This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer File: hWSCS22vvTPxCjaW4ArLlIwRKjg.cer (raw, json) Hash identifier: lS1oCBC8KKLqLwUkdfRpIz+hZgJBZv0pMNPJPLDLS7A= Subject key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F845ED8562D4A6CE45BB84397C50AE2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41522 IP: 194.9.52.0/23 IP: 195.93.250.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5e:d8:56:2d:4a:6c:e4:5b:b8:43:97:c5:0a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8564824b6dafbd33f10a3696e00acb948c112a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:8a:9c:0f:b9:89:3d:0b:35:a6:ce:e5:fc: 84:6c:3c:c8:ba:5a:90:94:02:4c:3f:c1:e2:c7:30: cd:c8:8c:cb:f8:20:78:c7:7f:3b:47:0b:18:c4:69: 46:49:19:a7:26:9c:42:35:1e:53:19:17:dd:d3:b7: 8e:7b:f9:ef:72:60:5c:8d:c8:a5:15:84:41:a4:ee: 43:d1:1c:cc:e2:f4:33:54:fd:dc:a9:8e:46:ac:89: 6f:73:4d:c0:55:42:47:dc:38:de:cf:e2:bc:fe:d8: c5:6b:0d:32:e9:86:f6:ae:73:0a:52:ca:f7:e5:78: 59:7c:66:08:92:4e:d6:07:c5:60:22:0e:09:35:49: 20:bf:ab:24:1f:0a:2d:0d:05:42:94:ee:de:36:b7: bd:eb:4d:a3:34:9f:f2:66:bf:8b:31:73:1b:6e:e7: 28:97:a1:f6:40:81:f1:e8:bb:70:26:bf:db:bf:67: 77:c8:f5:2f:06:66:6f:1f:14:0f:27:ec:3f:6f:0c: 97:00:66:8e:fe:14:37:b3:3c:5f:90:b5:eb:1d:4f: 72:55:61:ea:9e:fd:40:9e:b7:a6:33:69:11:f8:be: ab:9d:4e:97:cf:cb:ce:75:7b:4f:27:e8:69:83:89: 6e:d7:25:f2:19:39:e4:ce:4a:60:6c:6b:6a:a2:17: 8f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.52.0/23 195.93.250.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41522 Signature Algorithm: sha256WithRSAEncryption 9d:04:21:25:f0:9e:da:b8:4c:5f:31:e1:4e:45:c2:d2:f9:ea: 7e:2c:3d:12:2c:a7:4b:96:ce:16:8a:6b:70:7a:ac:ca:73:6c: 6b:39:f1:ab:07:5c:19:b9:9c:b7:b4:ea:b3:d4:86:df:3c:bb: e1:cb:cd:f6:55:df:50:da:be:89:f5:d7:8a:b8:33:af:fd:9a: f2:9a:46:48:b7:07:bb:28:00:09:92:8c:c9:a5:cb:1a:0a:3e: df:32:0e:5d:9a:83:f3:63:ba:0e:32:73:e6:c4:dd:4b:04:b3: 61:2a:ec:5a:21:fa:db:be:0c:08:fc:75:3b:25:21:24:3b:2b: dc:a6:99:b6:2e:28:52:54:09:a0:f9:e8:fe:e1:58:dc:a2:a1: 01:34:0e:dd:50:77:7b:47:1d:16:1a:4e:bb:7f:56:b4:71:c1: 21:9b:d2:3a:f6:a4:62:94:a4:e8:2c:9f:93:17:f8:79:e1:fe: ae:2b:7b:67:a4:a2:3e:af:1c:a5:7c:b5:38:8c:c2:7d:84:6a: eb:36:55:c9:04:ed:3f:41:6d:56:0f:45:6d:11:9e:9a:19:15: 7d:c3:28:44:84:2c:40:67:bd:a9:02:26:d9:1f:4f:5b:d5:2f: 52:b7:98:30:84:f3:1f:0e:f4:c6:1d:d3:3f:8b:e4:1d:94:58: 77:d0:62:89 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/hF7YVi1KbORbuEOXxQriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTY0ODI0YjZkYWZiZDMzZjEwYTM2OTZlMDBhY2I5NDhjMTEyYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4SKnA+5iT0LNabO5fyEbDzIulqQ lAJMP8HixzDNyIzL+CB4x387RwsYxGlGSRmnJpxCNR5TGRfd07eOe/nvcmBcjcil FYRBpO5D0RzM4vQzVP3cqY5GrIlvc03AVUJH3Djez+K8/tjFaw0y6Yb2rnMKUsr3 5XhZfGYIkk7WB8VgIg4JNUkgv6skHwotDQVClO7eNre9602jNJ/yZr+LMXMbbuco l6H2QIHx6LtwJr/bv2d3yPUvBmZvHxQPJ+w/bwyXAGaO/hQ3szxfkLXrHU9yVWHq nv1AnremM2kR+L6rnU6Xz8vOdXtPJ+hpg4lu1yXyGTnkzkpgbGtqohePkwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIVkgkttr70z8Qo2luAKy5SMESo4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzRjMTdi OS0yZDVjLTQ0MDUtYWM1Yi1jNjA1NDRjZjQ1YjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvNGMxN2I5 LTJkNWMtNDQwNS1hYzViLWM2MDU0NGNmNDViNS8xL2hXU0NTMjJ2dlRQeENqYVc0 QXJMbEl3UktqZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwgk0AwQBw136MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCiMjANBgkqhkiG9w0BAQsFAAOCAQEAnQQhJfCe2rhMXzHhTkXC0vnq fiw9EiynS5bOFoprcHqsynNsaznxqwdcGbmct7Tqs9SG3zy74cvN9lXfUNq+ifXX irgzr/2a8ppGSLcHuygACZKMyaXLGgo+3zIOXZqD82O6DjJz5sTdSwSzYSrsWiH6 274MCPx1OyUhJDsr3KaZti4oUlQJoPno/uFY3KKhATQO3VB3e0cdFhpOu39WtHHB IZvSOvakYpSk6Cyfkxf4eeH+rit7Z6SiPq8cpXy1OIzCfYRq6zZVyQTtP0FtVg9F bRGemhkVfcMoRIQsQGe9qQIm2R9PW9UvUreYMITzHw70xh3TP4vkHZRYd9BiiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:25 2026 by rpki-client