dc:3b:18: 5f:f0:a0:fc:b0:42:ea:27:b1:1a:51:ff:86:85:60: 11:72:3d:5c:d7:0b:e9:fd:b9:cb:c6:03:39:f3:51: bc:27:23:41:53:9f:26:ea:a5:20:2b:d4:01:9c:91: 1c:57:7c:13:37:c0:06:d2:a0:19:06:29:6c:81:c2: 6f:13:81:7e:1a:f8:9e:c3:14:4f:ab:09:0e:47:0f: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.242.0/24 91.212.98.0/24 178.250.0.0/21 185.235.84.0/22 IPv6: 2a02:2638::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44788 Signature Algorithm: sha256WithRSAEncryption 21:94:bf:6d:8e:48:b6:06:5d:3d:b8:c2:8a:1a:12:68:36:b4: 5b:04:e5:4b:cd:96:be:30:f8:e6:84:16:11:7d:79:ac:9d:33: 85:49:02:ed:07:2d:f8:10:dc:b1:b9:a4:49:e2:64:bc:ad:94: c2:e8:16:dd:e3:95:02:87:ea:8c:ed:7a:c8:fc:8f:2a:d9:6a: 03:cd:40:30:d8:41:d1:aa:30:2f:cf:5e:8c:ff:9f:a6:07:25: f8:12:f6:52:f1:00:37:71:a0:89:ce:cc:5e:54:fd:98:8b:5c: 26:59:90:57:e2:5d:c4:d0:26:1a:1b:f1:f5:8e:ad:dd:0c:94: 8a:b1:55:7c:30:dc:d2:8e:7a:35:24:0d:3e:64:b6:bb:e3:3f: 49:41:c3:6a:50:03:88:75:a3:5d:07:32:e1:1b:65:d9:8d:17: fd:f4:9f:0e:4f:c7:1a:e0:5c:aa:6c:0b:9f:01:2a:6d:c2:ca: be:7d:9d:82:14:b2:25:6f:00:48:f5:dd:38:9e:5a:a0:62:96: 6e:6e:b9:86:76:ed:92:c6:96:01:fb:ef:34:2f:59:32:21:ef: 26:40:95:1d:81:a8:b7:74:08:bb:b3:35:35:ba:34:f7:5b:78: 9d:ea:f2:14:2f:e6:e7:b3:e1:a6:b8:6c:ed:d4:93:8e:56:03: 02:cd:63:2e -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt9Wuw2aI7lzN1UR8HuQhuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDcyOGZiMzFjNGViZGZiOWJmMTI5NzQ1YjkxYmQyZTJlZThlZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt+zb2NZEwIHoX7VZSVfc6tTQJaf YAab+nyxQRvOJ3L+PLoI+rfE8N+unBovhNz84J+XYp4Jt5zRC2znHAnEDD3QOHrr HFIHK/TYxWZHVkORg7CF50ZA9n/af2TrG+02rAtE/fDAMOcVpnddsDtg768wFlh2 c7pq/Zx6D+EFQVMufgDSeOs3dkaRj47rYcGbOyzWucMFswi5gj8gcVkTC4fLbzDK vr43PGT9o0DkzA3cOxhf8KD8sELqJ7EaUf+GhWARcj1c1wvp/bnLxgM581G8JyNB U58m6qUgK9QBnJEcV3wTN8AG0qAZBilsgcJvE4F+GviewxRPqwkORw8BzwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFERyj7McTr37m/EpdFuRvS4u6O8xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzNhYzc2 MS05YWQ4LTQ1MTMtOGEzMi0xZjU1ZDk5OTllZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvM2FjNzYx LTlhZDgtNDUxMy04YTMyLTFmNTVkOTk5OWVlYi8xL1JIS1BzeHhPdmZ1YjhTbDBX NUc5TGk3bzd6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAW8fyAwQAW9RiAwQDsvoAAwQCuetUMA0EAgAC MAcDBQAqAiY4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCu9DANBgkqhkiG9w0B AQsFAAOCAQEAIZS/bY5ItgZdPbjCihoSaDa0WwTlS82WvjD45oQWEX15rJ0zhUkC 7Qct+BDcsbmkSeJkvK2UwugW3eOVAofqjO16yPyPKtlqA81AMNhB0aowL89ejP+f pgcl+BL2UvEAN3Ggic7MXlT9mItcJlmQV+JdxNAmGhvx9Y6t3QyUirFVfDDc0o56 NSQNPmS2u+M/SUHDalADiHWjXQcy4Rtl2Y0X/fSfDk/HGuBcqmwLnwEqbcLKvn2d ghSyJW8ASPXdOJ5aoGKWbm65hnbtksaWAfvvNC9ZMiHvJkCVHYGot3QIu7M1Nbo0 91t4neryFC/m57Phprhs7dSTjlYDAs1jLg== -----END CERTIFICATE-----Generated at Mon Jan 26 20:27:31 2026 by rpki-client