This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer File: hpA1wxdzT2Ybv4XCGEFVofNhat0.cer (raw, json) Hash identifier: B7DjyETAu2HY53pAkHCDQh1CcoG/LODHaH/+E/9aKBs= Subject key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79103507F74BC8D0FAD3CB017E9E66D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41530 IP: 195.138.192.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:35:07:f7:4b:c8:d0:fa:d3:cb:01:7e:9e:66:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=869035c317734f661bbf85c2184155a1f3616add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:2c:a5:af:26:b1:e2:45:e4:88:32:31:b6: c0:a5:cb:eb:29:fb:b9:aa:6c:89:92:8c:ec:b7:78: 9d:95:c1:48:f8:cc:cb:16:3a:fe:c6:b3:66:2c:f2: f7:08:81:12:74:bc:a8:60:f4:7a:3a:5c:28:9a:07: dd:f1:f3:eb:cd:e8:21:18:f9:5c:8c:8f:ee:19:03: b9:3d:57:8e:d4:5f:55:b8:62:2b:c5:31:41:ff:1c: a6:a8:00:44:bc:7c:17:3d:80:b7:0a:d3:58:79:ad: 59:6c:f5:a7:5f:44:58:56:81:91:56:a5:cc:ca:33: a1:3f:13:3b:39:cf:b5:86:02:a0:07:f4:47:19:48: 85:00:aa:80:48:6d:a2:20:04:3e:09:69:f3:e7:36: e9:f8:ee:a7:a0:61:19:be:89:bd:d6:35:b5:4c:5e: 5a:10:a4:76:d1:b6:3c:98:b3:ae:db:36:23:dc:74: c0:d6:db:d9:80:83:c3:99:8d:46:61:80:4b:a3:da: ba:c4:f9:cc:f2:a1:1d:0e:39:61:fa:28:04:1e:d7: 35:f9:4f:a5:9a:1a:f0:78:93:2c:24:a9:ac:7c:58: 26:74:f9:56:bb:94:41:8c:c4:39:cf:4f:12:9e:e2: ea:f6:89:c6:1f:d5:8e:84:d8:ac:37:ff:4c:01:66: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.192.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41530 Signature Algorithm: sha256WithRSAEncryption 94:7e:ea:13:ee:2b:8d:bb:97:8c:5e:37:0f:67:53:cb:48:a0: f2:70:61:b9:5a:5b:be:25:93:d3:81:a1:b2:21:22:b8:ec:01: d4:53:df:ba:b6:ce:de:fd:1b:3e:3f:40:4c:ea:e4:5f:93:d8: 39:f6:34:b8:f2:2c:f1:2f:c9:66:1c:81:c7:67:1e:5b:02:55: 18:d2:29:71:d8:b2:bb:f5:b7:e4:1c:73:c2:c8:9f:27:28:de: 07:d6:1e:3d:6a:5b:e2:a7:5b:c9:59:7d:c5:b3:54:80:0c:7e: 8f:f9:45:ba:6c:56:ea:0a:64:ca:f0:d9:f2:f1:2b:da:15:71: 5f:89:4f:5b:e5:97:b5:cd:ee:e3:73:75:f8:30:5f:71:86:c3: 30:64:81:cc:4d:85:5c:fa:4c:9f:a5:0b:5f:79:f3:45:e4:15: 53:36:95:19:16:c4:44:50:53:8c:52:d7:53:0b:54:38:67:8a: 7c:ad:52:ed:e4:32:53:55:95:1d:71:a4:ef:0e:6b:17:39:94: 70:19:07:64:36:13:b0:81:d2:1b:8f:b3:fb:00:4a:d5:99:f5: 60:fc:c5:c2:6d:4f:9a:cc:fe:19:d4:0d:19:59:10:fa:40:7f: 10:78:cd:83:13:2a:df:ba:3b:2a:2b:e1:7b:e5:87:5f:ec:aa: 8a:71:27:00 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EDUH90vI0PrTywF+nmbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjkwMzVjMzE3NzM0ZjY2MWJiZjg1YzIxODQxNTVhMWYzNjE2YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeYspa8mseJF5IgyMbbApcvrKfu5 qmyJkozst3idlcFI+MzLFjr+xrNmLPL3CIESdLyoYPR6Olwomgfd8fPrzeghGPlc jI/uGQO5PVeO1F9VuGIrxTFB/xymqABEvHwXPYC3CtNYea1ZbPWnX0RYVoGRVqXM yjOhPxM7Oc+1hgKgB/RHGUiFAKqASG2iIAQ+CWnz5zbp+O6noGEZvom91jW1TF5a EKR20bY8mLOu2zYj3HTA1tvZgIPDmY1GYYBLo9q6xPnM8qEdDjlh+igEHtc1+U+l mhrweJMsJKmsfFgmdPlWu5RBjMQ5z08SnuLq9onGH9WOhNisN/9MAWahBwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIaQNcMXc09mG7+FwhhBVaHzYWrdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzNmZDc3 NC0zZDc5LTQ0YjEtODc4YS02MDI4YzI2NTQ5NDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvM2ZkNzc0 LTNkNzktNDRiMS04NzhhLTYwMjhjMjY1NDk0MC8xL2hwQTF3eGR6VDJZYnY0WENH RUZWb2ZOaGF0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw4rAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCiOjANBgkqhkiG9w0BAQsFAAOCAQEAlH7qE+4rjbuXjF43D2dTy0ig8nBhuVpb viWT04GhsiEiuOwB1FPfurbO3v0bPj9ATOrkX5PYOfY0uPIs8S/JZhyBx2ceWwJV GNIpcdiyu/W35BxzwsifJyjeB9YePWpb4qdbyVl9xbNUgAx+j/lFumxW6gpkyvDZ 8vEr2hVxX4lPW+WXtc3u43N1+DBfcYbDMGSBzE2FXPpMn6ULX3nzReQVUzaVGRbE RFBTjFLXUwtUOGeKfK1S7eQyU1WVHXGk7w5rFzmUcBkHZDYTsIHSG4+z+wBK1Zn1 YPzFwm1Pmsz+GdQNGVkQ+kB/EHjNgxMq37o7Kivhe+WHX+yqinEnAA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:19 2026 by rpki-client