This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer (raw, json) Hash identifier: Q/3IRdleZCrFUYyAGS54xlTYRc9ZnJZ4l8PTyTijPFM= Subject key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A83F75E223BE2E1D00E5EB9492ECD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211923 IP: 193.163.128.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:83:f7:5e:22:3b:e2:e1:d0:0e:5e:b9:49:2e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:dd:5a:56:ce:8e:c5:9b:89:b0:01:6e:69: de:be:ba:cd:96:81:c3:1d:6f:55:07:a1:a0:2f:92: 69:ab:56:48:ac:97:4a:57:23:76:ef:ea:b3:a9:ce: 14:e9:6d:af:01:94:01:e8:9c:b0:c4:e2:48:cb:fb: ae:aa:5d:33:86:9b:e4:22:22:70:8e:a7:98:e3:6c: 1d:62:3f:30:99:c1:58:86:d2:a1:cd:1f:5e:6b:e9: d1:e8:e2:65:71:74:4f:d4:c6:f2:ca:84:fb:e5:09: 50:ac:a8:2b:76:9e:8b:26:dc:47:0a:f2:5a:a2:37: 38:12:06:3e:aa:98:db:6b:91:df:3c:56:2e:39:75: 79:f7:1a:8b:54:44:dd:2c:00:94:e2:5b:ed:56:d8: b2:a1:03:97:fb:92:e1:ca:5b:03:84:cc:a2:89:2c: 12:3d:68:e1:7f:c1:cc:a2:4b:1d:2d:03:71:68:c5: b3:e1:2c:c1:19:98:eb:d9:69:27:34:ef:11:a6:33: 26:77:03:00:8a:22:21:f1:e2:f4:95:3a:39:48:5a: 27:75:3e:ab:91:96:3e:d8:dc:3e:8f:58:88:69:c6: 66:2e:cb:87:1f:4d:d9:7a:2f:01:05:3c:f5:c8:dc: 6c:7f:d4:26:3f:00:6f:b1:af:39:97:04:94:95:fd: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.128.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211923 Signature Algorithm: sha256WithRSAEncryption 12:d3:49:26:fd:f7:bf:2e:63:f6:e7:12:f7:47:da:02:3d:cb: 85:59:66:88:a7:7b:b0:1d:4e:f4:fa:b3:5c:dd:ce:22:9c:4c: 65:a7:cf:a1:b1:a2:07:e9:95:5b:9a:05:38:ad:f6:b1:35:f8: d4:05:d3:69:db:1e:69:4a:c9:c3:7a:80:5d:c9:98:57:aa:fc: 10:12:ff:13:8b:03:43:b0:87:14:b8:fe:ce:e7:31:6a:99:c8: 0d:6f:9d:2d:cc:21:64:71:d8:e3:fe:a2:09:b0:45:f4:6f:71: a5:cc:40:bb:4e:f9:11:96:b6:12:31:4a:58:f6:fa:97:bd:2f: d0:b8:24:77:c0:a3:0c:bc:48:de:8f:8d:76:0e:7d:59:2d:0e: 2e:c8:91:79:93:bf:26:25:0a:d8:f9:81:ed:6a:ef:2d:dc:4b: 6b:e0:a2:0f:a7:29:7f:be:a1:8e:7c:aa:5c:88:94:1c:b8:0c: f7:82:6d:67:89:af:43:a6:9d:fb:b9:42:72:83:10:26:42:f7: 28:bc:44:69:f5:50:26:2f:be:b8:0e:41:09:7c:33:21:3e:1b: de:db:03:bb:4d:ec:ec:95:e2:87:34:98:bf:6b:61:74:c3:55: ea:a9:39:39:46:c3:5e:3f:08:1f:d7:e9:df:9d:55:55:d0:56: 7e:d3:76:8f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WoP3XiI74uHQDl65SS7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzg1MTU0NGE2NDI3ZDJjOGUyNzllNGI5NGI5MmFhZjAwMDllZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSHdWlbOjsWbibABbmnevrrNloHD HW9VB6GgL5Jpq1ZIrJdKVyN27+qzqc4U6W2vAZQB6JywxOJIy/uuql0zhpvkIiJw jqeY42wdYj8wmcFYhtKhzR9ea+nR6OJlcXRP1MbyyoT75QlQrKgrdp6LJtxHCvJa ojc4EgY+qpjba5HfPFYuOXV59xqLVETdLACU4lvtVtiyoQOX+5LhylsDhMyiiSwS PWjhf8HMoksdLQNxaMWz4SzBGZjr2WknNO8RpjMmdwMAiiIh8eL0lTo5SFondT6r kZY+2Nw+j1iIacZmLsuHH03Zei8BBTz1yNxsf9QmPwBvsa85lwSUlf24awIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIeFFUSmQn0sjieeS5S5Kq8ACe0nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzQ3YjFm ZC0zNGI2LTQxOTUtODQ5Zi04NTQzNGY2MTY5ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNDdiMWZk LTM0YjYtNDE5NS04NDlmLTg1NDM0ZjYxNjlmMS8xL2g0VVZSS1pDZlN5T0o1NUxs TGtxcndBSjdTYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwaOAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM70zANBgkqhkiG9w0BAQsFAAOCAQEAEtNJJv33vy5j9ucS90faAj3LhVlmiKd7 sB1O9PqzXN3OIpxMZafPobGiB+mVW5oFOK32sTX41AXTadseaUrJw3qAXcmYV6r8 EBL/E4sDQ7CHFLj+zucxapnIDW+dLcwhZHHY4/6iCbBF9G9xpcxAu075EZa2EjFK WPb6l70v0Lgkd8CjDLxI3o+Ndg59WS0OLsiReZO/JiUK2PmB7WrvLdxLa+CiD6cp f76hjnyqXIiUHLgM94JtZ4mvQ6ad+7lCcoMQJkL3KLxEafVQJi++uA5BCXwzIT4b 3tsDu03s7JXihzSYv2thdMNV6qk5OUbDXj8IH9fp351VVdBWftN2jw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:45 2026 by rpki-client