This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer File: hX9MEi5PjGAfIcXIaHFtRgidheE.cer (raw, json) Hash identifier: UMvD10+lA35Ahee94tws7OiQ5TaGwixxMrcyndU/MLE= Subject key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC803940784DE96939F5331FB5F540B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50320 IP: 193.104.206.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:03:94:07:84:de:96:93:9f:53:31:fb:5f:54:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=857f4c122e4f8c601f21c5c868716d46089d85e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:d0:e4:49:8d:c2:05:15:8f:0b:af:77:4e: 95:23:3f:df:17:30:38:33:36:2e:7c:ba:f6:f0:0d: 2a:4a:59:10:f8:66:6c:cf:0b:fe:0f:60:b0:ce:18: d4:01:2d:33:d1:00:20:0c:e1:91:41:a7:6d:6c:d7: 33:b7:d7:25:29:46:5d:7e:39:78:e8:24:11:5d:a5: b4:c9:c3:38:f4:d1:d7:a5:94:a4:fd:f3:12:db:d9: 14:14:c6:ea:ae:f3:8d:30:ce:4e:e9:78:cb:19:4d: 7d:fe:64:00:05:c4:f8:b8:46:ac:74:f7:2d:35:2d: 19:76:44:5b:9f:6b:66:0e:44:03:16:9f:ad:ee:86: 22:88:05:9f:34:68:a4:3f:5a:ee:da:59:13:77:9e: 19:ed:c4:d1:66:69:f3:06:1e:57:1f:23:19:b8:6a: db:7f:80:0a:67:63:58:b1:3d:91:6d:2c:a4:96:4d: 27:65:ea:e1:f6:9e:37:db:44:ce:eb:41:3d:48:01: 3f:86:b0:d1:af:88:b9:81:2d:6d:b1:55:20:da:85: c7:d7:14:76:02:0e:ce:73:4f:7c:f0:65:db:fc:66: 84:61:fe:30:41:e0:58:fa:57:1c:cd:aa:21:59:ac: 4c:21:a6:31:25:ed:76:05:60:0c:83:84:f0:2d:77: df:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.206.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50320 Signature Algorithm: sha256WithRSAEncryption af:e3:7e:50:3a:5b:a8:2d:d0:be:80:c9:2a:8c:77:69:69:e5: 43:12:54:bf:2a:8c:7f:51:d2:a8:6a:4a:00:d2:1e:c5:9d:59: a4:ca:af:5b:67:9f:d6:79:48:d7:c6:07:2c:94:be:dc:35:13: 48:3a:ef:f0:ee:98:9e:2f:f6:29:94:6d:a3:ae:83:27:1a:8d: 09:ee:64:bb:9b:c4:fd:a4:23:72:e1:87:f0:f0:5f:9d:54:8e: 5f:2d:fa:ec:f9:b2:ae:0c:d8:51:46:53:2a:7c:5b:ae:27:82: bf:7a:ec:21:3d:18:5b:70:f7:93:f2:56:6c:0f:e8:49:63:ce: 98:4c:fd:19:79:ac:d0:c4:00:f9:b6:ad:c3:b9:10:2f:5f:c0: 6a:50:c7:c2:be:98:8d:2f:d9:a2:a8:06:be:c6:f7:8e:63:04: 31:ae:0e:e7:fc:94:92:14:31:aa:ef:c8:bd:e1:63:2f:8d:3a: 61:22:a6:24:f1:5b:6e:67:8a:fb:a4:71:67:61:e6:1d:64:74: a5:28:0f:75:29:fb:4d:a7:8a:16:d1:5f:b9:66:30:41:15:9b: 22:48:8d:a2:14:47:31:ce:70:41:19:5c:3e:35:eb:3b:c6:e9: 76:81:84:ba:e5:db:01:4c:a3:4e:b1:6e:d8:d2:a3:ac:60:6d: 2d:16:e1:34 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yAOUB4TelpOfUzH7X1QLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTdmNGMxMjJlNGY4YzYwMWYyMWM1Yzg2ODcxNmQ0NjA4OWQ4NWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu7Q5EmNwgUVjwuvd06VIz/fFzA4 MzYufLr28A0qSlkQ+GZszwv+D2CwzhjUAS0z0QAgDOGRQadtbNczt9clKUZdfjl4 6CQRXaW0ycM49NHXpZSk/fMS29kUFMbqrvONMM5O6XjLGU19/mQABcT4uEasdPct NS0ZdkRbn2tmDkQDFp+t7oYiiAWfNGikP1ru2lkTd54Z7cTRZmnzBh5XHyMZuGrb f4AKZ2NYsT2RbSyklk0nZerh9p4320TO60E9SAE/hrDRr4i5gS1tsVUg2oXH1xR2 Ag7Oc0988GXb/GaEYf4wQeBY+lcczaohWaxMIaYxJe12BWAMg4TwLXffCQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIV/TBIuT4xgHyHFyGhxbUYInYXhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzk2MTkz OS1hYzhlLTRkMTItYjEyZi1kYTVjYjBmYjE5ZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvOTYxOTM5 LWFjOGUtNGQxMi1iMTJmLWRhNWNiMGZiMTllNy8xL2hYOU1FaTVQakdBZkljWElh SEZ0UmdpZGhlRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWjOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDEkDANBgkqhkiG9w0BAQsFAAOCAQEAr+N+UDpbqC3QvoDJKox3aWnlQxJUvyqM f1HSqGpKANIexZ1ZpMqvW2ef1nlI18YHLJS+3DUTSDrv8O6Yni/2KZRto66DJxqN Ce5ku5vE/aQjcuGH8PBfnVSOXy367PmyrgzYUUZTKnxbrieCv3rsIT0YW3D3k/JW bA/oSWPOmEz9GXms0MQA+batw7kQL1/AalDHwr6YjS/ZoqgGvsb3jmMEMa4O5/yU khQxqu/IveFjL406YSKmJPFbbmeK+6RxZ2HmHWR0pSgPdSn7TaeKFtFfuWYwQRWb IkiNohRHMc5wQRlcPjXrO8bpdoGEuuXbAUyjTrFu2NKjrGBtLRbhNA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:58 2026 by rpki-client