This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer (raw, json) Hash identifier: Z6hG7jo6w7Nmn3jlqfHXZdJ9Z4HM0FWb/fZPNIo+N28= Subject key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80CD0EBCC59FBC67866678D7A444FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47819 IP: 91.208.23.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:cd:0e:bc:c5:9f:bc:67:86:66:78:d7:a4:44:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:3d:15:1d:db:12:29:a9:93:c8:9c:95:e1: a7:6b:46:2f:cb:76:b0:3e:b6:17:75:8a:57:93:42: 64:8d:1d:b3:e6:c5:5b:10:4a:c1:bf:d1:60:66:5d: f4:d8:2c:59:c1:22:ad:f5:14:9a:31:33:fc:04:f3: 20:d1:5b:28:22:3a:74:cc:38:a0:38:b3:9a:c4:3a: db:b9:f7:8e:54:16:5e:8a:98:ca:5d:cb:8f:e1:80: 13:16:7a:1a:7c:97:13:11:22:b2:cc:65:7a:b6:1d: d8:ea:a8:57:0f:15:40:dc:37:eb:d6:bd:62:dc:b6: 58:82:52:74:cc:75:4f:57:0c:b6:c6:e3:25:4b:b4: 88:fd:4e:f9:0a:c1:8f:25:db:eb:ea:bb:ff:f6:55: 1b:10:3d:0e:c4:be:9a:f0:ad:d0:d4:4d:7b:44:c8: d9:94:31:f4:f3:14:83:3a:e3:21:9c:7a:cb:a5:11: 2d:e6:78:be:6c:77:fc:ca:09:11:cd:a8:92:06:3a: 17:1e:ca:e6:8a:fa:2a:48:bf:4e:02:db:fc:0c:73: dd:97:6b:9f:38:9c:e2:1a:2b:bb:8b:a5:71:41:c8: 6b:0c:7d:4c:fd:75:bf:c5:b9:b7:a5:f6:65:9d:d8: 36:d8:e6:c6:2b:52:8e:84:7a:f3:26:13:ea:b1:c1: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.23.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47819 Signature Algorithm: sha256WithRSAEncryption a0:f9:07:3a:90:86:73:bb:c7:ce:a5:f9:26:d5:f1:6e:06:15: 1f:f9:b7:e7:01:fd:bd:60:3c:3c:e7:e3:cb:bf:6b:f3:fe:15: 52:89:01:c2:3f:79:cf:c7:5c:1c:4d:6e:8b:91:7f:ee:28:6a: fa:02:77:d1:1e:74:0f:bf:67:35:39:fe:77:c4:03:e8:8b:dc: 7a:68:55:9c:6f:9e:fa:a5:90:2d:62:b0:a8:d5:c8:eb:0c:e9: 53:57:6d:84:87:36:e7:f2:b0:21:5f:26:10:60:79:3d:e4:da: a2:56:55:ee:e8:33:20:87:d4:e2:e2:9b:b2:0c:2e:02:68:73: ff:31:68:18:f1:1f:f1:d0:c4:5f:77:49:ae:ac:42:b9:21:47: 82:9f:20:1c:4b:c7:26:f8:12:d2:3c:0e:77:a9:66:00:94:73: b3:de:d6:62:ec:a6:18:7f:a2:53:88:9d:65:90:ef:3c:04:60: c1:81:cb:2e:b9:66:2a:8f:54:de:86:d7:bd:f9:94:86:b6:e0: 34:05:e8:55:eb:c1:dc:2a:4d:46:79:39:65:f3:d5:ce:dd:28: 57:1f:4c:14:e0:25:61:c7:64:89:ad:f1:40:03:0c:35:ff:3e: fc:e6:bd:89:a8:39:55:ab:75:81:a7:57:d9:84:94:84:ae:d6: 1b:47:a4:b1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gM0OvMWfvGeGZnjXpET8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzRjM2RjY2NiZjAyYmE4NTAxYWIxYzcwNmQzMWUxMzdmZGRmNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo589FR3bEimpk8icleGna0Yvy3aw PrYXdYpXk0JkjR2z5sVbEErBv9FgZl302CxZwSKt9RSaMTP8BPMg0VsoIjp0zDig OLOaxDrbufeOVBZeipjKXcuP4YATFnoafJcTESKyzGV6th3Y6qhXDxVA3Dfr1r1i 3LZYglJ0zHVPVwy2xuMlS7SI/U75CsGPJdvr6rv/9lUbED0OxL6a8K3Q1E17RMjZ lDH08xSDOuMhnHrLpREt5ni+bHf8ygkRzaiSBjoXHsrmivoqSL9OAtv8DHPdl2uf OJziGiu7i6VxQchrDH1M/XW/xbm3pfZlndg22ObGK1KOhHrzJhPqscFZzQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIdMPczL8CuoUBqxxwbTHhN/3fQdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3Lzk5M2Qz OC0yMTg4LTRhN2ItYmMzNy1hMDQ3NjIwOTVlZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvOTkzZDM4 LTIxODgtNGE3Yi1iYzM3LWEwNDc2MjA5NWVlNi8xL2gwdzl6TXZ3SzZoUUdySEhC dE1lRTNfZDlCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9AXMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC6yzANBgkqhkiG9w0BAQsFAAOCAQEAoPkHOpCGc7vHzqX5JtXxbgYVH/m35wH9 vWA8POfjy79r8/4VUokBwj95z8dcHE1ui5F/7ihq+gJ30R50D79nNTn+d8QD6Ivc emhVnG+e+qWQLWKwqNXI6wzpU1dthIc25/KwIV8mEGB5PeTaolZV7ugzIIfU4uKb sgwuAmhz/zFoGPEf8dDEX3dJrqxCuSFHgp8gHEvHJvgS0jwOd6lmAJRzs97WYuym GH+iU4idZZDvPARgwYHLLrlmKo9U3obXvfmUhrbgNAXoVevB3CpNRnk5ZfPVzt0o Vx9MFOAlYcdkia3xQAMMNf8+/Oa9iag5Vat1gadX2YSUhK7WG0eksQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:25 2026 by rpki-client