This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer (raw, json) Hash identifier: HNf3xu+mhbHWT21LSuyuxx3pRZXF1AYlui+CUvqO2LE= Subject key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C96696C2DD83840FEBC16A228F690 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43773 IP: 91.200.40.0/22 IP: 91.225.136.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:96:69:6c:2d:d8:38:40:fe:bc:16:a2:28:f6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86c4112efc9bed84761d3678b87c483948d2a72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:ca:25:8a:00:cb:f4:77:18:25:ac:c2:65: 2c:78:35:a5:5b:1e:a3:77:9e:7d:64:9d:82:84:09: 45:2d:cb:dc:6e:2a:e0:1d:2b:46:1e:02:af:49:dd: ec:ac:8a:bf:e5:f5:b0:76:1e:81:5b:c7:0c:35:f9: 6d:ef:a4:26:76:7a:2f:49:e3:a5:7f:d9:2a:1c:a9: e1:18:e4:73:de:06:43:38:03:68:a7:39:70:08:fc: ee:fe:59:2e:cb:ac:41:95:22:d7:4a:2b:88:e5:de: 72:0f:79:35:ae:4e:74:31:34:d4:47:f6:be:e8:70: a6:f3:a4:1c:b1:ea:e2:2e:6c:80:d7:15:5f:34:9e: 5a:20:ef:61:19:40:e8:94:a0:69:45:c5:c9:7d:86: 60:83:d0:f7:2d:5a:13:8f:98:0d:e8:c8:84:d6:05: 36:aa:fa:7b:34:1b:07:ba:65:1e:2c:4d:3f:a9:58: b1:5e:e7:b7:6a:21:04:2a:77:10:49:d1:df:0a:69: 20:69:e6:a1:e4:1a:47:b0:00:f6:39:0d:be:ab:46: 3a:80:8c:fe:cd:86:87:75:0b:4d:df:f3:a9:57:fd: 9e:af:ab:ad:29:11:72:9a:1a:00:1d:34:0c:79:ce: 75:9a:2d:f2:79:76:c2:0e:51:6d:c7:00:7e:c8:34: af:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.40.0/22 91.225.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43773 Signature Algorithm: sha256WithRSAEncryption 96:01:aa:74:0f:f2:4a:ca:4e:74:44:5d:06:a5:33:86:5b:18: a7:89:fb:bd:22:f9:54:76:5c:c8:d1:5f:df:5d:42:1a:60:7b: 33:15:ff:86:a0:63:00:0a:34:cb:32:e8:ca:27:87:4e:c9:09: dc:57:15:fe:20:29:68:fa:00:2e:0f:f0:bf:55:33:c9:84:75: 51:50:8e:b8:30:0c:0f:e4:3d:51:93:90:a5:12:bf:9c:aa:a0: d0:9f:2e:74:40:e1:ce:20:47:5d:68:95:19:1f:b8:6b:c0:a9: de:86:18:dc:13:b1:81:01:7d:94:34:d7:03:c9:99:40:a2:5a: 82:29:a4:b6:81:6b:45:f7:25:eb:e3:7c:bb:8f:c9:20:f0:c8: 88:90:3b:1c:23:e9:a7:c9:3c:13:af:69:0e:f8:af:da:b2:2e: 0f:db:57:69:fa:61:4e:8b:5f:3d:7e:32:65:59:0d:cd:45:f9: 9b:bb:fe:bb:a1:e5:37:d4:1b:87:87:f0:a5:e0:a8:9d:6f:11: 5c:27:1a:f8:21:1c:a3:a3:9c:5b:27:c9:54:3e:51:e2:6e:55: 2d:1a:57:0b:d4:62:e6:72:fa:b9:f3:13:5b:86:d6:fb:33:70: cc:59:63:77:7c:34:ca:4c:fa:11:d9:8c:81:70:52:ec:4e:be: a1:38:7b:af -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt9XJZpbC3YOED+vBaiKPaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmM0MTEyZWZjOWJlZDg0NzYxZDM2NzhiODdjNDgzOTQ4ZDJhNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIPKJYoAy/R3GCWswmUseDWlWx6j d559ZJ2ChAlFLcvcbirgHStGHgKvSd3srIq/5fWwdh6BW8cMNflt76QmdnovSeOl f9kqHKnhGORz3gZDOANopzlwCPzu/lkuy6xBlSLXSiuI5d5yD3k1rk50MTTUR/a+ 6HCm86QcseriLmyA1xVfNJ5aIO9hGUDolKBpRcXJfYZgg9D3LVoTj5gN6MiE1gU2 qvp7NBsHumUeLE0/qVixXue3aiEEKncQSdHfCmkgaeah5BpHsAD2OQ2+q0Y6gIz+ zYaHdQtN3/OpV/2er6utKRFymhoAHTQMec51mi3yeXbCDlFtxwB+yDSvqQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFIbEES78m+2Edh02eLh8SDlI0qcvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzQ1ZWJk YS1jMmM3LTRjMjctOTVkNC0wMGI5NmQ3NGQ4YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvNDVlYmRh LWMyYzctNGMyNy05NWQ0LTAwYjk2ZDc0ZDhiMC8xL2hzUVJMdnliN1lSMkhUWjR1 SHhJT1VqU3B5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW8goAwQCW+GIMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCq/TANBgkqhkiG9w0BAQsFAAOCAQEAlgGqdA/ySspOdERdBqUzhlsY p4n7vSL5VHZcyNFf311CGmB7MxX/hqBjAAo0yzLoyieHTskJ3FcV/iApaPoALg/w v1UzyYR1UVCOuDAMD+Q9UZOQpRK/nKqg0J8udEDhziBHXWiVGR+4a8Cp3oYY3BOx gQF9lDTXA8mZQKJagimktoFrRfcl6+N8u4/JIPDIiJA7HCPpp8k8E69pDviv2rIu D9tXafphTotfPX4yZVkNzUX5m7v+u6HlN9Qbh4fwpeConW8RXCca+CEco6OcWyfJ VD5R4m5VLRpXC9Ri5nL6ufMTW4bW+zNwzFljd3w0ykz6EdmMgXBS7E6+oTh7rw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:07 2026 by rpki-client