This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer File: hJG76s9bDFiembk_hOHF5H2a9gQ.cer (raw, json) Hash identifier: o4pdsLZk9i4WuzsMuyLxvIZDTmy2ORF8YyYINBYUhbo= Subject key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DE6A284102F747973DB3922F859FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35186 IP: 195.80.225.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e6:a2:84:10:2f:74:79:73:db:39:22:f8:59:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:48:4f:a1:6a:17:05:d2:06:6f:e4:b0:39: d7:b5:79:3f:10:b7:b5:4c:01:50:e7:1b:0c:4e:6e: 55:f6:05:77:d3:87:55:53:e1:68:96:bb:77:2f:14: bb:05:f8:80:0d:01:6c:a3:08:d9:18:d8:14:a5:88: 9f:54:08:8f:1f:72:79:8b:7f:b7:93:8b:cd:b2:ad: fd:57:81:5f:7d:0a:71:93:62:5f:c5:03:43:4d:22: 8c:df:df:4c:21:52:3c:d9:58:68:b0:8a:98:67:ba: c2:8a:d8:88:4c:5a:d3:82:1c:9e:d5:01:07:83:0e: 19:d4:50:00:7f:10:cc:8a:4a:97:76:ac:bb:65:25: 89:29:20:5f:e2:00:a0:dd:89:e2:0c:33:f4:e6:67: 00:46:99:2a:96:86:ca:78:3a:77:3c:98:7c:d0:eb: e9:47:a7:90:7f:0d:52:eb:80:be:b7:f0:5a:12:22: 11:d5:9e:f0:4b:b4:bd:3d:e3:2e:9d:19:c9:64:b4: 7c:fa:b4:06:c0:f4:11:ab:93:2e:c2:0c:89:db:21: 3b:62:ca:58:cd:79:19:3a:99:c6:23:86:8d:7e:83: 29:bc:46:b1:0d:90:26:c1:15:52:92:31:70:f4:3e: 7c:b7:45:b6:1e:f0:fe:e5:aa:21:cc:8b:97:2a:61: 61:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.80.225.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35186 Signature Algorithm: sha256WithRSAEncryption 85:9a:ba:1e:47:02:00:73:12:75:e4:1e:5e:33:e0:4f:0c:99: c9:54:44:01:7d:85:a5:74:2e:41:03:ab:ee:57:af:cb:04:76: 51:65:91:8f:fa:0e:24:37:a5:66:b8:53:5f:26:99:cd:aa:ac: 6e:88:c9:72:2f:dc:cf:c8:ca:db:ca:b3:11:45:26:e3:a6:33: 56:9d:63:a1:ed:36:19:66:b6:1a:f2:8c:43:f8:cb:64:34:49: 22:59:22:42:33:de:93:f9:39:e2:d9:4f:da:f9:a5:81:40:79: 35:c1:10:cd:83:2b:ac:99:c7:6e:32:43:66:89:6a:1c:a1:c6: bb:b8:78:cf:76:d9:f6:0f:e6:3e:d2:ab:e8:4c:fb:2e:20:21: 34:14:ef:72:e8:06:30:85:03:e5:f9:d8:f6:8e:d3:e8:1d:f2: 33:0c:21:8e:49:bf:33:a3:69:d7:95:3d:85:a9:de:8d:72:bd: fa:d0:a1:0a:9a:70:15:a6:0e:f0:e2:37:a1:98:cb:74:25:45: c5:a0:e7:ea:d9:f1:dd:83:96:f7:12:a8:b4:0d:9e:54:f6:14: 38:c1:7d:3f:03:26:5f:95:4d:da:30:8e:00:67:9b:42:fe:34: cd:b1:85:6f:64:fd:ca:47:cd:fb:94:24:9d:70:4a:8a:97:af: d3:7a:1f:0d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5feaihBAvdHlz2zki+Fn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDkxYmJlYWNmNWIwYzU4OWU5OWI5M2Y4NGUxYzVlNDdkOWFmNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/pIT6FqFwXSBm/ksDnXtXk/ELe1 TAFQ5xsMTm5V9gV304dVU+Folrt3LxS7BfiADQFsowjZGNgUpYifVAiPH3J5i3+3 k4vNsq39V4FffQpxk2JfxQNDTSKM399MIVI82VhosIqYZ7rCitiITFrTghye1QEH gw4Z1FAAfxDMikqXdqy7ZSWJKSBf4gCg3YniDDP05mcARpkqlobKeDp3PJh80Ovp R6eQfw1S64C+t/BaEiIR1Z7wS7S9PeMunRnJZLR8+rQGwPQRq5MuwgyJ2yE7YspY zXkZOpnGI4aNfoMpvEaxDZAmwRVSkjFw9D58t0W2HvD+5aohzIuXKmFhXwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFISRu+rPWwxYnpm5P4ThxeR9mvYEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2FkZjk4 NC03OTU5LTRiYmQtOGE4ZS0yY2JlY2RkZDBkNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvYWRmOTg0 LTc5NTktNGJiZC04YThlLTJjYmVjZGRkMGQ2NC8xL2hKRzc2czliREZpZW1ia19o T0hGNUgyYTlnUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw1DhMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCJcjANBgkqhkiG9w0BAQsFAAOCAQEAhZq6HkcCAHMSdeQeXjPgTwyZyVREAX2F pXQuQQOr7levywR2UWWRj/oOJDelZrhTXyaZzaqsbojJci/cz8jK28qzEUUm46Yz Vp1joe02GWa2GvKMQ/jLZDRJIlkiQjPek/k54tlP2vmlgUB5NcEQzYMrrJnHbjJD ZolqHKHGu7h4z3bZ9g/mPtKr6Ez7LiAhNBTvcugGMIUD5fnY9o7T6B3yMwwhjkm/ M6Np15U9hanejXK9+tChCppwFaYO8OI3oZjLdCVFxaDn6tnx3YOW9xKotA2eVPYU OMF9PwMmX5VN2jCOAGebQv40zbGFb2T9ykfN+5QknXBKipev03ofDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:47 2026 by rpki-client