This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer File: h-ll54gxqIuo-kGUMqnXusnbOKM.cer (raw, json) Hash identifier: OT97hKH/iDA8WWtaJWfP/ozLl0sn4jbz2s/20metJ4I= Subject key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD245C0B7110E691A2CBFB102F39B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210275 AS: 215557 IP: 83.229.65.0/24 IP: 152.114.228.0/22 IP: 176.105.148.0/22 IP: 185.35.78.0/23 IP: 185.169.32.0/22 IP: 217.13.98.0/24 IP: 2a13:2400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d2:45:c0:b7:11:0e:69:1a:2c:bf:b1:02:f3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:cc:51:64:53:4b:10:86:ae:a2:f8:c5:6c: 9b:e9:31:64:6b:d0:f6:15:2f:41:7a:3d:fd:9b:0f: 13:e8:08:c6:14:39:b8:fd:83:0c:e3:9e:46:d1:68: b8:e9:f9:4e:39:d6:ce:8a:c3:b5:97:29:a8:ce:d2: 4f:e7:da:c1:38:94:d5:e2:39:b5:ee:c7:19:02:d4: bb:b8:b4:6d:0d:1d:e3:3a:e5:ae:da:ea:3d:a7:4c: 49:42:ea:27:8e:81:4d:36:0c:b6:86:ed:e4:1c:48: 79:d5:db:4b:1f:a7:b9:7c:9f:b4:25:3b:32:29:d7: dc:7a:96:b8:37:e4:87:f5:26:44:3d:5d:c0:ff:df: b0:85:ef:b3:88:e1:a5:61:ad:f0:9c:16:8f:ca:07: 14:de:29:97:aa:3b:5c:58:7e:1a:66:f0:92:0a:9b: 03:e8:95:2e:5f:f6:75:74:d4:fd:d1:aa:87:67:40: 00:a1:03:f1:5a:ab:c1:9b:ae:0c:54:0b:40:41:a8: 47:85:95:c6:b1:65:d6:72:da:ae:93:88:24:38:0d: 6a:f4:50:ea:9f:53:7c:83:47:95:dd:6e:88:fb:d2: 4d:1f:f1:c2:4d:5c:af:6e:fd:f8:ea:d2:b5:e0:b6: ac:b3:f0:44:0f:d7:e5:ee:8d:ff:b5:c5:fa:52:e1: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.229.65.0/24 152.114.228.0/22 176.105.148.0/22 185.35.78.0/23 185.169.32.0/22 217.13.98.0/24 IPv6: 2a13:2400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210275 215557 Signature Algorithm: sha256WithRSAEncryption 77:e6:5b:b0:74:31:24:34:b4:1b:8b:fb:c1:7b:ee:a3:46:ef: 35:9f:79:c0:54:38:00:be:e1:03:3a:76:64:1d:c9:23:a4:2b: 04:b8:2e:5c:53:3c:ba:e7:37:a9:22:10:cd:56:e3:a9:c2:b7: 36:a3:7a:2b:96:cf:e7:22:bd:c9:bc:73:6c:04:57:e1:5a:f9: 33:99:c6:f7:ef:32:d0:72:16:51:94:61:2b:2e:6a:01:d2:aa: db:c7:a1:e3:52:ab:33:56:6c:dd:1a:82:4f:4d:7d:5c:de:47: c5:01:2d:42:4c:a3:76:87:f5:74:ca:c2:51:c7:a2:15:89:7e: 01:19:ad:80:6a:78:12:61:64:51:b8:18:29:89:e6:fb:7a:bd: b8:95:0d:c6:69:38:17:88:40:e7:58:98:54:3c:59:6e:98:a7: e1:11:46:d3:c6:fb:2e:a4:12:ac:0a:1b:50:b8:20:c9:5a:bd: e9:90:38:fb:6e:c5:3a:cf:3c:35:06:87:2c:93:a4:c7:9c:51: 7d:9f:99:f1:2f:1c:99:b0:1b:1e:4f:d7:f1:fc:a0:e6:6f:9a: 7c:6b:83:94:b7:a7:59:16:ce:eb:f7:40:03:15:bb:19:45:3c: 12:e7:7f:4d:33:9e:0f:8a:b2:29:71:b8:04:79:2d:11:a3:9c: 29:12:f3:81 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt6WtJFwLcRDmkaLL+xAvObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2U5NjVlNzg4MzFhODhiYThmYTQxOTQzMmE5ZDdiYWM5ZGIzOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeDMUWRTSxCGrqL4xWyb6TFka9D2 FS9Bej39mw8T6AjGFDm4/YMM455G0Wi46flOOdbOisO1lymoztJP59rBOJTV4jm1 7scZAtS7uLRtDR3jOuWu2uo9p0xJQuonjoFNNgy2hu3kHEh51dtLH6e5fJ+0JTsy Kdfcepa4N+SH9SZEPV3A/9+whe+ziOGlYa3wnBaPygcU3imXqjtcWH4aZvCSCpsD 6JUuX/Z1dNT90aqHZ0AAoQPxWqvBm64MVAtAQahHhZXGsWXWctquk4gkOA1q9FDq n1N8g0eV3W6I+9JNH/HCTVyvbv346tK14Lass/BED9fl7o3/tcX6UuGdfQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFIfpZeeIMaiLqPpBlDKp17rJ2zijMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzA1MDUz My1hNTdlLTRhOGItYmYwZC1jZWUzYjQ5MjkwMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMDUwNTMz LWE1N2UtNGE4Yi1iZjBkLWNlZTNiNDkyOTAyZS8xL2gtbGw1NGd4cUl1by1rR1VN cW5YdXNuYk9LTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAU+VBAwQCmHLkAwQCsGmUAwQBuSNOAwQCuakg AwQA2Q1iMA0EAgACMAcDBQMqEyQAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwM1 YwIDA0oFMA0GCSqGSIb3DQEBCwUAA4IBAQB35luwdDEkNLQbi/vBe+6jRu81n3nA VDgAvuEDOnZkHckjpCsEuC5cUzy65zepIhDNVuOpwrc2o3orls/nIr3JvHNsBFfh Wvkzmcb37zLQchZRlGErLmoB0qrbx6HjUqszVmzdGoJPTX1c3kfFAS1CTKN2h/V0 ysJRx6IViX4BGa2AangSYWRRuBgpieb7er24lQ3GaTgXiEDnWJhUPFlumKfhEUbT xvsupBKsChtQuCDJWr3pkDj7bsU6zzw1Bocsk6THnFF9n5nxLxyZsBseT9fx/KDm b5p8a4OUt6dZFs7r90ADFbsZRTwS539NM54PirIpcbgEeS0Ro5wpEvOB -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:50 2026 by rpki-client