This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer File: h338-RVp2BViJvwnkOZ5BnY6KwM.cer (raw, json) Hash identifier: MtXrL3PZLQJfvo5vPMgdQBGMBoD+5hUPeBDybH39DC4= Subject key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15A91EB85846AB1A6C4CFB1167D90D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24786 IP: 81.93.112.0/20 IP: 193.28.192.0/21 IP: 2a06:7500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a9:1e:b8:58:46:ab:1a:6c:4c:fb:11:67:d9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=877dfcf91569d8156226fc2790e67906763a2b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:e5:a7:1c:80:d9:f3:69:f7:13:53:4f:7d: 58:5a:ff:ed:c2:63:00:fe:3d:f2:ca:a9:51:44:03: 4a:46:87:ec:a5:2e:51:f2:13:04:8c:ab:c8:99:3f: b7:8c:88:0c:7b:8d:d3:94:c8:9c:a7:6e:7c:2b:bd: 1a:da:2e:30:46:6c:78:f1:a8:19:72:fb:6e:51:a5: 98:2d:ae:e4:06:a4:b9:4f:4d:41:1e:d3:c8:a3:44: 9c:90:42:c3:58:d3:29:ce:dd:49:8a:3a:74:8b:17: 20:16:77:cc:11:18:d2:6f:a8:f4:25:69:86:b8:3b: a8:62:76:f9:3f:69:d5:2b:f1:38:ec:52:83:e0:fd: f5:c9:3a:5a:67:40:49:fa:9f:66:5e:9f:58:36:95: 61:c7:69:49:a1:b6:60:d6:62:dc:a4:83:2d:ac:fa: f0:a5:37:2a:4d:3e:a9:32:1e:30:a6:8e:8e:1e:c6: a9:4e:52:50:71:ab:bf:09:e4:53:ee:0c:01:d5:38: 33:69:59:ac:9a:6b:54:97:1c:ca:0f:e1:cf:40:71: e3:a3:04:0c:93:dd:d5:9f:5e:1d:10:ef:27:b4:33: da:f2:43:de:0f:dd:69:71:70:cc:ee:38:72:84:cd: b2:d0:cf:65:cf:de:8b:d7:14:23:0b:45:29:3a:5e: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.93.112.0/20 193.28.192.0/21 IPv6: 2a06:7500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24786 Signature Algorithm: sha256WithRSAEncryption 00:49:e9:a2:2b:8b:f8:4c:63:4a:85:50:a7:f4:74:c6:90:5e: 9a:1b:7f:ca:f2:74:13:74:02:5e:10:cd:0a:bb:af:12:3d:3d: 6b:94:e0:64:db:ec:36:81:a6:62:94:7b:76:98:5a:67:3c:42: f4:5d:73:1e:9d:83:60:b9:25:27:ca:b4:0d:02:d3:25:fa:df: 8c:15:3e:b9:a3:96:8b:2b:ea:6b:ba:6a:23:a2:e7:11:02:25: cb:b7:b8:3a:00:a0:94:00:db:34:e6:c7:de:7b:26:4a:fb:3c: ba:5c:10:84:e0:26:95:82:21:e1:21:3c:93:95:df:da:65:bf: 5b:d7:5c:36:97:12:d1:11:2c:91:03:24:a3:d7:71:36:44:9c: bc:6d:d5:50:67:57:9e:e2:cc:b2:25:97:2c:51:22:d8:bb:09: b7:07:c8:1c:03:5f:f1:d4:dc:a2:98:ef:70:0e:a7:d4:27:52: db:ec:dc:2d:9a:c2:85:6b:51:71:f4:07:7f:6c:99:1f:ef:d8: 54:92:38:11:55:90:52:a1:15:9b:42:82:21:1b:df:eb:ff:68: 53:73:2c:6c:75:8a:52:60:62:3f:20:df:d4:cd:77:c5:3e:50: d5:df:5f:ad:56:96:dc:6f:d7:66:5d:d7:29:f4:b6:f7:a3:4e: 92:04:55:d0 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/FakeuFhGqxpsTPsRZ9kNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzdkZmNmOTE1NjlkODE1NjIyNmZjMjc5MGU2NzkwNjc2M2EyYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHrlpxyA2fNp9xNTT31YWv/twmMA /j3yyqlRRANKRofspS5R8hMEjKvImT+3jIgMe43TlMicp258K70a2i4wRmx48agZ cvtuUaWYLa7kBqS5T01BHtPIo0SckELDWNMpzt1Jijp0ixcgFnfMERjSb6j0JWmG uDuoYnb5P2nVK/E47FKD4P31yTpaZ0BJ+p9mXp9YNpVhx2lJobZg1mLcpIMtrPrw pTcqTT6pMh4wpo6OHsapTlJQcau/CeRT7gwB1TgzaVmsmmtUlxzKD+HPQHHjowQM k93Vn14dEO8ntDPa8kPeD91pcXDM7jhyhM2y0M9lz96L1xQjC0UpOl5N+QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFId9/PkVadgVYib8J5DmeQZ2OisDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2YyYmRj OC03OWU3LTQ4Y2QtYTk5NC1hZDQ5NTg1OGIzMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvZjJiZGM4 LTc5ZTctNDhjZC1hOTk0LWFkNDk1ODU4YjMyYy8xL2gzMzgtUlZwMkJWaUp2d25r T1o1Qm5ZNkt3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUV1wAwQDwRzAMA0EAgACMAcDBQMqBnUAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmDSMA0GCSqGSIb3DQEBCwUAA4IBAQAASemi K4v4TGNKhVCn9HTGkF6aG3/K8nQTdAJeEM0Ku68SPT1rlOBk2+w2gaZilHt2mFpn PEL0XXMenYNguSUnyrQNAtMl+t+MFT65o5aLK+prumojoucRAiXLt7g6AKCUANs0 5sfeeyZK+zy6XBCE4CaVgiHhITyTld/aZb9b11w2lxLRESyRAySj13E2RJy8bdVQ Z1ee4syyJZcsUSLYuwm3B8gcA1/x1NyimO9wDqfUJ1Lb7NwtmsKFa1Fx9Ad/bJkf 79hUkjgRVZBSoRWbQoIhG9/r/2hTcyxsdYpSYGI/IN/UzXfFPlDV31+tVpbcb9dm Xdcp9Lb3o06SBFXQ -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:54 2026 by rpki-client