This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer File: h16pmc28YATHGlRwyg7HrnOCCPo.cer (raw, json) Hash identifier: +a1sSSutkgxmqvZgzpYFARs06sf+cSvwp+LKAS9/Mok= Subject key identifier: 87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF7691C737C56066DB083396545FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 213.109.104.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f7:69:1c:73:7c:56:06:6d:b0:83:39:65:45:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:29:15:51:3c:a3:35:a7:88:03:aa:d4:f5: e1:e7:a2:f8:13:64:24:88:12:60:c9:55:1c:19:06: de:f6:45:23:02:0e:bc:89:b0:0d:72:3a:8c:7d:67: 21:ac:1a:64:86:e2:d2:ac:91:f2:63:3f:78:a1:42: 97:ac:e0:d3:5e:2d:a1:75:5b:a2:79:74:68:c5:be: ec:e9:44:be:01:93:16:ed:fb:1c:0b:14:21:da:5c: 55:70:0b:98:13:1f:6c:67:15:94:b7:f3:96:18:57: 68:0b:ef:3a:0c:01:6c:80:34:f8:b7:62:2b:c1:f3: 69:fc:2b:3f:72:70:53:95:bf:9e:c8:c0:a2:86:5c: f8:e6:2e:35:a9:e2:fa:9d:c2:8e:28:ca:15:6d:f1: 66:d3:c5:63:e5:47:32:1b:3b:e5:b4:55:86:ab:7c: 3a:3e:6b:5d:af:46:69:0e:70:81:ae:e1:e5:49:33: 23:ae:12:05:fc:6b:b1:79:d6:5b:a0:a2:8e:e0:5c: 99:21:35:28:9e:20:56:5a:7a:af:75:22:83:57:56: 35:35:4c:69:f8:81:6a:9d:2d:e2:46:ec:e8:29:42: f4:ea:37:2e:f6:02:94:27:0b:29:a8:aa:22:ab:64: c3:ef:51:f3:d6:2b:51:be:69:61:42:57:87:ec:88: e7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.104.0/22 Signature Algorithm: sha256WithRSAEncryption 97:fd:ba:5f:f9:db:c0:5e:f5:17:bb:ad:2d:b9:c9:d9:40:8d: 13:cb:ea:82:46:1b:35:2d:03:ec:e7:60:0d:07:32:9c:95:0f: 3f:f2:7a:44:78:8d:62:38:a2:ac:a2:6d:9b:3f:1d:eb:2e:eb: d0:8b:01:1a:b5:08:3b:f0:24:02:ad:c9:8d:10:2b:fb:e8:1a: f7:0d:fa:24:ee:8d:04:8d:e9:c5:71:8d:e6:3b:9e:fb:42:60: 24:47:ef:76:62:14:1c:57:e4:28:de:6b:a9:75:b1:2b:12:5c: 3c:f5:8c:ea:df:c5:79:70:81:83:c2:31:e9:05:dd:1e:95:18: 08:49:a6:14:68:4b:85:fb:39:41:de:c0:a8:87:64:b1:00:d8: 06:a8:93:cf:40:9d:9e:ba:13:26:78:49:7f:48:7e:6d:dc:8f: 95:44:d6:9c:24:31:cb:9d:ba:04:f1:b6:7f:ae:83:86:ec:bc: f4:61:ca:db:20:3f:8d:62:f0:99:9f:e3:c0:2a:16:23:64:3d: ad:b0:00:3f:b8:81:27:12:41:be:98:d0:83:c7:b6:46:e0:22: 9b:ba:91:9e:cf:c7:9c:3d:8f:41:89:f4:79:fd:bc:d7:aa:b2: 5c:4e:46:58:78:37:6a:eb:e1:03:cd:2e:68:eb:3d:66:14:c1: 4d:e9:c6:ca -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt26vdpHHN8VgZtsIM5ZUX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzVlYTk5OWNkYmM2MDA0YzcxYTU0NzBjYTBlYzdhZTczODIwOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWopFVE8ozWniAOq1PXh56L4E2Qk iBJgyVUcGQbe9kUjAg68ibANcjqMfWchrBpkhuLSrJHyYz94oUKXrODTXi2hdVui eXRoxb7s6US+AZMW7fscCxQh2lxVcAuYEx9sZxWUt/OWGFdoC+86DAFsgDT4t2Ir wfNp/Cs/cnBTlb+eyMCihlz45i41qeL6ncKOKMoVbfFm08Vj5UcyGzvltFWGq3w6 Pmtdr0ZpDnCBruHlSTMjrhIF/GuxedZboKKO4FyZITUoniBWWnqvdSKDV1Y1NUxp +IFqnS3iRuzoKUL06jcu9gKUJwspqKoiq2TD71Hz1itRvmlhQleH7IjnYwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIdeqZnNvGAExxpUcMoOx65zggj6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzY4N2Yx MC0xNzQ0LTQ5ZGYtYmQ3ZS00ZDEyZmQyNWQ5NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvNjg3ZjEw LTE3NDQtNDlkZi1iZDdlLTRkMTJmZDI1ZDk3OC8xL2gxNnBtYzI4WUFUSEdsUnd5 ZzdIcm5PQ0NQby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQC1W1oMA0GCSqGSIb3DQEBCwUAA4IBAQCX/bpf +dvAXvUXu60tucnZQI0Ty+qCRhs1LQPs52ANBzKclQ8/8npEeI1iOKKsom2bPx3r LuvQiwEatQg78CQCrcmNECv76Br3Dfok7o0EjenFcY3mO577QmAkR+92YhQcV+Qo 3mupdbErElw89Yzq38V5cIGDwjHpBd0elRgISaYUaEuF+zlB3sCoh2SxANgGqJPP QJ2euhMmeEl/SH5t3I+VRNacJDHLnboE8bZ/roOG7Lz0YcrbID+NYvCZn+PAKhYj ZD2tsAA/uIEnEkG+mNCDx7ZG4CKbupGez8ecPY9BifR5/bzXqrJcTkZYeDdq6+ED zS5o6z1mFMFN6cbK -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:34 2026 by rpki-client