This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer (raw, json) Hash identifier: 7wSWG2pSLq7h+hLag6CZW7mMW9rzOSvxmR2YC624Xcs= Subject key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA729D5041BE02D1D01F1A3AC9D26C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34702 IP: 46.22.208.0/20 IP: 80.79.112.0/20 IP: 185.246.184.0/22 IP: 2a01:97a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:29:d5:04:1b:e0:2d:1d:01:f1:a3:ac:9d:26:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:d3:fb:5b:b6:71:86:ce:62:c8:d4:aa:bf: fe:00:35:5a:91:42:36:5a:d8:f5:fd:9c:99:a6:ef: cf:c6:5c:34:3f:37:05:30:86:3c:47:88:a2:ce:aa: ba:25:b3:2c:d9:8b:3d:1c:ae:59:74:35:33:ba:2e: 96:d0:b3:b7:75:73:b1:26:a2:81:70:90:61:a4:5e: 46:4b:24:d9:95:bd:c2:b7:16:98:0d:f3:36:0f:8c: 46:56:6a:60:c3:a8:c7:7f:c8:5f:a2:6c:9e:de:43: aa:a4:29:2c:4f:ff:bd:5c:37:86:2f:2b:8b:ca:29: 94:f7:43:db:57:31:35:a6:25:ac:11:17:30:ef:ec: 63:50:ec:f9:48:a6:f2:a4:97:cd:54:2f:6a:5b:7e: d9:1b:03:f8:18:b5:e2:cd:2a:79:87:e5:86:6c:17: 43:31:8c:b0:f0:c5:af:72:08:2d:5d:c0:87:1a:1b: bd:ea:70:a1:8d:ef:39:82:f6:4b:07:16:7c:e7:ac: 26:6a:a7:99:57:1d:cb:86:ca:84:cf:f3:13:f1:0b: ce:73:bf:c6:e3:6c:d7:9f:6a:b1:17:58:7d:0f:f9: e0:34:d4:29:78:c6:9b:db:c6:08:71:69:81:a5:97: 67:4f:b8:58:80:49:7f:d8:64:fb:49:28:a0:54:94: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.208.0/20 80.79.112.0/20 185.246.184.0/22 IPv6: 2a01:97a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34702 Signature Algorithm: sha256WithRSAEncryption a9:b7:e2:10:26:b1:59:33:16:ee:bd:c9:fa:1f:c1:9a:c3:f2: 6c:a3:b7:d9:f7:14:5c:50:03:8d:65:7e:fc:71:0e:ae:ae:ac: 88:63:5a:6c:96:bc:b9:5a:e3:d3:4f:45:28:db:68:23:2b:a9: d1:8e:87:a3:c8:94:dc:1c:02:6d:3d:ce:ba:28:6d:02:7c:ed: 8b:08:8b:27:a4:c9:59:b4:b5:f1:5b:74:c7:79:cd:18:47:ec: 97:72:c9:36:17:5c:7b:4c:8b:0d:d5:15:96:51:56:b8:92:c6: b9:4f:b3:04:ac:0f:b7:ad:c3:e2:06:ed:2f:39:2b:f0:a5:7d: cb:42:b7:e7:7c:d3:de:e7:e0:4e:9f:0e:c4:6b:fc:ae:94:ac: 5e:b0:89:41:40:92:0a:e8:ad:30:b8:bf:bd:ce:be:6a:3b:f0: 39:d4:12:5b:69:ef:6f:96:f5:77:1a:c1:c6:1a:27:ae:b4:c2: 38:b7:6c:cd:9a:90:dc:85:48:2b:3a:5b:d2:fe:b4:7c:0e:32: 0d:7d:90:d4:7e:6f:4a:d4:2f:18:cc:d6:43:82:1a:97:79:9a: 26:1e:20:60:96:3c:b5:cc:ab:04:0c:db:9d:00:a2:f9:69:b0: f6:20:c4:cd:61:0c:f6:8d:df:b8:38:e6:95:01:44:c5:9f:d0: 18:47:44:1c -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt+pynVBBvgLR0B8aOsnSbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTM3MGNjNWQyNjBmM2UyYWVmZjVkZDhmOGY0YTQxNWEyMzQ1YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR3T+1u2cYbOYsjUqr/+ADVakUI2 Wtj1/ZyZpu/Pxlw0PzcFMIY8R4iizqq6JbMs2Ys9HK5ZdDUzui6W0LO3dXOxJqKB cJBhpF5GSyTZlb3CtxaYDfM2D4xGVmpgw6jHf8hfomye3kOqpCksT/+9XDeGLyuL yimU90PbVzE1piWsERcw7+xjUOz5SKbypJfNVC9qW37ZGwP4GLXizSp5h+WGbBdD MYyw8MWvcggtXcCHGhu96nChje85gvZLBxZ856wmaqeZVx3LhsqEz/MT8QvOc7/G 42zXn2qxF1h9D/ngNNQpeMab28YIcWmBpZdnT7hYgEl/2GT7SSigVJRMAwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFIU3DMXSYPPirv9d2Pj0pBWiNFqBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzRmNzI0 Ni1jZThmLTQ0ZjgtYTgzMS1hZTYwYmVhMDZhOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvNGY3MjQ2 LWNlOGYtNDRmOC1hODMxLWFlNjBiZWEwNmE5Yy8xL2hUY014ZEpnOC1LdV8xM1kt UFNrRmFJMFdvRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQELhbQAwQEUE9wAwQCufa4MA0EAgACMAcDBQAq AZegMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCHjjANBgkqhkiG9w0BAQsFAAOC AQEAqbfiECaxWTMW7r3J+h/BmsPybKO32fcUXFADjWV+/HEOrq6siGNabJa8uVrj 009FKNtoIyup0Y6Ho8iU3BwCbT3OuihtAnztiwiLJ6TJWbS18Vt0x3nNGEfsl3LJ Nhdce0yLDdUVllFWuJLGuU+zBKwPt63D4gbtLzkr8KV9y0K353zT3ufgTp8OxGv8 rpSsXrCJQUCSCuitMLi/vc6+ajvwOdQSW2nvb5b1dxrBxhonrrTCOLdszZqQ3IVI Kzpb0v60fA4yDX2Q1H5vStQvGMzWQ4Ial3maJh4gYJY8tcyrBAzbnQCi+Wmw9iDE zWEM9o3fuDjmlQFExZ/QGEdEHA== -----END CERTIFICATE-----Generated at Sun Jan 18 14:17:48 2026 by rpki-client