This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer File: hTodtQq3cdy1KTZ92VGmfKzEhSc.cer (raw, json) Hash identifier: iFVojviy3fUh9Cm5cNMkh6Tkvvhz57Z7y1/9jk7CJjg= Subject key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36033FF3E179BBD1F56D5F95AB06C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207933 IP: 194.127.252.0/23 IP: 194.145.112.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:60:33:ff:3e:17:9b:bd:1f:56:d5:f9:5a:b0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=853a1db50ab771dcb529367dd951a67cacc48527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:31:77:a1:8e:40:73:fe:c2:88:63:5a:dc:6c: b8:9a:05:db:b2:2f:9f:47:65:04:38:57:cc:cf:0a: 29:5f:a9:4a:65:28:06:da:78:d7:56:e7:f2:48:bf: 5b:0b:09:1a:bd:71:51:f8:80:6b:76:68:b5:ce:02: fd:fd:57:f2:19:b4:42:a0:9f:06:f2:11:4d:31:74: 73:61:ee:74:bc:76:c1:3c:7c:41:d5:b3:e9:ce:2c: 7f:f2:cd:d0:7c:e0:b9:79:c7:8b:d8:52:4c:0b:f8: 8e:4c:8f:0d:df:fd:8a:33:7f:31:2c:48:30:32:ea: db:64:2f:6b:32:0e:13:2a:29:5a:8b:c3:8c:25:53: 1d:2a:81:b6:c2:de:fb:a9:10:64:8b:d7:70:66:82: d8:63:5b:13:ea:a0:2b:4b:d3:7c:75:e3:ff:f3:20: a1:fd:c2:81:1a:4a:b9:dc:e5:e0:fc:92:b7:54:3a: b3:25:39:5c:16:48:98:94:2a:a9:13:2f:13:87:38: 12:cf:d8:9d:3c:de:cd:7f:a9:b6:e2:22:60:07:2b: 5a:69:22:cd:5d:88:97:36:cd:44:5b:22:77:d8:fc: 1f:8d:ec:91:97:86:f1:ca:3c:16:cd:01:f9:13:01: b4:8a:7c:74:52:fb:83:08:c5:99:41:44:d4:4e:71: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.252.0/23 194.145.112.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207933 Signature Algorithm: sha256WithRSAEncryption 75:03:93:fc:f1:38:f2:26:27:fb:64:c4:71:0b:f8:cb:e9:7f: a7:53:5a:3c:60:8f:57:62:65:97:7a:82:fe:fa:cb:12:5f:47: 8a:1c:18:55:21:46:74:b6:3c:d5:bb:96:25:f8:ef:ed:50:c4: 1a:e0:53:c6:e0:45:73:4e:fe:50:b5:f7:e3:95:83:a9:43:3e: f5:ef:c1:4f:4f:1e:61:58:70:be:20:fa:de:fa:02:a2:a8:a1: 71:06:02:56:ee:6e:ad:8d:5f:2a:ab:b0:3f:55:22:3c:88:f9: d1:54:a6:b6:b9:05:e0:2e:4b:73:fd:e5:82:cb:85:7f:79:7f: c2:f0:c7:b0:4a:2f:d1:eb:16:52:30:4c:1c:7b:52:2d:9e:cb: 00:1f:0e:48:dd:cb:cb:02:ec:e8:ed:40:4b:a5:af:f6:6b:3b: 4e:fb:c1:97:69:00:49:e2:99:23:d9:ff:ce:12:ed:b1:aa:58: bf:12:6d:7f:72:dd:2d:49:72:18:86:17:23:db:f2:ce:d8:5f: 45:11:05:cc:d3:b5:75:70:f9:70:02:a8:d7:dd:bd:61:ba:7e: ec:f3:15:2d:0e:d1:14:3b:75:ea:d4:0d:73:d5:14:3d:69:a5: c9:e4:ce:f3:d5:46:38:8e:9e:53:cc:88:c6:af:b3:cb:73:83: 54:90:0a:73 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt4o2Az/z4Xm70fVtX5WrBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTNhMWRiNTBhYjc3MWRjYjUyOTM2N2RkOTUxYTY3Y2FjYzQ4NTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jF3oY5Ac/7CiGNa3Gy4mgXbsi+f R2UEOFfMzwopX6lKZSgG2njXVufySL9bCwkavXFR+IBrdmi1zgL9/VfyGbRCoJ8G 8hFNMXRzYe50vHbBPHxB1bPpzix/8s3QfOC5eceL2FJMC/iOTI8N3/2KM38xLEgw MurbZC9rMg4TKilai8OMJVMdKoG2wt77qRBki9dwZoLYY1sT6qArS9N8deP/8yCh /cKBGkq53OXg/JK3VDqzJTlcFkiYlCqpEy8ThzgSz9idPN7Nf6m24iJgBytaaSLN XYiXNs1EWyJ32PwfjeyRl4bxyjwWzQH5EwG0inx0UvuDCMWZQUTUTnFulQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIU6HbUKt3HctSk2fdlRpnysxIUnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxL2RjNjZm My04YWM5LTQxYjktOGViOC03NzI5NWM5Y2U4NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvZGM2NmYz LThhYzktNDFiOS04ZWI4LTc3Mjk1YzljZTg2Ni8xL2hUb2R0UXEzY2R5MUtUWjky VkdtZkt6RWhTYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwn/8AwQBwpFwMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMsPTANBgkqhkiG9w0BAQsFAAOCAQEAdQOT/PE48iYn+2TEcQv4y+l/ p1NaPGCPV2Jll3qC/vrLEl9HihwYVSFGdLY81buWJfjv7VDEGuBTxuBFc07+ULX3 45WDqUM+9e/BT08eYVhwviD63voCoqihcQYCVu5urY1fKquwP1UiPIj50VSmtrkF 4C5Lc/3lgsuFf3l/wvDHsEov0esWUjBMHHtSLZ7LAB8OSN3LywLs6O1AS6Wv9ms7 TvvBl2kASeKZI9n/zhLtsapYvxJtf3LdLUlyGIYXI9vyzthfRREFzNO1dXD5cAKo 1929Ybp+7PMVLQ7RFDt16tQNc9UUPWmlyeTO89VGOI6eU8yIxq+zy3ODVJAKcw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:55 2026 by rpki-client