This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer File: hWlFRtV2UOyEZtOS0X-jQylgFUA.cer (raw, json) Hash identifier: C8mWY53361LyWnhdteXCbAQWk5hK3l1LQpqoVTthz3I= Subject key identifier: 85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3937E67D67801BCA9389388D970E0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216260 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:37:e6:7d:67:80:1b:ca:93:89:38:8d:97:0e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85694546d57650ec8466d392d17fa34329601540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:d6:8f:f3:26:21:ef:a9:ed:1c:33:e6:5b: 8a:fc:6f:7f:7c:99:70:2b:df:14:c8:97:cc:7a:f6: be:0b:c8:46:ec:99:56:7b:1e:1d:65:b7:02:9e:fd: 72:7b:5b:f9:7a:4a:00:85:b9:81:81:d1:1d:d7:a9: 97:8e:a5:23:77:4b:ad:23:0b:ce:31:d6:f2:7b:ff: 78:25:51:31:2f:0a:c1:50:2b:6c:3d:42:88:b6:4a: 8e:14:7c:e0:73:98:f8:68:55:ec:73:b5:73:52:00: 98:18:2c:c6:d1:5e:62:f8:1a:b4:0f:68:e8:ea:2a: 69:93:0a:2a:33:09:5d:c5:01:ab:19:19:bd:2c:f1: 6e:f9:9b:fa:ba:0f:97:e0:56:fa:ad:7c:cc:f4:d9: 37:87:40:a4:d8:b9:b6:d7:48:73:49:04:95:33:ac: dc:d2:b8:e2:00:25:bd:f3:cf:31:42:f0:07:e4:4c: ed:89:de:a1:df:25:58:86:5e:a9:ac:9f:ee:b6:dd: 42:f7:f6:1e:6e:3c:46:e6:48:33:95:83:d1:45:ce: 50:11:f6:b4:f6:7c:0e:1e:cc:d8:e2:b0:da:31:98: fb:2e:6d:90:b6:24:d7:78:cf:28:12:36:46:4c:85: 14:04:50:b3:92:3e:f1:66:8e:fd:58:72:3f:86:53: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216260 Signature Algorithm: sha256WithRSAEncryption a6:f1:f1:4e:46:71:0e:7d:1f:03:f4:00:68:ec:ad:ef:53:86: ba:bc:ca:8f:34:96:98:d8:67:dc:8c:33:b3:b3:9a:03:88:2b: 28:de:8f:40:01:86:e0:97:24:01:67:27:ca:9d:4f:07:63:c4: ca:b9:26:d5:aa:16:da:c9:02:66:1c:bd:8c:ec:34:0a:0a:21: 31:c9:98:bd:e6:8c:1c:7e:6e:79:4b:63:ad:12:9d:1c:28:71: c5:79:86:60:90:8f:ec:24:81:82:04:77:d0:56:68:ee:56:83: 55:98:e5:26:65:88:e0:ce:95:92:c7:0c:be:ed:3c:37:53:d8: 6f:e3:42:5c:5d:99:77:a4:ce:e1:12:e9:a3:0d:04:8a:30:c0: 69:c8:ed:40:b9:ed:fb:60:95:b1:41:f6:6c:9c:91:9a:40:a2: 5a:1f:3a:23:7c:23:1a:b8:18:a1:87:ac:d9:8b:16:86:af:78: 42:9b:c4:42:87:bb:e9:24:cb:1f:0b:65:0d:f6:d2:5e:1e:47: cd:05:71:16:e3:5f:cf:03:59:80:3f:c7:56:88:cc:aa:e2:a2: a1:f4:24:3b:4f:3c:8f:91:44:4f:e1:28:34:07:04:bb:b5:c6: e1:8f:c8:22:18:d1:2d:18:13:90:90:a8:41:4d:44:58:83:d1: df:23:2a:f0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OTfmfWeAG8qTiTiNlw4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTY5NDU0NmQ1NzY1MGVjODQ2NmQzOTJkMTdmYTM0MzI5NjAxNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ojWj/MmIe+p7Rwz5luK/G9/fJlw K98UyJfMeva+C8hG7JlWex4dZbcCnv1ye1v5ekoAhbmBgdEd16mXjqUjd0utIwvO Mdbye/94JVExLwrBUCtsPUKItkqOFHzgc5j4aFXsc7VzUgCYGCzG0V5i+Bq0D2jo 6ippkwoqMwldxQGrGRm9LPFu+Zv6ug+X4Fb6rXzM9Nk3h0Ck2Lm210hzSQSVM6zc 0rjiACW9888xQvAH5Eztid6h3yVYhl6prJ/utt1C9/YebjxG5kgzlYPRRc5QEfa0 9nwOHszY4rDaMZj7Lm2QtiTXeM8oEjZGTIUUBFCzkj7xZo79WHI/hlMr1QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIVpRUbVdlDshGbTktF/o0MpYBVAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzM1NGE1 NS1lNmE5LTRkMTctYjMxMy0zZjA4NDFhZTZiYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMzU0YTU1 LWU2YTktNGQxNy1iMzEzLTNmMDg0MWFlNmJjMS8xL2hXbEZSdFYyVU95RVp0T1Mw WC1qUXlsZ0ZVQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMxDANBgkqhkiG9w0BAQsFAAOCAQEApvHxTkZxDn0f A/QAaOyt71OGurzKjzSWmNhn3Iwzs7OaA4grKN6PQAGG4JckAWcnyp1PB2PEyrkm 1aoW2skCZhy9jOw0CgohMcmYveaMHH5ueUtjrRKdHChxxXmGYJCP7CSBggR30FZo 7laDVZjlJmWI4M6VkscMvu08N1PYb+NCXF2Zd6TO4RLpow0EijDAacjtQLnt+2CV sUH2bJyRmkCiWh86I3wjGrgYoYes2YsWhq94QpvEQoe76STLHwtlDfbSXh5HzQVx FuNfzwNZgD/HVojMquKiofQkO088j5FET+EoNAcEu7XG4Y/IIhjRLRgTkJCoQU1E WIPR3yMq8A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:01 2026 by rpki-client