This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer File: hNt0eyiXF6BoTNasgjB6pnuy17s.cer (raw, json) Hash identifier: 0rlsThh8hG6onHq6wM84roQMHauq1Obm4AKkg55ELd0= Subject key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAADC067FDCF897C07FFE422C30D1E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12363 AS: 206191 IP: 195.110.96.0/19 IP: 2a0e:f080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ad:c0:67:fd:cf:89:7c:07:ff:e4:22:c3:0d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:f5:ef:92:6c:9e:e7:41:c3:0f:03:94:dd: 79:13:15:72:72:45:2c:e5:b7:85:59:a2:dc:42:64: d2:3d:44:17:7c:c3:79:35:48:ed:e9:09:5d:7e:b5: 63:cf:f8:40:9b:4c:0c:8c:7c:7e:01:3f:fe:3b:1f: b3:a6:3f:40:f5:b6:a7:f0:8a:97:a3:d1:02:22:0a: 12:7b:c5:70:cf:86:9e:89:60:14:fd:1c:9b:fd:05: 2e:42:37:d3:56:14:8d:3a:96:ad:93:f9:39:c5:63: e5:c2:b4:8d:c5:ba:e8:c8:61:f2:2b:b7:d3:9d:ea: 43:3a:9d:05:64:68:9c:fd:ca:51:1c:62:9b:cf:7f: c9:c5:db:a7:af:50:14:c0:41:ec:81:3d:50:00:7c: 07:83:0f:ec:22:96:02:b2:ff:69:3c:05:f6:4a:7c: 4b:e8:43:5d:e6:cb:e6:a2:99:7b:87:a5:b5:45:44: bb:7e:58:90:7e:af:85:a9:43:c2:2f:43:27:6f:fa: 4f:95:68:68:6d:9b:6e:e1:d6:43:60:d9:17:0d:f6: f6:99:29:60:59:c6:5a:5c:b2:40:fa:56:cd:c2:9a: e6:60:02:21:4c:60:67:9c:92:4e:e9:8f:05:04:57: 29:5c:b2:d8:b4:c9:4c:1f:e6:aa:1a:b4:78:b5:05: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.110.96.0/19 IPv6: 2a0e:f080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12363 206191 Signature Algorithm: sha256WithRSAEncryption 6f:cf:48:a0:72:e8:8c:5c:a6:ed:84:fa:e7:60:d1:56:55:d1: 3a:f4:f6:b2:99:56:63:9d:c1:8e:ba:f6:89:b1:7f:ed:07:4c: 93:38:26:91:25:6b:50:3d:1d:2e:d1:84:a3:42:16:99:d5:bd: fa:ad:df:d8:36:36:73:ce:aa:9c:5c:12:0f:11:d7:77:7d:b5: 66:a8:83:d7:2f:b8:87:65:af:74:a8:05:f1:0c:03:56:f9:28: 7b:88:ed:9f:f0:f4:58:9b:a4:54:91:aa:8e:b7:9b:77:ae:96: bb:92:98:cf:12:20:2a:a4:d9:69:42:a1:82:c1:2b:da:35:3b: f6:5d:ee:72:46:ee:1c:c2:c1:3e:cd:92:72:90:93:ed:be:7e: a3:d2:d4:58:d5:97:f1:48:6e:06:5b:f9:95:14:07:bc:19:a4: 3c:df:d4:a1:3f:50:62:3e:3d:b7:85:cb:a4:d7:23:55:b4:e6: 45:10:8c:44:07:d1:4a:66:5d:91:2e:d7:32:cc:d4:95:33:ce: 6c:8f:cf:c3:81:4e:61:72:42:32:e9:3c:fd:7b:fb:36:f5:8a: 9c:ee:ad:e8:f2:13:3f:b8:57:d0:16:f7:5e:ce:4d:84:f7:3e: 14:50:bf:21:e9:fa:c6:18:82:6b:54:95:9b:b2:a4:d8:18:88: 87:e8:85:b2 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt26q3AZ/3PiXwH/+Qiww0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGRiNzQ3YjI4OTcxN2EwNjg0Y2Q2YWM4MjMwN2FhNjdiYjJkN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg/175JsnudBww8DlN15ExVyckUs 5beFWaLcQmTSPUQXfMN5NUjt6QldfrVjz/hAm0wMjHx+AT/+Ox+zpj9A9ban8IqX o9ECIgoSe8Vwz4aeiWAU/Ryb/QUuQjfTVhSNOpatk/k5xWPlwrSNxbroyGHyK7fT nepDOp0FZGic/cpRHGKbz3/Jxdunr1AUwEHsgT1QAHwHgw/sIpYCsv9pPAX2SnxL 6ENd5svmopl7h6W1RUS7fliQfq+FqUPCL0Mnb/pPlWhobZtu4dZDYNkXDfb2mSlg WcZaXLJA+lbNwprmYAIhTGBnnJJO6Y8FBFcpXLLYtMlMH+aqGrR4tQVWJQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFITbdHsolxegaEzWrIIweqZ7ste7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzcxNDJi MS03MDkxLTRkM2EtYmQ2ZC05ZmU3ZWU5YzAzNjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvNzE0MmIx LTcwOTEtNGQzYS1iZDZkLTlmZTdlZTljMDM2OC8xL2hOdDBleWlYRjZCb1ROYXNn akI2cG51eTE3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFw25gMA0EAgACMAcDBQAqDvCAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAjBLAgMDJW8wDQYJKoZIhvcNAQELBQADggEBAG/PSKBy 6Ixcpu2E+udg0VZV0Tr09rKZVmOdwY669omxf+0HTJM4JpEla1A9HS7RhKNCFpnV vfqt39g2NnPOqpxcEg8R13d9tWaog9cvuIdlr3SoBfEMA1b5KHuI7Z/w9FibpFSR qo63m3eulruSmM8SICqk2WlCoYLBK9o1O/Zd7nJG7hzCwT7NknKQk+2+fqPS1FjV l/FIbgZb+ZUUB7wZpDzf1KE/UGI+PbeFy6TXI1W05kUQjEQH0UpmXZEu1zLM1JUz zmyPz8OBTmFyQjLpPP17+zb1ipzurejyEz+4V9AW917OTYT3PhRQvyHp+sYYgmtU lZuypNgYiIfohbI= -----END CERTIFICATE-----Generated at Tue Jan 27 19:18:58 2026 by rpki-client