This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer File: hcNSXWi2ERZWThbh3U5WywNcnIU.cer (raw, json) Hash identifier: +VnX8v1ngMG7D6QNQeTAXHY1u5x9m31BN6WGPvXAcIU= Subject key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC9A01AF27B006865A3931BBA32BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204119 IP: 84.38.64.0/21 IP: 84.38.78.0/23 IP: 2a00:5080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c9:a0:1a:f2:7b:00:68:65:a3:93:1b:ba:32:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:9c:df:7d:9f:69:1c:cb:f6:1d:eb:a8:4e: 45:79:a6:fc:45:b9:fd:8d:c4:39:58:78:46:b7:42: 7b:e0:ed:b0:45:99:44:d8:9d:4c:72:18:ff:f8:52: c6:f3:2f:93:4e:1f:84:60:4d:40:4e:9d:73:1e:28: d2:09:30:f9:58:29:f6:f9:12:cd:c0:61:5c:9e:39: fc:97:0b:d2:a0:fb:bb:4a:68:39:31:b5:a4:da:2d: 82:47:ee:86:08:6c:89:33:15:91:a6:ab:77:a9:38: 2d:14:3e:d7:c9:be:1e:f7:62:5e:48:c9:46:73:29: 92:ec:77:5c:ab:52:31:a3:d4:6d:8a:aa:2f:b1:be: 02:eb:ae:63:28:22:8a:36:49:9f:ca:20:cd:a1:1d: 32:12:86:96:ad:7a:85:0a:ed:4e:ff:8b:e0:5f:49: 9b:40:02:dc:6f:3a:a4:df:b9:66:7c:bf:77:f1:cd: f3:3b:aa:82:20:62:e9:0a:f4:8b:1e:56:9d:d1:7f: 9a:a0:d8:f3:9e:65:b2:27:02:d3:ca:fa:59:a7:84: 14:09:8b:09:7c:aa:54:70:99:2d:d3:41:a4:a6:9c: a9:5e:0f:74:bc:de:d8:a8:f6:4e:de:0b:31:a0:9b: 35:2e:c7:af:1a:37:f0:0f:f9:73:9d:d3:e5:bb:6d: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.64.0/21 84.38.78.0/23 IPv6: 2a00:5080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204119 Signature Algorithm: sha256WithRSAEncryption a9:92:30:ca:08:cb:c8:74:fc:f4:49:f7:7f:da:99:e8:15:8f: d0:82:e0:af:a0:bb:d5:1f:20:88:c6:5a:41:d0:9b:fd:01:2c: 9c:2e:c5:b3:86:93:39:06:ba:a7:fa:18:e2:e0:ab:51:86:be: ba:77:26:80:0b:ad:1c:24:eb:de:08:f7:4f:1a:a8:68:2e:05: a7:91:9c:92:5a:57:e0:de:55:df:24:b3:f4:af:47:6c:70:1c: 33:b3:66:11:bd:c7:c6:32:ad:b2:f7:33:1e:9c:23:df:2d:7a: 59:c7:c9:00:04:bd:d1:83:e9:61:14:ce:5f:1f:8e:da:40:52: 6f:bf:55:b2:e5:64:47:12:25:c6:d4:8a:c3:2e:35:b1:77:5a: 4b:87:e8:18:19:45:98:00:de:00:ae:15:78:ff:24:33:97:e9: 31:06:98:78:d1:44:21:82:63:70:0c:38:1e:8d:f0:df:2f:29: bd:79:a2:3e:9c:5b:d4:ab:33:c2:69:39:57:2d:75:17:9c:a3: a4:c0:63:e5:dd:99:f0:b6:45:84:09:5b:20:ce:90:24:eb:a7: 74:40:db:78:6d:d4:1e:e0:ee:2b:f6:0e:17:42:32:63:8a:ce: 42:69:02:12:28:6c:32:3a:5d:43:0b:15:c4:05:ce:7b:8f:e6: 83:ac:9e:0f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57MmgGvJ7AGhlo5MbujK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWMzNTI1ZDY4YjYxMTE2NTY0ZTE2ZTFkZDRlNTZjYjAzNWM5Yzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ECc332faRzL9h3rqE5Feab8Rbn9 jcQ5WHhGt0J74O2wRZlE2J1Mchj/+FLG8y+TTh+EYE1ATp1zHijSCTD5WCn2+RLN wGFcnjn8lwvSoPu7Smg5MbWk2i2CR+6GCGyJMxWRpqt3qTgtFD7Xyb4e92JeSMlG cymS7Hdcq1Ixo9Rtiqovsb4C665jKCKKNkmfyiDNoR0yEoaWrXqFCu1O/4vgX0mb QALcbzqk37lmfL938c3zO6qCIGLpCvSLHlad0X+aoNjznmWyJwLTyvpZp4QUCYsJ fKpUcJkt00GkppypXg90vN7YqPZO3gsxoJs1LsevGjfwD/lzndPlu20mOwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIXDUl1othEWVk4W4d1OVssDXJyFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzlmYmVj MS1lYmQyLTQxYmEtODNkOS02OTRkYmZhZGRiOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvOWZiZWMx LWViZDItNDFiYS04M2Q5LTY5NGRiZmFkZGI4Zi8xL2hjTlNYV2kyRVJaV1RoYmgz VTVXeXdOY25JVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDVCZAAwQBVCZOMA0EAgACMAcDBQAqAFCAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdVzANBgkqhkiG9w0BAQsFAAOCAQEAqZIw ygjLyHT89En3f9qZ6BWP0ILgr6C71R8giMZaQdCb/QEsnC7Fs4aTOQa6p/oY4uCr UYa+uncmgAutHCTr3gj3TxqoaC4Fp5GcklpX4N5V3ySz9K9HbHAcM7NmEb3HxjKt svczHpwj3y16WcfJAAS90YPpYRTOXx+O2kBSb79VsuVkRxIlxtSKwy41sXdaS4fo GBlFmADeAK4VeP8kM5fpMQaYeNFEIYJjcAw4Ho3w3y8pvXmiPpxb1Kszwmk5Vy11 F5yjpMBj5d2Z8LZFhAlbIM6QJOundEDbeG3UHuDuK/YOF0IyY4rOQmkCEihsMjpd QwsVxAXOe4/mg6yeDw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:00 2026 by rpki-client