This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer File: a_HqpcMxvs8ydwGi69zxobtfBww.cer (raw, json) Hash identifier: BtFTkGOXtJoV29c9tUzF4qbLrmEAOP7pM+pSMl1HW7g= Subject key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F139B92E85887E007629CF0573878D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3210 IP: 37.120.128.0/19 IP: 37.120.192.0 -- 37.120.231.255 IP: 37.120.240.0/22 IP: 37.120.248.0/21 IP: 94.176.6.0/23 IP: 2a02:ae40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9b:92:e8:58:87:e0:07:62:9c:f0:57:38:78:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:6e:14:98:5f:6c:2c:e2:6b:61:5b:f4:21: 8e:de:d1:94:ad:18:86:80:b2:a5:40:e3:b0:c4:07: 4c:57:56:69:e2:17:9f:8e:8b:83:b6:85:04:7e:eb: af:77:8c:fe:bf:5c:cc:de:99:2a:88:3a:83:bc:16: 84:30:db:7d:50:74:fe:6b:aa:69:f6:28:8b:62:ef: 64:d9:dc:89:cc:2c:7b:3e:a5:1b:ac:3d:6b:82:a5: ce:85:53:98:77:d9:25:1f:70:13:8b:02:9d:d6:cc: f5:29:43:12:89:97:29:a2:78:e7:37:4a:04:f5:f3: 0b:b5:a6:ac:6d:e1:d8:a1:f5:37:39:12:7e:70:8d: 76:5e:36:a1:2d:33:89:f2:c8:db:66:77:00:d8:93: 09:81:81:a9:dd:1f:74:76:d1:c8:b0:94:1f:fb:88: ce:30:d6:f3:f5:13:58:d6:e4:26:16:3e:69:5e:98: df:00:1c:30:05:b8:61:99:ca:b5:56:83:d8:15:59: 1b:4f:15:f8:c6:10:90:2a:e2:ec:0e:6b:3f:55:01: c4:65:b6:0f:70:88:f5:6c:50:c8:83:a3:55:a2:1c: 66:be:94:28:5e:7c:2e:70:f3:08:f6:39:ac:43:c4: 85:c3:d1:33:07:84:da:bb:2c:cd:d7:07:bc:ae:d7: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.120.128.0/19 37.120.192.0-37.120.231.255 37.120.240.0/22 37.120.248.0/21 94.176.6.0/23 IPv6: 2a02:ae40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3210 Signature Algorithm: sha256WithRSAEncryption 6a:ec:1d:29:a1:08:6e:f1:40:3f:52:71:ee:4f:ce:f9:eb:58: db:26:de:88:61:37:45:71:13:a8:f1:a2:a5:c0:98:a0:07:9e: 88:ff:59:ea:73:1f:ab:8c:ba:45:92:7a:37:ac:a3:3c:62:f6: a3:3e:9b:f3:cd:c0:da:18:b4:41:61:d9:d2:25:b3:38:da:d6: f0:3f:52:ba:c8:04:17:6f:96:4a:62:97:df:88:8e:8a:0d:f3: b1:04:10:f8:47:d3:3f:46:46:44:a1:b6:3b:50:3f:0d:55:5c: 46:bc:9e:a0:3e:de:09:7a:7f:18:a6:44:17:32:29:40:ef:d3: 9c:b2:d6:a9:f3:0c:89:66:b8:93:07:a9:f6:fe:8e:66:a9:c9: 24:ea:ea:77:2e:e7:64:67:39:15:9b:da:6a:eb:cb:8a:b2:00: 9a:02:bc:7a:27:f6:c1:84:7c:e3:29:26:70:1b:d7:29:0d:36: 3d:40:a3:a0:39:f2:87:7d:c6:c0:80:d2:17:c7:7d:3e:7f:d4: 63:66:f1:8d:c4:15:09:a1:f8:97:9a:21:7c:38:27:98:52:c2: 71:78:84:9a:d5:63:e0:9e:8f:e8:d6:b4:10:1b:2c:be:68:a8: 97:62:ff:22:66:ad:9f:08:2f:4a:77:65:a0:fd:65:a0:d4:6c: d2:51:09:b7 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt/E5uS6FiH4AdinPBXOHjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmYxZWFhNWMzMzFiZWNmMzI3NzAxYTJlYmRjZjFhMWJiNWYwNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH9uFJhfbCzia2Fb9CGO3tGUrRiG gLKlQOOwxAdMV1Zp4hefjouDtoUEfuuvd4z+v1zM3pkqiDqDvBaEMNt9UHT+a6pp 9iiLYu9k2dyJzCx7PqUbrD1rgqXOhVOYd9klH3ATiwKd1sz1KUMSiZcponjnN0oE 9fMLtaasbeHYofU3ORJ+cI12XjahLTOJ8sjbZncA2JMJgYGp3R90dtHIsJQf+4jO MNbz9RNY1uQmFj5pXpjfABwwBbhhmcq1VoPYFVkbTxX4xhCQKuLsDms/VQHEZbYP cIj1bFDIg6NVohxmvpQoXnwucPMI9jmsQ8SFw9EzB4TauyzN1we8rteBRwIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFGvx6qXDMb7PMncBouvc8aG7XwcMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzJlNzQx OC1mNjVkLTRmZmUtOGJkZC05NjFlY2MzYTZjZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMmU3NDE4 LWY2NWQtNGZmZS04YmRkLTk2MWVjYzNhNmNkMC8xL2FfSHFwY014dnM4eWR3R2k2 OXp4b2J0ZkJ3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAsBAIAATAmAwQFJXiAMAwDBAYleMADBAMleOADBAIlePADBAMl ePgDBAFesAYwDQQCAAIwBwMFAyoCrkAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC DIowDQYJKoZIhvcNAQELBQADggEBAGrsHSmhCG7xQD9Sce5PzvnrWNsm3ohhN0Vx E6jxoqXAmKAHnoj/WepzH6uMukWSejesozxi9qM+m/PNwNoYtEFh2dIlszja1vA/ UrrIBBdvlkpil9+IjooN87EEEPhH0z9GRkShtjtQPw1VXEa8nqA+3gl6fximRBcy KUDv05yy1qnzDIlmuJMHqfb+jmapySTq6ncu52RnORWb2mrry4qyAJoCvHon9sGE fOMpJnAb1ykNNj1Ao6A58od9xsCA0hfHfT5/1GNm8Y3EFQmh+JeaIXw4J5hSwnF4 hJrVY+Cej+jWtBAbLL5oqJdi/yJmrZ8IL0p3ZaD9ZaDUbNJRCbc= -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:35 2026 by rpki-client