This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer File: _hEX6Xaz4zlTuTYbtLseui9Ane0.cer (raw, json) Hash identifier: uQzaFgyez+GPZrjrY/q/ox3r66muDgH3gPGbRizwtvY= Subject key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FFD07FF59C7BBBE5C8E1B20358D9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197897 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fd:07:ff:59:c7:bb:be:5c:8e:1b:20:35:8d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:8b:68:fb:e1:eb:1f:c2:a1:99:11:4b:14: 7c:db:d3:80:f0:93:8c:cd:76:f9:aa:d8:bc:63:7f: fb:be:61:fe:1c:d9:a4:44:dc:7b:1c:c3:23:57:ac: 06:86:5c:7e:37:9c:e5:19:15:63:53:4b:b3:d2:b9: 31:b3:de:4c:f3:3b:4f:20:62:06:b5:91:bf:91:cc: 1b:e5:fd:c5:bd:05:31:2b:27:90:a9:7f:43:e7:6e: 6b:37:39:3e:a1:9e:25:6e:19:5a:26:d5:a8:60:0f: 7e:60:d4:55:ab:75:14:48:c0:4a:ab:8d:f6:93:41: 35:e6:3b:28:5a:fa:42:d2:81:3a:f9:11:c0:6b:72: ee:29:b8:6b:37:bc:36:49:c1:de:22:4c:0f:b6:59: 9a:4b:7a:df:cf:75:f2:f2:a9:4b:c7:a8:dd:8c:0e: a6:a7:5c:75:10:ee:d7:83:5c:96:c2:71:72:73:e3: bb:17:f9:21:41:39:1f:ea:8f:2c:f9:e2:d8:fc:9f: 51:9f:fb:4c:49:91:c6:d3:84:30:77:38:fc:b0:a1: ea:ef:94:5f:af:ed:8d:98:54:e2:a5:f3:0a:f8:c4: b1:51:ae:31:79:84:1b:90:04:49:53:22:ec:f5:21: 8a:86:d2:2a:59:d1:d5:91:91:d3:55:f2:a6:17:c6: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197897 Signature Algorithm: sha256WithRSAEncryption 71:09:e1:e6:55:d3:70:77:0c:53:f5:f8:00:24:27:da:32:36: ba:05:c8:93:de:f2:05:a6:c4:74:f9:07:65:33:28:f1:a5:ef: f0:63:33:d9:6a:ff:67:39:d4:b7:40:81:c0:ed:1c:2b:40:63: 54:f8:15:b7:57:94:c8:1b:8c:b2:44:af:7d:87:db:1e:8f:ee: 06:35:07:40:06:05:d8:e1:ca:e0:32:b4:d9:82:e0:8d:f7:31: 16:4b:d3:f5:3a:c9:ae:a6:26:32:ab:c4:1d:25:3f:f7:05:6a: e8:b8:46:cd:2f:63:63:a1:0a:da:c3:91:8b:db:22:58:ee:48: 42:ca:cc:1f:e7:5b:53:7d:3e:17:62:31:7c:d9:d8:f6:09:d2: 5f:d9:be:31:e8:08:16:db:25:39:4e:11:4e:2a:82:5b:bd:15: 9f:ab:3b:53:eb:1f:71:b5:06:42:51:a7:ba:b5:47:81:02:f3: fa:32:16:73:82:89:81:3d:69:ee:bb:fb:8b:cd:96:a4:cd:5b: 76:c1:c4:23:94:2b:0a:70:27:e0:3f:d4:38:dc:0d:26:c9:af: 1b:fd:20:09:23:cd:b8:33:cc:77:7a:b9:f7:7a:eb:9e:04:c3: 11:92:68:a7:cc:f8:ac:a1:d1:da:bf:e6:da:68:41:59:08:32: 62:78:85:c0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8f/0H/1nHu75cjhsgNY2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTExMTdlOTc2YjNlMzM5NTNiOTM2MWJiNGJiMWViYTJmNDA5ZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CCLaPvh6x/CoZkRSxR829OA8JOM zXb5qti8Y3/7vmH+HNmkRNx7HMMjV6wGhlx+N5zlGRVjU0uz0rkxs95M8ztPIGIG tZG/kcwb5f3FvQUxKyeQqX9D525rNzk+oZ4lbhlaJtWoYA9+YNRVq3UUSMBKq432 k0E15jsoWvpC0oE6+RHAa3LuKbhrN7w2ScHeIkwPtlmaS3rfz3Xy8qlLx6jdjA6m p1x1EO7Xg1yWwnFyc+O7F/khQTkf6o8s+eLY/J9Rn/tMSZHG04Qwdzj8sKHq75Rf r+2NmFTipfMK+MSxUa4xeYQbkARJUyLs9SGKhtIqWdHVkZHTVfKmF8avswIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFP4RF+l2s+M5U7k2G7S7HrovQJ3tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2NjZmI2 NC0yZWM5LTRkODYtYWFjZS04NDZlMWY0MWZjNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvY2NmYjY0 LTJlYzktNGQ4Ni1hYWNlLTg0NmUxZjQxZmM2Mi8xL19oRVg2WGF6NHpsVHVUWWJ0 THNldWk5QW5lMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMFCTANBgkqhkiG9w0BAQsFAAOCAQEAcQnh5lXTcHcM U/X4ACQn2jI2ugXIk97yBabEdPkHZTMo8aXv8GMz2Wr/ZznUt0CBwO0cK0BjVPgV t1eUyBuMskSvfYfbHo/uBjUHQAYF2OHK4DK02YLgjfcxFkvT9TrJrqYmMqvEHSU/ 9wVq6LhGzS9jY6EK2sORi9siWO5IQsrMH+dbU30+F2IxfNnY9gnSX9m+MegIFtsl OU4RTiqCW70Vn6s7U+sfcbUGQlGnurVHgQLz+jIWc4KJgT1p7rv7i82WpM1bdsHE I5QrCnAn4D/UONwNJsmvG/0gCSPNuDPMd3q593rrngTDEZJop8z4rKHR2r/m2mhB WQgyYniFwA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:26 2026 by rpki-client