This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer File: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer (raw, json) Hash identifier: aJXpzwkORz1D02hLN2BNVOndaVN7rsdPYm2b63KQlHs= Subject key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C758E5CFAFE2ADB4C24F3021AC0974 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57846 IP: 37.130.152.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:58:e5:cf:af:e2:ad:b4:c2:4f:30:21:ac:09:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:2e:e7:a1:f5:fb:e3:57:0d:aa:ce:13:79: b9:b1:aa:86:f7:86:1a:11:ee:2a:11:41:2d:9a:23: 4e:af:c4:b4:58:09:91:ef:3b:a8:56:c4:66:6f:79: 38:2c:50:21:35:8e:0c:7c:c9:65:dd:68:7f:c5:76: e9:6f:68:ea:72:cc:46:fb:45:cc:ea:b2:a5:da:be: c0:dd:f0:33:03:ec:bb:aa:d9:37:7a:7e:c4:71:83: 12:80:33:9e:a0:c3:94:95:ce:29:8e:d0:d2:fb:a0: 98:13:a6:fd:15:0f:db:d1:1b:6c:82:13:3d:2e:37: a5:33:5e:c9:0e:99:55:9a:13:67:21:f8:27:fb:71: 02:a1:d4:f3:96:40:dc:db:ae:20:e4:0b:4c:09:30: 0a:12:01:62:97:5d:0f:99:31:63:55:37:59:3b:9a: 7c:0b:04:71:14:11:49:52:db:a0:28:2a:09:45:45: a2:3d:a0:ea:70:3f:7d:2a:42:f5:a1:55:58:81:1f: 1f:b0:f6:d3:9a:83:15:f5:aa:d0:a3:dc:72:81:ab: 14:c8:ca:9e:7d:ec:0f:d8:e3:cc:55:e8:60:72:b1: 41:14:12:b9:82:6d:b6:85:45:3f:2d:d3:c7:f9:6b: 4a:a7:a1:d6:a3:58:8f:bf:3c:e0:27:ec:f0:a8:12: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.152.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57846 Signature Algorithm: sha256WithRSAEncryption a5:18:39:d8:6d:b7:56:43:18:f3:84:ee:2a:89:44:dc:50:a0: c3:1f:0c:b3:37:65:56:00:3e:bb:3d:92:9d:32:5b:c2:63:a3: 92:95:ef:b4:00:3c:ea:a9:14:41:a7:0b:20:e4:62:cb:69:23: 23:28:18:3c:45:c9:48:34:98:78:93:ab:00:c7:e7:04:97:53: dc:1e:cd:3a:7f:4b:57:ae:22:a9:1c:0f:48:25:37:2e:5a:df: 22:35:48:36:7e:9a:dc:2d:f4:a5:4f:c7:c3:f9:18:d0:de:24: 06:0f:35:75:4a:3c:73:0c:ce:d1:8d:87:18:2d:de:62:73:3a: 7e:29:ba:17:39:e1:d7:e5:c2:22:9a:a0:8f:88:d2:23:16:bb: 4d:a7:05:53:97:ee:f3:1a:cb:90:b6:d6:ea:c3:9e:11:ee:c9: de:52:c4:5d:46:5e:76:85:22:3e:7b:5e:27:11:99:37:9c:e3: 8f:8d:e3:94:a5:99:e3:55:9e:be:28:22:85:54:d8:8c:aa:6b: 4f:e2:d3:5b:ea:52:0b:e2:60:10:f7:05:bf:bf:aa:00:11:17: f1:98:47:7c:23:46:1a:76:42:66:ba:8e:90:a8:08:2a:f0:37: 48:1e:5c:9e:d4:31:00:f4:73:ff:be:ee:ab:81:6b:a7:36:b3: eb:f1:64:a3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3x1jlz6/irbTCTzAhrAl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzdjZmFiMjRmMTVjZDI2MjE3NmFmMGQxY2NkODgxMjdkYmY2MzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaYu56H1++NXDarOE3m5saqG94Ya Ee4qEUEtmiNOr8S0WAmR7zuoVsRmb3k4LFAhNY4MfMll3Wh/xXbpb2jqcsxG+0XM 6rKl2r7A3fAzA+y7qtk3en7EcYMSgDOeoMOUlc4pjtDS+6CYE6b9FQ/b0RtsghM9 LjelM17JDplVmhNnIfgn+3ECodTzlkDc264g5AtMCTAKEgFil10PmTFjVTdZO5p8 CwRxFBFJUtugKCoJRUWiPaDqcD99KkL1oVVYgR8fsPbTmoMV9arQo9xygasUyMqe fewP2OPMVehgcrFBFBK5gm22hUU/LdPH+WtKp6HWo1iPvzzgJ+zwqBKIRwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPx8+rJPFc0mIXavDRzNiBJ9v2M1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4L2FmMmFk Yi1mZjY5LTRiMDQtYTgwNi00NmRkMTIwNWRjZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvYWYyYWRi LWZmNjktNGIwNC1hODA2LTQ2ZGQxMjA1ZGNmZi8xL19IejZzazhWelNZaGRxOE5I TTJJRW4yX1l6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDJYKYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDh9jANBgkqhkiG9w0BAQsFAAOCAQEApRg52G23VkMY84TuKolE3FCgwx8Mszdl VgA+uz2SnTJbwmOjkpXvtAA86qkUQacLIORiy2kjIygYPEXJSDSYeJOrAMfnBJdT 3B7NOn9LV64iqRwPSCU3LlrfIjVINn6a3C30pU/Hw/kY0N4kBg81dUo8cwzO0Y2H GC3eYnM6fim6Fznh1+XCIpqgj4jSIxa7TacFU5fu8xrLkLbW6sOeEe7J3lLEXUZe doUiPnteJxGZN5zjj43jlKWZ41WevigihVTYjKprT+LTW+pSC+JgEPcFv7+qABEX 8ZhHfCNGGnZCZrqOkKgIKvA3SB5cntQxAPRz/77uq4Frpzaz6/Fkow== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:28 2026 by rpki-client