This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer File: h9f30vwTSJFMAGtVq5Py0uM5DeY.cer (raw, json) Hash identifier: +3+Lh+Go83XuaDImTNwvvF3cE/A8x8YFDH/L/hWAkKw= Subject key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C123AB6A49D1AA6EFB1BA50AF50C5BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52080 IP: 185.249.152.0/22 IP: 2a0c:4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3a:b6:a4:9d:1a:a6:ef:b1:ba:50:af:50:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:b4:61:38:38:a0:bf:b7:db:2b:c2:b6:9e: 98:83:fd:13:6d:de:36:29:1c:12:84:0c:b9:87:a7: 46:58:a8:b1:83:2e:07:d1:0d:37:14:88:52:c6:e9: bd:57:47:e1:3d:46:38:a8:6b:a7:7a:14:a8:fa:1f: 95:f6:43:c0:7b:95:ff:41:a2:eb:07:da:6b:05:b1: 74:4b:b0:90:d2:22:e8:15:f5:ee:d1:38:83:7c:c2: 7e:90:68:0e:87:07:ec:5b:c1:10:dc:0e:77:53:07: c4:a0:41:95:91:43:09:4c:d5:6f:02:83:c5:7f:98: b1:99:d1:63:fa:25:1f:94:66:54:92:85:a0:3b:0a: 73:6b:19:36:f1:28:92:4d:44:10:40:09:90:d8:10: 3c:d1:17:99:8a:5e:15:13:ec:2f:af:cf:99:d2:f9: 0e:55:06:86:bc:3e:3d:d0:5e:34:ba:72:b9:b7:b9: 87:02:c5:ad:59:a8:60:c6:81:78:7b:ef:94:5b:27: 88:53:00:99:22:45:0d:11:ac:c5:00:fd:3d:5c:fa: 4b:d9:32:88:2e:8d:c4:b1:c7:c0:78:4c:94:58:d5: 2f:9a:50:20:76:38:ba:3c:2a:5b:c6:d2:7d:f0:9c: c0:98:da:60:c4:93:ef:09:fb:fc:47:a3:2c:49:35: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.152.0/22 IPv6: 2a0c:4c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52080 Signature Algorithm: sha256WithRSAEncryption a9:d3:a3:98:8f:84:45:cd:ca:75:64:bb:f1:81:6f:9a:df:ae: 2a:e8:fb:c0:3e:32:5d:6c:f9:f0:fb:8c:6a:f4:48:e3:27:3d: ad:fc:2b:9f:65:69:92:12:4a:25:0c:48:9a:a3:9b:26:b2:bb: 42:dd:d5:22:08:28:c3:6d:18:8e:50:7a:9b:26:f5:cf:1e:87: fb:9a:5d:60:b3:31:c1:22:03:a9:0d:c4:29:88:b0:27:7e:74: 79:c8:09:35:4c:13:2e:9f:4f:8c:9d:07:c7:2b:73:34:84:e9: 02:26:34:b2:4e:cf:19:4f:7d:c6:d7:82:fa:44:54:46:f7:bf: 2d:24:48:66:ad:d6:1e:1e:d6:fc:80:6a:50:6c:c2:46:2c:ca: ec:3c:63:26:36:2d:be:2a:c2:8d:5f:65:62:a8:91:9f:ba:8c: 8a:94:48:31:5f:4d:12:de:85:3a:61:1f:91:76:0d:06:05:eb: a9:4f:fd:17:cd:05:15:d3:8f:b9:36:25:58:3c:da:61:e8:d1: 7d:6f:c0:ee:c4:7b:c0:b5:66:fc:6f:4e:5a:b7:c1:ec:bd:2e: 44:33:89:c7:f4:72:d4:08:d9:7e:71:54:b6:9e:fe:7d:32:84: 03:47:11:45:98:5d:67:9d:11:68:a4:bd:ab:8b:a6:bd:68:b0: 7d:3f:96:fd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8Ejq2pJ0apu+xulCvUMW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q3ZjdkMmZjMTM0ODkxNGMwMDZiNTVhYjkzZjJkMmUzMzkwZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3K0YTg4oL+32yvCtp6Yg/0Tbd42 KRwShAy5h6dGWKixgy4H0Q03FIhSxum9V0fhPUY4qGunehSo+h+V9kPAe5X/QaLr B9prBbF0S7CQ0iLoFfXu0TiDfMJ+kGgOhwfsW8EQ3A53UwfEoEGVkUMJTNVvAoPF f5ixmdFj+iUflGZUkoWgOwpzaxk28SiSTUQQQAmQ2BA80ReZil4VE+wvr8+Z0vkO VQaGvD490F40unK5t7mHAsWtWahgxoF4e++UWyeIUwCZIkUNEazFAP09XPpL2TKI Lo3EscfAeEyUWNUvmlAgdji6PCpbxtJ98JzAmNpgxJPvCfv8R6MsSTU3mwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIfX99L8E0iRTABrVauT8tLjOQ3mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2E2NTky ZS1iMWMxLTQwN2MtOGYwNC0zMDFkZjI3MjE1MmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYTY1OTJl LWIxYzEtNDA3Yy04ZjA0LTMwMWRmMjcyMTUyZS8xL2g5ZjMwdndUU0pGTUFHdFZx NVB5MHVNNURlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufmYMA0EAgACMAcDBQMqDATAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDLcDANBgkqhkiG9w0BAQsFAAOCAQEAqdOjmI+ERc3K dWS78YFvmt+uKuj7wD4yXWz58PuMavRI4yc9rfwrn2VpkhJKJQxImqObJrK7Qt3V Iggow20YjlB6myb1zx6H+5pdYLMxwSIDqQ3EKYiwJ350ecgJNUwTLp9PjJ0Hxytz NITpAiY0sk7PGU99xteC+kRURve/LSRIZq3WHh7W/IBqUGzCRizK7DxjJjYtvirC jV9lYqiRn7qMipRIMV9NEt6FOmEfkXYNBgXrqU/9F80FFdOPuTYlWDzaYejRfW/A 7sR7wLVm/G9OWrfB7L0uRDOJx/Ry1AjZfnFUtp7+fTKEA0cRRZhdZ50RaKS9q4um vWiwfT+W/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:07 2026 by rpki-client