This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer File: hBhM6RkCNkC7klbC2NGgSfoQJSA.cer (raw, json) Hash identifier: GuXvhphMTN2/jjTx6RuI7Dyz9eHg8OVgO+erOVa/Fs4= Subject key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA34E209C2622AE3CCA845BDAEFAFB5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43212 IP: 185.11.68.0/22 IP: 185.59.112.0/23 IP: 185.83.196.0/22 IP: 2a03:9080::/32 IP: 2a05:9e40::/29 IP: 2a06:e080::/29 IP: 2a0b:3000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4e:20:9c:26:22:ae:3c:ca:84:5b:da:ef:af:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84184ce919023640bb9256c2d8d1a049fa102520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:5d:d0:c9:dc:5c:9e:e8:2e:c6:81:22:ef: 22:f8:f2:61:86:9f:ce:82:fa:6c:a0:f5:ba:22:9f: 08:db:3e:86:98:c7:c4:9e:2c:15:a6:d4:09:f8:b9: 11:fd:03:aa:c7:2d:ae:c8:9c:ff:ed:aa:e1:d5:b2: f0:6d:53:f7:bf:40:42:28:2b:a9:5e:6c:6f:8a:67: 19:e8:64:1c:cb:22:18:a4:ed:0e:6e:4a:b7:12:42: 7e:4c:8c:4b:35:ae:db:28:e0:12:df:84:f9:52:90: 5d:56:37:6b:34:f6:63:e2:55:c6:46:39:26:d9:39: 9b:58:c3:77:e1:ce:48:ce:40:bb:80:63:f3:50:b7: 64:90:4d:82:3e:db:4a:e2:d1:2e:19:b5:0a:7b:fc: 4b:53:35:d8:03:5d:72:1a:bd:9a:46:00:b2:4c:d9: aa:7e:b8:1d:ba:04:ec:fa:c1:80:0b:52:08:fb:be: 30:09:6c:b4:4d:01:3f:a9:63:e1:0a:9a:0c:37:54: 5c:86:e8:80:bc:6a:b8:5f:54:97:fc:13:d5:94:f1: 2e:07:20:57:1c:27:9e:23:4d:c0:a6:33:c4:ea:ac: c5:e0:7b:e9:c8:2a:ad:58:04:a5:9e:f8:c3:93:9f: 14:93:d6:7c:15:18:20:ea:d2:a9:ca:1e:c0:68:dd: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.68.0/22 185.59.112.0/23 185.83.196.0/22 IPv6: 2a03:9080::/32 2a05:9e40::/29 2a06:e080::/29 2a0b:3000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43212 Signature Algorithm: sha256WithRSAEncryption 09:a6:60:a2:f3:89:7f:fa:2f:48:5a:64:83:61:52:0c:ed:67: 4b:49:70:27:1e:33:8a:8d:8e:06:95:6e:99:06:28:7b:0e:df: 23:d6:fb:3d:5f:2c:aa:6e:ab:a6:2c:ef:d9:59:be:e9:72:0e: f1:ff:1f:23:69:30:c5:e5:0d:2c:1b:be:b5:f1:e6:46:70:22: c3:1e:3d:6d:2a:36:f5:78:6a:ed:4c:3b:4f:75:10:06:31:1b: d4:43:5a:f5:43:11:34:f7:24:23:9b:59:2d:89:0d:23:15:96: d5:59:fb:4e:30:84:24:e7:06:cd:b5:1a:96:b0:4e:7f:82:36: e4:26:75:62:d8:03:53:70:91:f9:22:11:92:f6:9a:f5:a4:bb: 50:45:6b:1b:eb:84:96:26:2f:6a:ad:3c:01:97:6d:19:a5:79: 4e:fb:37:72:cb:4c:64:63:ad:fb:a3:c0:a2:6e:07:cc:1e:46: 50:86:d6:1b:56:5c:b9:93:02:80:04:a3:be:b3:cb:b7:fa:b5: e5:7f:47:df:0d:8e:95:32:80:90:7b:c7:f0:63:31:af:ac:09: f1:65:be:21:2f:21:22:cc:66:10:2a:a7:39:dd:d6:30:95:b7: 99:43:20:46:b3:55:8d:dc:e8:ae:a2:ab:d0:69:b1:15:d1:23: 25:19:42:91 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt7o04gnCYirjzKhFva76+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDE4NGNlOTE5MDIzNjQwYmI5MjU2YzJkOGQxYTA0OWZhMTAyNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux1d0MncXJ7oLsaBIu8i+PJhhp/O gvpsoPW6Ip8I2z6GmMfEniwVptQJ+LkR/QOqxy2uyJz/7arh1bLwbVP3v0BCKCup XmxvimcZ6GQcyyIYpO0Obkq3EkJ+TIxLNa7bKOAS34T5UpBdVjdrNPZj4lXGRjkm 2TmbWMN34c5IzkC7gGPzULdkkE2CPttK4tEuGbUKe/xLUzXYA11yGr2aRgCyTNmq frgdugTs+sGAC1II+74wCWy0TQE/qWPhCpoMN1RchuiAvGq4X1SX/BPVlPEuByBX HCeeI03ApjPE6qzF4HvpyCqtWASlnvjDk58Uk9Z8FRgg6tKpyh7AaN1wPwIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFIQYTOkZAjZAu5JWwtjRoEn6ECUgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzI5MjJj Zi0xODYxLTQxOWQtOWVlYS0wYTc5ZDU0OTY1YTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvMjkyMmNm LTE4NjEtNDE5ZC05ZWVhLTBhNzlkNTQ5NjVhOS8xL2hCaE02UmtDTmtDN2tsYkMy TkdnU2ZvUUpTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjAYBAIAATASAwQCuQtEAwQBuTtwAwQCuVPEMCIEAgACMBwDBQAq A5CAAwUDKgWeQAMFAyoG4IADBQMqCzAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCozDANBgkqhkiG9w0BAQsFAAOCAQEACaZgovOJf/ovSFpkg2FSDO1nS0lwJx4z io2OBpVumQYoew7fI9b7PV8sqm6rpizv2Vm+6XIO8f8fI2kwxeUNLBu+tfHmRnAi wx49bSo29Xhq7Uw7T3UQBjEb1ENa9UMRNPckI5tZLYkNIxWW1Vn7TjCEJOcGzbUa lrBOf4I25CZ1YtgDU3CR+SIRkvaa9aS7UEVrG+uEliYvaq08AZdtGaV5Tvs3cstM ZGOt+6PAom4HzB5GUIbWG1ZcuZMCgASjvrPLt/q15X9H3w2OlTKAkHvH8GMxr6wJ 8WW+IS8hIsxmECqnOd3WMJW3mUMgRrNVjdzorqKr0GmxFdEjJRlCkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:16 2026 by rpki-client