This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer File: hc-RCpREnqI6rGxAmgWEm-2l4ko.cer (raw, json) Hash identifier: D48cMYO/qa2oQWYYEHIK/ZnHpV160LmsngvYPngREkQ= Subject key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EB087955752D31E37DE8A828D2F15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51878 IP: 46.16.144.0/21 IP: 185.13.20.0/22 IP: 2a03:6340::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b0:87:95:57:52:d3:1e:37:de:8a:82:8d:2f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85cf910a94449ea23aac6c409a05849beda5e24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:87:ec:44:9c:6a:ea:93:b8:9c:bd:7c:7a: 4a:db:66:75:c9:b9:2e:28:fb:65:a3:d0:af:43:a8: ef:26:fb:f2:69:4d:64:f9:a0:64:74:69:fc:c7:65: f5:89:64:4a:ad:22:e4:3b:e6:42:23:77:54:33:2d: 04:24:b2:2a:78:4a:d1:47:04:88:f4:db:5b:ae:94: 28:8f:7f:1d:e7:01:f3:f0:ad:b3:6f:df:e4:1d:37: 44:e6:10:62:e3:55:89:44:5b:c1:c6:fb:ec:6e:1c: c7:ce:c8:57:e4:8b:5f:f5:08:7d:59:ad:f5:cb:9d: c8:7f:cd:fb:f1:6f:dd:74:c6:12:89:01:e4:34:9e: f1:34:db:ef:d0:09:b7:84:84:d1:07:65:64:c5:da: be:ec:ef:b2:ea:3c:71:50:d9:df:ba:69:36:ad:9c: c8:b8:d4:a7:64:b1:08:fb:4c:f0:d9:32:cc:cc:3f: 1f:81:60:fb:31:37:4b:1f:94:14:0b:08:69:1c:08: e3:7f:ed:9d:8c:50:ce:fb:4f:e7:80:db:d7:f4:25: 18:72:bb:b4:19:80:cd:97:9d:a0:6d:e3:3b:ee:0d: 4a:8d:01:77:a0:8b:bb:7e:a9:d0:7e:5e:94:fe:ca: 04:87:90:d4:11:dd:32:80:ab:66:e5:95:ac:e4:a2: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.144.0/21 185.13.20.0/22 IPv6: 2a03:6340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51878 Signature Algorithm: sha256WithRSAEncryption a0:61:6b:df:cf:6a:2b:d7:a6:9a:67:93:ef:a5:5e:c4:dd:86: 7c:76:a8:1b:2a:38:0d:e7:b4:97:61:80:c8:ff:a8:8f:49:df: 70:da:12:30:ac:bb:11:21:14:f5:39:4f:29:4a:ed:03:44:4c: 92:19:b5:d9:fd:bb:71:97:46:04:a2:60:08:41:a7:5e:ac:09: 28:e8:d3:b0:de:14:05:7d:62:bf:c9:96:cf:8d:2c:5d:9d:cb: e9:1e:b8:55:44:20:5c:78:88:d8:f2:8d:88:17:45:63:b0:c9: 65:61:db:50:02:c3:8c:3b:36:dc:5c:d0:56:f5:5d:0c:64:7d: a0:6f:b3:25:82:67:07:4d:3e:96:b9:91:59:c1:00:7a:fb:18: f7:9c:62:69:73:0a:8e:83:04:7f:f8:c0:a9:f6:86:ab:78:c0: 80:34:a3:7e:6f:08:d0:a3:4b:ea:8b:f5:4e:f3:bc:a7:63:2f: 14:9a:31:f2:b8:cd:16:71:7f:32:1c:c2:23:fb:c6:1c:af:a2: 2e:93:03:af:59:3d:09:dd:ac:8e:51:42:76:db:08:93:62:6d: 08:72:e1:f1:1f:00:69:51:85:12:af:dc:45:81:ba:93:77:e7: d3:3f:a8:ae:7a:3e:f8:17:b8:e3:ea:a1:38:b5:f4:6e:3a:0f: 32:8c:c3:16 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5frCHlVdS0x433oqCjS8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWNmOTEwYTk0NDQ5ZWEyM2FhYzZjNDA5YTA1ODQ5YmVkYTVlMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztWH7EScauqTuJy9fHpK22Z1ybku KPtlo9CvQ6jvJvvyaU1k+aBkdGn8x2X1iWRKrSLkO+ZCI3dUMy0EJLIqeErRRwSI 9NtbrpQoj38d5wHz8K2zb9/kHTdE5hBi41WJRFvBxvvsbhzHzshX5Itf9Qh9Wa31 y53If8378W/ddMYSiQHkNJ7xNNvv0Am3hITRB2Vkxdq+7O+y6jxxUNnfumk2rZzI uNSnZLEI+0zw2TLMzD8fgWD7MTdLH5QUCwhpHAjjf+2djFDO+0/ngNvX9CUYcru0 GYDNl52gbeM77g1KjQF3oIu7fqnQfl6U/soEh5DUEd0ygKtm5ZWs5KKKsQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIXPkQqURJ6iOqxsQJoFhJvtpeJKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzVkM2E0 Yy02NTFmLTQ0OTgtOGMyMi01NTJmMDJjYmMwMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNWQzYTRj LTY1MWYtNDQ5OC04YzIyLTU1MmYwMmNiYzAwZS8xL2hjLVJDcFJFbnFJNnJHeEFt Z1dFbS0ybDRrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLhCQAwQCuQ0UMA0EAgACMAcDBQAqA2NAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDKpjANBgkqhkiG9w0BAQsFAAOCAQEAoGFr 389qK9emmmeT76VexN2GfHaoGyo4Dee0l2GAyP+oj0nfcNoSMKy7ESEU9TlPKUrt A0RMkhm12f27cZdGBKJgCEGnXqwJKOjTsN4UBX1iv8mWz40sXZ3L6R64VUQgXHiI 2PKNiBdFY7DJZWHbUALDjDs23FzQVvVdDGR9oG+zJYJnB00+lrmRWcEAevsY95xi aXMKjoMEf/jAqfaGq3jAgDSjfm8I0KNL6ov1TvO8p2MvFJox8rjNFnF/MhzCI/vG HK+iLpMDr1k9Cd2sjlFCdtsIk2JtCHLh8R8AaVGFEq/cRYG6k3fn0z+orno++Be4 4+qhOLX0bjoPMozDFg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:48 2026 by rpki-client