This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer File: hRwTZejd_OV1mPvo3n6oesYD4iw.cer (raw, json) Hash identifier: IOn5RwkGstl9uElaTElV5G0CRCIkOh85f1bvekh2ZYA= Subject key identifier: 85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C675D59658A95234DDB44E708888F1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35283 AS: 50199 IP: 81.19.16.0/20 IP: 85.31.104.0/21 IP: 86.106.152.0/22 IP: 109.232.96.0/21 IP: 176.222.208.0/21 IP: 193.106.36.0/22 IP: 195.26.96.0/20 IP: 2001:1b58::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:75:d5:96:58:a9:52:34:dd:b4:4e:70:88:88:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:7d:43:ba:e9:f1:b5:8b:a6:d7:fa:8e:e6: 23:04:1d:6c:34:0a:ff:f8:ec:0c:06:dc:2d:23:c4: 36:ca:be:3c:01:20:78:a6:74:b7:ea:e1:45:0b:4c: 49:3d:e3:eb:ec:f5:b5:ee:c2:7f:1b:d4:3f:31:b8: d7:14:12:ab:9b:45:1c:88:a7:c6:68:51:c0:2f:46: 6a:be:ae:e6:f4:16:ac:9d:c1:fa:03:b1:24:d9:ec: 69:3d:2c:2f:e4:8f:b5:10:86:75:8b:5e:b3:e1:36: c6:ae:8b:51:c3:45:90:f5:6f:d2:29:48:29:92:1e: 7b:e9:d4:64:29:83:84:19:f9:d6:50:5b:78:69:cb: 4c:4a:8a:df:64:54:fb:3f:83:5a:fe:43:54:8b:4e: a4:1a:77:2c:e9:f3:13:93:c6:36:77:13:ec:25:fb: f0:92:02:4f:37:49:74:9e:7b:d5:9b:14:61:34:18: 4e:e9:ce:39:13:00:7d:be:57:87:1c:f0:eb:cc:77: 00:40:67:e6:b9:3e:de:d0:f8:8a:7d:f3:4b:6c:a0: ee:fb:38:45:c2:2b:94:93:b0:de:2c:45:cd:94:58: e5:78:1e:79:45:16:18:5f:c4:ef:48:95:2a:ca:8e: ff:32:24:f1:47:3d:97:f2:e5:55:ab:40:65:5b:8d: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.16.0/20 85.31.104.0/21 86.106.152.0/22 109.232.96.0/21 176.222.208.0/21 193.106.36.0/22 195.26.96.0/20 IPv6: 2001:1b58::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35283 50199 Signature Algorithm: sha256WithRSAEncryption 9b:14:e8:8f:18:61:ec:b0:08:3e:a1:0f:21:00:a8:c8:66:13: 3f:a8:f0:3b:d1:9f:19:8f:13:62:0d:99:75:0e:d7:50:49:53: 91:38:1d:09:f1:40:d5:7f:fc:e0:5e:a9:32:1f:04:c2:17:01: 8e:25:cb:42:6b:33:7b:a6:7c:c6:b8:f5:07:f0:01:0a:f7:ed: 6a:ac:ba:db:4c:9c:73:f8:f7:65:f1:72:5a:b0:90:40:97:f1: e4:d2:8a:ee:57:f6:2b:23:cc:33:38:e5:0c:6e:27:01:35:f5: 60:22:64:81:74:57:57:b3:de:26:3a:0c:c7:9c:dd:ea:96:f7: 9a:37:a8:ec:0e:36:48:36:b3:36:83:cf:6b:13:60:9a:d4:c5: da:99:3f:ce:fb:95:fc:cc:ef:85:e6:53:80:6a:20:fd:5e:95: c6:ec:da:16:fe:97:93:ca:71:b3:18:c8:f4:ca:e1:cc:ef:91: 88:cb:9a:f0:8f:67:bd:e3:99:7d:c4:8b:29:15:16:4a:26:bf: bc:e0:88:9b:52:0f:21:d7:81:16:12:87:47:61:04:9f:30:df: be:3d:e5:60:c7:48:ce:82:eb:77:c7:c7:68:5a:65:4c:f8:2e: b8:df:1e:af:27:90:55:40:71:63:96:40:aa:4f:0d:ce:25:0d: 59:e4:fe:1a -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt3xnXVllipUjTdtE5wiIjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTFjMTM2NWU4ZGRmY2U1NzU5OGZiZThkZTdlYTg3YWM2MDNlMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nx9Q7rp8bWLptf6juYjBB1sNAr/ +OwMBtwtI8Q2yr48ASB4pnS36uFFC0xJPePr7PW17sJ/G9Q/MbjXFBKrm0UciKfG aFHAL0Zqvq7m9BasncH6A7Ek2expPSwv5I+1EIZ1i16z4TbGrotRw0WQ9W/SKUgp kh576dRkKYOEGfnWUFt4actMSorfZFT7P4Na/kNUi06kGncs6fMTk8Y2dxPsJfvw kgJPN0l0nnvVmxRhNBhO6c45EwB9vleHHPDrzHcAQGfmuT7e0PiKffNLbKDu+zhF wiuUk7DeLEXNlFjleB55RRYYX8TvSJUqyo7/MiTxRz2X8uVVq0BlW43T0wIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFIUcE2Xo3fzldZj76N5+qHrGA+IsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzM1MjJl OS04NmUwLTRiNWEtYTJjOC0wMGYwNjAxMjUyYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMzUyMmU5 LTg2ZTAtNGI1YS1hMmM4LTAwZjA2MDEyNTJjOC8xL2hSd1RaZWpkX09WMW1Qdm8z bjZvZXNZRDRpdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQEURMQAwQDVR9oAwQCVmqYAwQDbehgAwQDsN7Q AwQCwWokAwQEwxpgMA0EAgACMAcDBQMgARtYMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwCJ0wIDAMQXMA0GCSqGSIb3DQEBCwUAA4IBAQCbFOiPGGHssAg+oQ8hAKjI ZhM/qPA70Z8ZjxNiDZl1DtdQSVOROB0J8UDVf/zgXqkyHwTCFwGOJctCazN7pnzG uPUH8AEK9+1qrLrbTJxz+Pdl8XJasJBAl/Hk0oruV/YrI8wzOOUMbicBNfVgImSB dFdXs94mOgzHnN3qlveaN6jsDjZINrM2g89rE2Ca1MXamT/O+5X8zO+F5lOAaiD9 XpXG7NoW/peTynGzGMj0yuHM75GIy5rwj2e945l9xIspFRZKJr+84IibUg8h14EW EodHYQSfMN++PeVgx0jOgut3x8doWmVM+C643x6vJ5BVQHFjlkCqTw3OJQ1Z5P4a -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:38 2026 by rpki-client