This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer File: hbfVzNrwMwl0l0V2QgCnJydkcwo.cer (raw, json) Hash identifier: wQLCbTvv8YGkZFJ47GJzMIcfSagT1GVoYMOp6tOpB2k= Subject key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791035F59AA6F010B0274E653E6E7073 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201007 IP: 195.210.14.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:35:f5:9a:a6:f0:10:b0:27:4e:65:3e:6e:70:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85b7d5ccdaf03309749745764200a7272764730a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:93:f5:8c:df:8f:a3:ac:94:76:51:cd:d8: f7:eb:ee:9c:77:b0:1e:ab:02:2e:43:6c:a9:9f:41: 7a:aa:61:f8:f4:f8:27:bc:da:70:dc:9f:6d:89:f8: 87:4c:25:67:39:ed:c1:18:17:df:2f:10:7d:34:e0: 9c:c4:57:18:e2:82:66:d2:97:b3:92:e5:46:65:2c: 67:c5:36:f7:ce:fc:ec:cd:9c:63:c0:08:4a:4a:a0: b9:5a:62:02:ae:c6:48:49:4f:d8:88:a4:c0:4a:ba: 41:a8:5b:d5:04:ff:d7:f8:c3:0f:d5:28:91:60:82: 34:f0:ef:a0:cc:87:11:6e:35:b6:f0:77:4d:16:8f: 23:64:8e:e1:55:2e:57:7b:34:17:ac:fc:d9:66:7b: ba:13:e8:ae:f1:f7:f7:29:7e:65:b1:71:04:22:cf: 1b:84:84:85:ef:14:b4:5b:6d:23:13:49:b9:22:c6: a4:4e:46:9d:07:2c:74:12:91:a8:58:51:55:82:c6: ad:2f:b4:3f:ef:81:0c:08:b4:ef:a1:d9:8c:c2:d0: 01:39:73:10:15:ca:37:dc:97:37:3d:28:25:ab:00: 4f:37:af:62:a7:ee:78:76:4f:4f:68:fe:49:75:df: aa:3b:b4:b8:91:d7:6d:23:2c:a7:c2:ba:71:17:1a: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.210.14.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201007 Signature Algorithm: sha256WithRSAEncryption 00:f6:ed:e3:89:8d:ca:2b:7a:ae:77:1b:4b:49:14:1f:d2:24: c3:3a:eb:31:5b:96:0b:71:2a:11:c0:a0:db:d6:85:ff:22:09: 43:22:f8:d8:a9:be:ab:0d:27:e0:b3:24:6f:d4:e0:e8:65:12: ac:42:b6:dd:5d:6f:dc:f7:bf:86:ce:41:47:cf:b7:24:31:50: 9c:d5:78:ae:29:ab:f8:7c:0e:67:e3:1f:94:27:47:5f:7c:15: 22:35:bc:e7:9a:63:8a:e7:74:8a:ce:27:fa:b2:de:87:07:44: e2:2b:05:29:66:48:b7:de:22:72:e9:b8:30:6a:b0:fa:20:1f: 96:55:d6:d4:b4:3c:44:12:ca:26:8d:82:14:23:4d:37:8f:c3: 5c:7c:6e:1a:ac:31:eb:1d:ed:27:f8:b7:21:97:99:28:40:d5: a0:52:b0:ac:cb:8b:7e:49:ca:06:b1:3e:40:fc:59:58:4b:92: f8:09:0e:7e:5c:3c:30:35:92:da:7a:e9:40:04:84:7f:30:60: 45:62:73:7c:82:10:32:eb:22:bd:fd:8f:a5:35:9d:ed:95:b8: bf:89:28:35:74:72:78:10:ad:20:96:6a:53:58:5d:da:ca:8a: 5b:86:f1:6b:e2:cd:26:79:b6:de:b6:df:57:a6:a9:5c:d9:88: 57:84:dd:89 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EDX1mqbwELAnTmU+bnBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWI3ZDVjY2RhZjAzMzA5NzQ5NzQ1NzY0MjAwYTcyNzI3NjQ3MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9+T9Yzfj6OslHZRzdj36+6cd7Ae qwIuQ2ypn0F6qmH49PgnvNpw3J9tifiHTCVnOe3BGBffLxB9NOCcxFcY4oJm0pez kuVGZSxnxTb3zvzszZxjwAhKSqC5WmICrsZISU/YiKTASrpBqFvVBP/X+MMP1SiR YII08O+gzIcRbjW28HdNFo8jZI7hVS5XezQXrPzZZnu6E+iu8ff3KX5lsXEEIs8b hISF7xS0W20jE0m5IsakTkadByx0EpGoWFFVgsatL7Q/74EMCLTvodmMwtABOXMQ Fco33Jc3PSglqwBPN69ip+54dk9PaP5Jdd+qO7S4kddtIyynwrpxFxrNOQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIW31cza8DMJdJdFdkIApycnZHMKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzExMzdk OC0xZDM2LTQxYmItYjdmYS00MDk0OTM2OTRhNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvMTEzN2Q4 LTFkMzYtNDFiYi1iN2ZhLTQwOTQ5MzY5NGE1Mi8xL2hiZlZ6TnJ3TXdsMGwwVjJR Z0NuSnlka2N3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw9IOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMRLzANBgkqhkiG9w0BAQsFAAOCAQEAAPbt44mNyit6rncbS0kUH9IkwzrrMVuW C3EqEcCg29aF/yIJQyL42Km+qw0n4LMkb9Tg6GUSrEK23V1v3Pe/hs5BR8+3JDFQ nNV4rimr+HwOZ+MflCdHX3wVIjW855pjiud0is4n+rLehwdE4isFKWZIt94icum4 MGqw+iAfllXW1LQ8RBLKJo2CFCNNN4/DXHxuGqwx6x3tJ/i3IZeZKEDVoFKwrMuL fknKBrE+QPxZWEuS+AkOflw8MDWS2nrpQASEfzBgRWJzfIIQMusivf2PpTWd7ZW4 v4koNXRyeBCtIJZqU1hd2sqKW4bxa+LNJnm23rbfV6apXNmIV4TdiQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:18:59 2026 by rpki-client