This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer File: hAVuIt0SPINMCkqnRRbV-zzHfdE.cer (raw, json) Hash identifier: X1SUyQGVDWsEEGHjQZ8MpEoDRz+NF/tEQZ3t9zKEaK8= Subject key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC6CD50F65BB4B07D26A63F239E7DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39808 IP: 89.107.88.0/21 IP: 185.123.212.0/22 IP: 2a06:8fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6c:d5:0f:65:bb:4b:07:d2:6a:63:f2:39:e7:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:75:ae:a8:a9:89:65:a6:01:44:11:12:2d: 30:a9:a3:5b:90:3e:ea:57:46:69:43:f9:12:fb:4c: b9:58:9f:15:ad:b5:63:54:f7:4a:85:9d:f6:90:40: 67:1f:f1:fa:c1:e0:98:dc:a5:c8:54:ef:cf:c4:b2: c4:38:d8:f9:3d:d5:16:31:cc:4a:33:8b:ba:fa:bf: 83:19:3a:b6:1a:d5:b1:0d:b7:cd:46:79:8e:89:a8: 44:91:cf:b9:63:fc:72:8a:40:88:48:1b:ea:4d:a1: 55:a3:5f:92:1f:2d:bc:dd:04:32:fe:37:2b:01:8c: b0:d2:e9:24:a4:31:4e:76:85:cd:41:ac:6e:40:ec: e6:5d:1d:58:bd:04:66:63:fd:93:db:2d:05:da:f6: 39:27:2c:93:39:3c:68:18:17:83:84:7a:1b:c6:89: b4:13:ce:7c:b1:ef:d3:58:e9:ab:d7:02:10:6f:40: d2:33:ff:36:54:25:3c:93:db:23:ba:4a:bc:26:09: 70:88:bd:e5:96:63:e1:64:e9:e6:09:be:a4:1c:49: c6:9a:e5:a0:ee:fb:6c:55:89:c8:c8:c2:a0:d4:95: de:1e:8e:e3:86:9b:39:ab:71:d8:10:e4:7f:17:11: 66:3b:81:71:9e:36:02:29:34:85:54:5e:38:32:5e: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.88.0/21 185.123.212.0/22 IPv6: 2a06:8fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39808 Signature Algorithm: sha256WithRSAEncryption 54:b7:53:cf:d7:6c:43:e2:7a:a5:9f:2d:f0:b9:9d:23:ef:2e: 1d:b8:c8:d5:5e:f2:41:dc:1f:0e:11:f9:83:84:39:4c:30:d5: 7e:06:c8:5d:62:8b:85:9b:0b:fc:de:48:e4:72:d9:d5:10:4c: 35:c2:2d:4e:be:02:d2:c5:50:b6:56:3e:6d:26:d0:e1:e4:93: 4d:01:53:5a:e1:58:7d:45:be:de:2a:11:18:56:25:61:8b:b8: b7:fb:2e:50:69:09:a1:48:f2:18:3e:18:5c:20:69:d3:10:3e: 69:6c:8e:a1:47:53:14:d5:b8:c9:02:1d:7b:a4:17:b1:2d:14: b5:63:3f:ef:38:5e:26:b5:77:82:44:da:14:be:09:8e:cd:a6: d7:67:23:49:93:eb:54:2a:10:31:08:c2:45:b1:9a:1d:60:5f: 58:90:64:7a:1b:95:a3:e1:4c:c3:91:e6:79:f2:84:d1:38:45: dd:9f:8d:d8:2b:8d:bc:d5:c1:d6:66:f4:34:dc:bf:65:9d:36: 69:1b:f3:87:eb:d1:f7:0a:8a:71:b8:f1:cc:0b:b1:e5:ea:63: a1:5a:5a:b3:30:68:c8:c2:1a:a3:3f:6c:4d:bf:5c:56:62:92: 7d:14:33:c0:73:a1:ec:01:8d:ed:23:ee:d2:06:ff:04:05:52: 76:8e:bf:1f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57GzVD2W7SwfSamPyOefeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDA1NmUyMmRkMTIzYzgzNGMwYTRhYTc0NTE2ZDVmYjNjYzc3ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocV1rqipiWWmAUQREi0wqaNbkD7q V0ZpQ/kS+0y5WJ8VrbVjVPdKhZ32kEBnH/H6weCY3KXIVO/PxLLEONj5PdUWMcxK M4u6+r+DGTq2GtWxDbfNRnmOiahEkc+5Y/xyikCISBvqTaFVo1+SHy283QQy/jcr AYyw0ukkpDFOdoXNQaxuQOzmXR1YvQRmY/2T2y0F2vY5JyyTOTxoGBeDhHobxom0 E858se/TWOmr1wIQb0DSM/82VCU8k9sjukq8JglwiL3llmPhZOnmCb6kHEnGmuWg 7vtsVYnIyMKg1JXeHo7jhps5q3HYEOR/FxFmO4FxnjYCKTSFVF44Ml6OUQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIQFbiLdEjyDTApKp0UW1fs8x33RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzUzYTcy MS0xZjkxLTQ4OGEtYjVhMy01OWM5YzNmYjk5NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvNTNhNzIx LTFmOTEtNDg4YS1iNWEzLTU5YzljM2ZiOTk0Ny8xL2hBVnVJdDBTUElOTUNrcW5S UmJWLXp6SGZkRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDWWtYAwQCuXvUMA0EAgACMAcDBQMqBo/AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCbgDANBgkqhkiG9w0BAQsFAAOCAQEAVLdT z9dsQ+J6pZ8t8LmdI+8uHbjI1V7yQdwfDhH5g4Q5TDDVfgbIXWKLhZsL/N5I5HLZ 1RBMNcItTr4C0sVQtlY+bSbQ4eSTTQFTWuFYfUW+3ioRGFYlYYu4t/suUGkJoUjy GD4YXCBp0xA+aWyOoUdTFNW4yQIde6QXsS0UtWM/7zheJrV3gkTaFL4Jjs2m12cj SZPrVCoQMQjCRbGaHWBfWJBkehuVo+FMw5HmefKE0ThF3Z+N2CuNvNXB1mb0NNy/ ZZ02aRvzh+vR9wqKcbjxzAux5epjoVpaszBoyMIaoz9sTb9cVmKSfRQzwHOh7AGN 7SPu0gb/BAVSdo6/Hw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:00 2026 by rpki-client