This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer File: h5Q8uG46cDgTd4-reQ1l8NohYVo.cer (raw, json) Hash identifier: DVpANpad7xRrdG3ii1e7okn4/o4uVwhpzhJkA01qyCQ= Subject key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83573900AF1CCB19B19CFAD1E0560A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43882 IP: 79.133.160.0/21 IP: 79.133.172.0/22 IP: 2a09:5a80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:57:39:00:af:1c:cb:19:b1:9c:fa:d1:e0:56:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87943cb86e3a703813778fab790d65f0da21615a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:37:af:14:15:c7:63:45:54:86:87:37:64: 44:0f:65:5c:96:c1:69:07:3f:2d:dd:ed:c8:76:ac: 08:e7:b0:8c:69:9c:e5:9b:8b:3d:a4:38:5d:a0:20: 94:d7:51:aa:33:8d:ff:17:92:39:e9:d4:4e:48:15: c3:68:66:e5:85:20:7e:bd:d7:77:6a:95:dd:1e:3b: 5f:52:10:03:78:8e:84:13:8a:ee:c7:85:18:20:97: 1f:e4:11:28:4d:96:a4:28:ca:f3:a9:e5:d2:71:e5: 24:7e:8b:5b:24:cb:59:d4:9e:25:ac:17:85:c7:17: 67:ae:95:44:51:7b:7f:99:d5:7e:cd:fe:34:b9:cc: 6b:2b:fd:0c:d7:32:3c:25:7a:d6:34:06:84:b6:15: c4:04:1f:bb:37:14:e4:50:b7:4f:7d:5c:e9:61:0d: 6e:c8:0f:a8:54:66:03:e7:b9:5b:77:18:be:e7:a3: 21:1b:56:a3:7c:4b:3c:ed:ec:e4:45:84:25:cc:f7: ce:16:91:fa:8a:2f:d6:3a:cf:69:68:ae:65:ef:f0: 00:51:b3:70:20:44:4b:e9:1a:74:0a:4b:54:80:dc: bc:ab:98:15:b9:43:b8:2e:d5:a0:ce:7f:37:3b:88: 7c:21:dc:88:61:70:2e:f6:8b:c1:3f:5a:04:88:b8: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.133.160.0/21 79.133.172.0/22 IPv6: 2a09:5a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43882 Signature Algorithm: sha256WithRSAEncryption 9b:1d:62:ae:73:a9:97:1a:09:40:24:a8:46:d9:a7:b5:1b:0f: e8:01:1d:34:15:97:b6:e8:75:2b:1d:e5:49:a7:0f:be:a7:a2: 3a:3e:14:2b:cf:23:99:3d:49:05:15:92:ba:5c:9c:6d:00:69: b0:6f:48:a2:8d:b7:f4:4f:fc:67:3b:1e:f1:3f:e5:c6:89:96: 7a:8c:f1:29:f9:c9:5d:50:04:05:1e:c1:88:b7:2f:5b:b6:41: ba:f6:9e:bf:c6:79:15:3e:d9:f2:3e:48:09:bd:60:7e:0e:30: c3:3e:41:72:ad:cd:52:1c:5e:b6:d5:6c:42:cf:76:fd:cd:1f: 62:f6:57:d9:45:ed:20:c1:ba:6e:1e:60:c4:e4:50:fa:54:0c: 0f:a7:03:45:3b:21:b2:61:69:96:8e:ac:9c:4a:26:81:01:14: 82:f5:c5:09:76:ad:6a:94:90:99:5b:f3:b0:21:79:d9:a4:96: 50:a9:ba:06:63:3c:05:12:b5:87:58:c6:17:72:a2:07:c0:65: d7:0f:b1:bb:34:99:4e:3d:eb:a9:74:80:4b:d1:d2:82:7a:e4: a4:1c:f5:7c:2f:6e:9f:90:e3:41:a1:9e:10:cd:21:ae:ba:14: 95:dc:fb:29:66:33:0e:95:24:f3:0d:d8:8a:55:90:3b:b5:e0: 7a:46:82:e2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/g1c5AK8cyxmxnPrR4FYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzk0M2NiODZlM2E3MDM4MTM3NzhmYWI3OTBkNjVmMGRhMjE2MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlA3rxQVx2NFVIaHN2RED2VclsFp Bz8t3e3IdqwI57CMaZzlm4s9pDhdoCCU11GqM43/F5I56dROSBXDaGblhSB+vdd3 apXdHjtfUhADeI6EE4rux4UYIJcf5BEoTZakKMrzqeXSceUkfotbJMtZ1J4lrBeF xxdnrpVEUXt/mdV+zf40ucxrK/0M1zI8JXrWNAaEthXEBB+7NxTkULdPfVzpYQ1u yA+oVGYD57lbdxi+56MhG1ajfEs87ezkRYQlzPfOFpH6ii/WOs9paK5l7/AAUbNw IERL6Rp0CktUgNy8q5gVuUO4LtWgzn83O4h8IdyIYXAu9ovBP1oEiLjWzwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIeUPLhuOnA4E3ePq3kNZfDaIWFaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzk1OGZl Zi0wZDU1LTRjMDAtYmU4YS1jYzU4MDUyMWQwMGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOTU4ZmVm LTBkNTUtNGMwMC1iZThhLWNjNTgwNTIxZDAwZi8xL2g1UTh1RzQ2Y0RnVGQ0LXJl UTFsOE5vaFlWby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDT4WgAwQCT4WsMA0EAgACMAcDBQAqCVqAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCrajANBgkqhkiG9w0BAQsFAAOCAQEAmx1i rnOplxoJQCSoRtmntRsP6AEdNBWXtuh1Kx3lSacPvqeiOj4UK88jmT1JBRWSulyc bQBpsG9Ioo239E/8Zzse8T/lxomWeozxKfnJXVAEBR7BiLcvW7ZBuvaev8Z5FT7Z 8j5ICb1gfg4wwz5Bcq3NUhxettVsQs92/c0fYvZX2UXtIMG6bh5gxORQ+lQMD6cD RTshsmFplo6snEomgQEUgvXFCXatapSQmVvzsCF52aSWUKm6BmM8BRK1h1jGF3Ki B8Bl1w+xuzSZTj3rqXSAS9HSgnrkpBz1fC9un5DjQaGeEM0hrroUldz7KWYzDpUk 8w3YilWQO7XgekaC4g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:51 2026 by rpki-client