This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hRRRk1wYRkb4aHgjivsKDVqwut4.cer File: hRRRk1wYRkb4aHgjivsKDVqwut4.cer (raw, json) Hash identifier: 5x4zMmUR2x2JuUW5ItHy1BB3UejsBDlz/4ea2ZKYrZc= Subject key identifier: 85:14:51:93:5C:18:46:46:F8:68:78:23:8A:FB:0A:0D:5A:B0:BA:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5ADF8A27962C09C75A8F45B792B9E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/hRRRk1wYRkb4aHgjivsKDVqwut4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205273 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:df:8a:27:96:2c:09:c7:5a:8f:45:b7:92:b9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=851451935c184646f86878238afb0a0d5ab0bade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:24:70:1e:75:97:b5:d6:7a:9f:53:34:1d: bc:d7:10:04:29:6d:7c:86:eb:ac:2b:ae:58:f5:50: 9a:1e:95:11:74:fd:00:fc:b7:e8:5e:a8:b4:02:16: eb:d9:fc:9b:48:c0:9c:1d:5b:b6:29:55:d7:4f:1f: 30:5f:7e:56:30:9d:20:a0:90:dd:63:17:61:82:54: 82:b2:8f:b7:d9:b2:da:05:98:71:ce:39:db:87:20: 02:bb:57:2a:ae:7b:d3:3d:55:7a:d1:12:13:81:4f: 9d:81:45:b7:77:ed:fc:43:92:ed:47:34:42:9d:a2: 27:e8:c0:a5:d6:07:6e:a0:23:a9:25:e9:94:97:73: ce:92:e4:ee:ba:30:84:1d:99:74:5d:95:df:58:15: 90:9a:e2:4c:2f:a4:cc:7c:be:5c:da:f9:2c:73:f7: 51:b9:a9:0d:2c:b8:28:df:c0:12:fc:76:d2:7d:be: 45:cb:ba:ab:c9:1a:91:fb:b5:53:8c:8f:c6:67:d7: c4:aa:15:e6:23:42:fb:61:50:e0:9b:8e:c3:8c:29: 1f:0e:84:87:1e:64:05:c2:af:96:27:e9:ca:20:82: e3:34:cc:e8:90:6f:83:e7:6a:8a:35:df:84:cc:85: ad:00:a1:6e:5e:63:83:9a:3f:4c:77:a0:b1:7b:82: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:14:51:93:5C:18:46:46:F8:68:78:23:8A:FB:0A:0D:5A:B0:BA:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/db69b3-781e-4cb9-9edf-6dd6a9c55f57/1/hRRRk1wYRkb4aHgjivsKDVqwut4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205273 Signature Algorithm: sha256WithRSAEncryption 38:b2:49:4e:40:ec:04:e3:5f:f5:4f:55:e7:61:f9:42:92:e8: e8:a5:1a:86:c8:04:f5:23:8c:9c:f4:c1:72:ba:f2:a3:e1:da: 86:3d:7e:af:06:54:34:71:92:46:4b:e9:b8:cf:6a:99:da:ed: 44:a5:7c:ad:93:c4:a3:c6:99:6c:58:80:da:a4:72:e7:73:6f: ac:aa:22:d8:d5:c6:80:d0:23:a0:6f:ec:e9:b0:1f:ab:e9:76: 34:d1:4b:09:f6:ef:36:9b:f9:46:2f:a9:ec:d1:a9:95:ee:39: 3e:3a:ae:37:14:ad:f2:c0:50:d7:22:c9:3e:bc:09:64:6f:6c: ed:4e:bd:76:6d:4d:7f:e0:5b:70:c5:77:78:10:de:7f:15:13: d4:d0:06:1e:d1:ad:c9:1b:5f:c3:7f:77:46:45:a4:ff:16:3a: ab:a9:91:b3:f2:05:53:34:10:74:90:ba:55:ff:62:9d:dd:af: cc:b2:87:58:6e:3e:45:75:06:e4:24:09:73:da:56:a4:d2:21: 97:d0:53:7c:5e:b3:94:7d:8d:d7:c1:e0:c5:de:b6:a1:42:f8: 99:5d:1e:85:e5:23:86:4e:d7:5e:4e:63:ee:d7:2e:95:4a:a8: cb:6c:54:6b:3d:22:be:c7:7a:eb:d6:99:a3:8b:0c:1a:c8:c5: c9:3d:05:4c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9Wt+KJ5YsCcdaj0W3krnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTE0NTE5MzVjMTg0NjQ2Zjg2ODc4MjM4YWZiMGEwZDVhYjBiYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZwkcB51l7XWep9TNB281xAEKW18 huusK65Y9VCaHpURdP0A/LfoXqi0Ahbr2fybSMCcHVu2KVXXTx8wX35WMJ0goJDd YxdhglSCso+32bLaBZhxzjnbhyACu1cqrnvTPVV60RITgU+dgUW3d+38Q5LtRzRC naIn6MCl1gduoCOpJemUl3POkuTuujCEHZl0XZXfWBWQmuJML6TMfL5c2vksc/dR uakNLLgo38AS/HbSfb5Fy7qryRqR+7VTjI/GZ9fEqhXmI0L7YVDgm47DjCkfDoSH HmQFwq+WJ+nKIILjNMzokG+D52qKNd+EzIWtAKFuXmODmj9Md6Cxe4Kr+wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIUUUZNcGEZG+Gh4I4r7Cg1asLreMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2RiNjli My03ODFlLTRjYjktOWVkZi02ZGQ2YTljNTVmNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZGI2OWIz LTc4MWUtNGNiOS05ZWRmLTZkZDZhOWM1NWY1Ny8xL2hSUlJrMXdZUmtiNGFIZ2pp dnNLRFZxd3V0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMh2TANBgkqhkiG9w0BAQsFAAOCAQEAOLJJTkDsBONf 9U9V52H5QpLo6KUahsgE9SOMnPTBcrryo+Hahj1+rwZUNHGSRkvpuM9qmdrtRKV8 rZPEo8aZbFiA2qRy53NvrKoi2NXGgNAjoG/s6bAfq+l2NNFLCfbvNpv5Ri+p7NGp le45PjquNxSt8sBQ1yLJPrwJZG9s7U69dm1Nf+BbcMV3eBDefxUT1NAGHtGtyRtf w393RkWk/xY6q6mRs/IFUzQQdJC6Vf9ind2vzLKHWG4+RXUG5CQJc9pWpNIhl9BT fF6zlH2N18Hgxd62oUL4mV0eheUjhk7XXk5j7tculUqoy2xUaz0ivsd669aZo4sM GsjFyT0FTA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:43 2026 by rpki-client