This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer File: hTq7t9e8xKXFbpEu76wbC7BFUCE.cer (raw, json) Hash identifier: 1pSSMKb16D6qzqhlr5DdArQLWitmlgoLvR+Zde6bJiY= Subject key identifier: 85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88AD0F5A7BFDA64CCD327BED2D9C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215374 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8a:d0:f5:a7:bf:da:64:cc:d3:27:be:d2:d9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:12:20:9b:cc:c5:89:db:53:41:6a:48:15: d8:c6:23:d3:e6:91:4e:42:bf:ab:53:a9:00:45:70: 57:f7:a6:ce:83:b7:be:7b:14:af:55:7c:4e:15:4d: 80:58:c2:65:e7:2f:c8:33:33:f1:b7:83:fa:55:4c: e1:c2:91:77:b7:6a:53:62:57:7b:b5:03:eb:b1:05: 5a:19:62:20:19:04:16:f4:b7:86:b6:8b:f4:68:be: d6:39:b8:a6:14:11:ff:c0:30:05:bc:a5:57:62:d7: 3b:f9:88:3c:e7:c5:b1:12:d7:1e:59:c6:90:d4:59: bc:77:e1:b6:f0:c1:ff:31:2c:3e:25:ae:be:ec:39: ed:c8:bf:86:7c:6f:3f:09:ee:11:20:97:ac:06:4a: 82:4e:ee:f8:aa:29:c4:f8:2e:b1:71:9f:21:21:2b: de:08:a5:24:69:9f:30:34:95:0f:ba:63:e9:55:76: 44:00:68:a5:48:5f:97:b1:42:f1:3d:fb:1f:50:2a: 82:db:f0:67:1f:56:ec:a4:d5:d6:39:b6:df:b7:73: c9:37:b0:86:57:76:b2:c9:84:c9:d3:b5:3a:10:15: 74:7a:9e:56:b6:52:9e:a6:ad:25:d0:e7:7c:71:1d: 83:e1:35:8e:6e:21:da:dc:57:a0:0a:df:a8:fd:21: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215374 Signature Algorithm: sha256WithRSAEncryption ad:ba:88:4c:b1:0a:aa:f6:86:69:ec:1f:ec:e4:c4:5b:19:b9: 14:04:31:85:b9:56:e9:22:85:47:a5:5b:3e:e3:70:b1:bb:f0: b3:ea:29:12:d0:6c:a6:ed:34:97:1c:4b:43:6f:5d:b3:f7:21: ac:4a:6d:9b:75:c7:c1:56:61:ac:ae:08:76:fd:f2:c1:3e:c4: a7:e3:9e:e9:b4:5f:f7:18:8c:05:1f:e1:d5:ad:85:0b:7e:e4: 49:a0:4b:1b:ce:f6:55:81:80:43:92:63:a4:6e:db:11:13:a2: 3b:1e:12:6a:6a:68:7d:44:e0:b8:1e:09:66:de:2b:77:c4:5d: d0:13:4a:8d:d2:85:1c:4e:0b:8c:16:86:3a:87:72:6a:2d:36: 4f:6c:92:ab:6c:63:49:09:a0:bc:8c:5f:64:c7:25:28:a9:76: ef:d7:94:bd:4a:f9:25:4b:97:2a:a2:e7:2e:eb:82:ba:74:bf: e0:b5:31:40:f4:8b:fe:e3:79:11:5b:82:14:29:14:e4:72:ea: 67:06:12:f2:48:22:c4:71:51:ae:de:a7:e3:04:b7:a7:b9:28: 07:36:f3:79:b4:1d:97:69:f2:be:61:ea:06:b7:0f:48:4b:30: e6:89:11:b6:e9:e5:58:28:75:96:03:ed:db:0f:fe:82:eb:7b: d5:fe:09:84 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yIrQ9ae/2mTM0ye+0tnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTNhYmJiN2Q3YmNjNGE1YzU2ZTkxMmVlZmFjMWIwYmIwNDU1MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3gSIJvMxYnbU0FqSBXYxiPT5pFO Qr+rU6kARXBX96bOg7e+exSvVXxOFU2AWMJl5y/IMzPxt4P6VUzhwpF3t2pTYld7 tQPrsQVaGWIgGQQW9LeGtov0aL7WObimFBH/wDAFvKVXYtc7+Yg858WxEtceWcaQ 1Fm8d+G28MH/MSw+Ja6+7DntyL+GfG8/Ce4RIJesBkqCTu74qinE+C6xcZ8hISve CKUkaZ8wNJUPumPpVXZEAGilSF+XsULxPfsfUCqC2/BnH1bspNXWObbft3PJN7CG V3ayyYTJ07U6EBV0ep5WtlKepq0l0Od8cR2D4TWObiHa3FegCt+o/SGhQwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIU6u7fXvMSlxW6RLu+sGwuwRVAhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzQyMzhh ZS1hNzJmLTQ3MWMtYTlhOS01ODIzZjg3MDE0MWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNDIzOGFl LWE3MmYtNDcxYy1hOWE5LTU4MjNmODcwMTQxYi8xL2hUcTd0OWU4eEtYRmJwRXU3 NndiQzdCRlVDRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJTjANBgkqhkiG9w0BAQsFAAOCAQEArbqITLEKqvaG aewf7OTEWxm5FAQxhblW6SKFR6VbPuNwsbvws+opEtBspu00lxxLQ29ds/chrEpt m3XHwVZhrK4Idv3ywT7Ep+Oe6bRf9xiMBR/h1a2FC37kSaBLG872VYGAQ5JjpG7b EROiOx4SampofUTguB4JZt4rd8Rd0BNKjdKFHE4LjBaGOodyai02T2ySq2xjSQmg vIxfZMclKKl279eUvUr5JUuXKqLnLuuCunS/4LUxQPSL/uN5EVuCFCkU5HLqZwYS 8kgixHFRrt6n4wS3p7koBzbzebQdl2nyvmHqBrcPSEsw5okRtunlWCh1lgPt2w/+ gut71f4JhA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:44 2026 by rpki-client