This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer File: hRwoH1drQ6HKuVPJIEHOlZknDHg.cer (raw, json) Hash identifier: ccNEjePKRB3GTXIcMR/TawEpjcS/EhrYVKV9TsOqRd4= Subject key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA46955455AA0810BED8D53BE8CF3B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57793 AS: 198722 IP: 45.83.168.0/22 IP: 91.227.26.0/24 IP: 95.131.80.0/21 IP: 134.0.16.0/21 IP: 185.27.32.0/22 IP: 185.42.196.0/22 IP: 185.53.92.0/22 IP: 185.75.120.0/22 IP: 185.164.44.0/22 IP: 188.114.112.0/21 IP: 2a02:ef8::/32 IP: 2a05:5240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:69:55:45:5a:a0:81:0b:ed:8d:53:be:8c:f3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=851c281f576b43a1cab953c92041ce9599270c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:8b:16:da:f2:15:f0:2a:e5:09:16:99:74: 15:ef:38:78:56:d8:ff:fd:a7:4d:1b:2f:32:bd:54: 67:a3:45:d0:02:ba:41:90:31:ff:16:2b:4a:66:85: 2a:1d:90:45:33:4b:07:61:21:bb:50:3a:b2:7d:67: 95:d2:27:1d:d5:65:a0:d4:ca:1a:1e:88:c9:70:01: 5c:f1:ef:aa:7d:cb:d7:d5:71:e4:59:89:51:c6:9e: f7:fd:61:83:b8:e5:64:e2:a3:5e:18:93:a2:47:f0: ba:09:94:95:1b:ad:a4:6b:99:3f:f0:50:33:ce:c9: d3:62:85:79:32:29:50:58:ea:88:a7:7c:6f:94:4f: 6f:8d:7f:30:80:e1:31:3b:87:30:af:dd:42:fc:f0: bc:1f:05:56:d8:34:da:b4:19:ba:75:79:5d:bd:ae: bc:b4:80:6c:94:61:99:5a:b1:e5:17:42:65:60:9a: 09:bd:41:ef:ca:f8:c3:63:65:34:eb:da:fb:c4:3c: 42:05:d1:8d:ab:0a:95:99:d7:68:e3:84:5a:f5:5d: aa:c4:28:99:73:34:a2:f5:30:58:59:26:e1:19:da: b8:c1:8e:f2:12:0e:05:a8:d1:8c:33:12:0e:98:b0: 76:b0:5e:0a:81:91:13:d0:64:13:4c:d7:d3:7d:8d: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.168.0/22 91.227.26.0/24 95.131.80.0/21 134.0.16.0/21 185.27.32.0/22 185.42.196.0/22 185.53.92.0/22 185.75.120.0/22 185.164.44.0/22 188.114.112.0/21 IPv6: 2a02:ef8::/32 2a05:5240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57793 198722 Signature Algorithm: sha256WithRSAEncryption 0a:7b:84:8e:c2:72:f9:fd:3c:69:79:32:02:6f:9c:9f:17:57: 41:7c:6f:f5:fe:a6:d1:c5:3c:0f:06:f1:fb:9b:73:14:c8:71: 76:00:42:94:37:a2:5a:d1:dd:23:e0:56:d3:b3:92:b9:9a:8d: a7:6b:1e:1b:ab:bd:41:f2:32:d8:ab:a5:a2:7e:2c:86:c4:1f: 98:8b:35:ad:df:cc:b9:e9:19:f4:71:51:05:f8:a5:f3:2c:bd: ef:b9:3a:1c:4b:f2:ba:ff:8f:c9:20:ac:c2:1b:b5:36:83:f1: a0:3d:a5:68:e8:37:b0:91:4f:52:d6:77:6f:ef:e0:d7:5f:0a: 8e:a4:06:42:fd:52:d9:47:ff:af:ce:4d:e6:a7:fb:f6:9e:d4: d0:95:a0:aa:13:40:d2:f8:12:bf:2f:be:1d:bc:f3:a7:ba:1d: cf:c3:59:39:9d:45:c0:d4:28:d8:ed:7c:9e:63:d9:e3:43:93: c9:81:d3:1a:30:b6:da:36:8a:fd:53:4a:c2:a0:a9:70:d3:38: 93:29:b3:66:af:3a:4f:89:36:c3:46:71:fa:ba:d0:b5:73:cb: 94:2d:dd:a8:59:cd:7c:40:37:87:86:3f:2b:72:2e:02:c8:47: 37:0e:9f:97:8c:82:d9:14:67:1b:b5:7f:5e:74:d3:6f:35:16: bf:ad:73:35 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt7pGlVRVqggQvtjVO+jPO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTFjMjgxZjU3NmI0M2ExY2FiOTUzYzkyMDQxY2U5NTk5MjcwYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRqLFtryFfAq5QkWmXQV7zh4Vtj/ /adNGy8yvVRno0XQArpBkDH/FitKZoUqHZBFM0sHYSG7UDqyfWeV0icd1WWg1Moa HojJcAFc8e+qfcvX1XHkWYlRxp73/WGDuOVk4qNeGJOiR/C6CZSVG62ka5k/8FAz zsnTYoV5MilQWOqIp3xvlE9vjX8wgOExO4cwr91C/PC8HwVW2DTatBm6dXldva68 tIBslGGZWrHlF0JlYJoJvUHvyvjDY2U069r7xDxCBdGNqwqVmddo44Ra9V2qxCiZ czSi9TBYWSbhGdq4wY7yEg4FqNGMMxIOmLB2sF4KgZET0GQTTNfTfY0M/wIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFIUcKB9Xa0OhyrlTySBBzpWZJwx4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzRhNjhh Ny1kYzMxLTQwZmEtYTExMC05MWQ1NjIwMGJhZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvNGE2OGE3 LWRjMzEtNDBmYS1hMTEwLTkxZDU2MjAwYmFmNC8xL2hSd29IMWRyUTZIS3VWUEpJ RUhPbFprbkRIZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF BwEHAQH/BFwwWjBCBAIAATA8AwQCLVOoAwQAW+MaAwQDX4NQAwQDhgAQAwQCuRsg AwQCuSrEAwQCuTVcAwQCuUt4AwQCuaQsAwQDvHJwMBQEAgACMA4DBQAqAg74AwUD KgVSQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA4cECAwMIQjANBgkqhkiG9w0B AQsFAAOCAQEACnuEjsJy+f08aXkyAm+cnxdXQXxv9f6m0cU8Dwbx+5tzFMhxdgBC lDeiWtHdI+BW07OSuZqNp2seG6u9QfIy2Kulon4shsQfmIs1rd/MuekZ9HFRBfil 8yy977k6HEvyuv+PySCswhu1NoPxoD2laOg3sJFPUtZ3b+/g118KjqQGQv1S2Uf/ r85N5qf79p7U0JWgqhNA0vgSvy++Hbzzp7odz8NZOZ1FwNQo2O18nmPZ40OTyYHT GjC22jaK/VNKwqCpcNM4kymzZq86T4k2w0Zx+rrQtXPLlC3dqFnNfEA3h4Y/K3Iu AshHNw6fl4yC2RRnG7V/XnTTbzUWv61zNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:08 2026 by rpki-client