This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer File: hu-0nfJHSmBCufIQv-qGGxsohu0.cer (raw, json) Hash identifier: 84XqYxdyLwD8k80VKHJC41MjYS3mnkNnnvAmnpklXV8= Subject key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5436F0BDDBA7D03A793B6A5524584 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29533 AS: 35701 IP: 192.109.204.0/24 IP: 194.146.121.0/24 IP: 195.234.45.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:43:6f:0b:dd:ba:7d:03:a7:93:b6:a5:52:45:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86efb49df2474a6042b9f210bfea861b1b2886ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:67:82:5d:ad:ec:73:39:bc:9c:2e:db:2c: 99:e4:ff:87:72:ca:26:6d:a0:ce:54:f8:26:eb:15: f1:9d:88:6a:17:d7:3b:6e:a8:57:46:31:d2:e9:7a: b2:84:dc:0e:2d:17:f1:6a:0f:af:c8:4b:eb:2e:60: 7f:e9:55:17:19:83:1f:41:65:90:18:d7:70:52:d1: d5:1f:48:83:3f:35:78:a8:61:7c:9c:e3:86:8f:a9: 42:8f:57:c7:cd:ab:10:b8:98:6a:e4:b4:b2:69:96: 5f:cc:dd:ea:57:da:d4:cf:90:7a:a8:17:c6:52:95: e1:a9:3b:97:bd:d6:36:f4:4e:dd:27:af:f9:0e:51: 91:af:f7:33:7d:ae:c9:b2:66:d6:bf:21:3a:11:de: e6:66:29:8d:72:38:0c:fa:68:73:1d:9d:1c:2f:b3: 12:be:2e:61:56:6d:b5:3b:b2:0e:14:d1:d2:32:9e: ae:f9:9b:2b:09:6e:8c:90:0c:af:32:51:ab:4b:08: f2:a6:6a:fe:cf:71:b2:ea:0e:4b:5d:58:2f:1d:7a: 67:3c:f7:ff:f3:df:c8:cf:7e:57:5d:ea:2b:1b:a1: 85:a3:a6:5e:89:e9:f2:cd:1d:13:c3:b7:9a:36:cb: 7b:0f:5a:38:4f:a8:c2:7f:bd:e1:b6:e5:56:c6:6f: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.204.0/24 194.146.121.0/24 195.234.45.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29533 35701 Signature Algorithm: sha256WithRSAEncryption 51:cd:b3:ee:b7:cf:00:d5:2e:b2:79:b8:7e:88:9e:61:66:ef: b1:d0:0c:27:ea:7d:a3:f7:27:e1:58:3f:34:4a:e8:7d:28:89: 47:01:e4:51:a5:8c:b2:e1:0e:7e:dc:3f:d0:16:93:04:22:bc: 53:77:da:b7:4a:50:01:21:e4:47:9c:b5:7c:61:97:c3:56:1b: be:32:b8:41:62:1e:15:69:28:d5:10:00:54:80:db:9f:24:0d: 00:8e:fc:ec:d5:3f:07:c7:83:44:70:b0:9f:d1:80:ec:81:0f: 14:2a:fa:25:b4:4e:bf:36:61:d0:da:d1:2f:fb:84:07:ca:8f: 4e:24:61:6e:59:c9:ef:9f:0b:ee:f0:e8:b3:ea:3a:4b:d2:c0: c8:97:92:df:e0:07:2c:c3:43:3d:8e:3f:3d:67:4d:c3:51:e7: 86:e6:e9:f8:8f:77:b2:1d:b4:b0:eb:20:52:6e:74:2d:93:7c: bd:e0:5d:00:38:48:61:54:11:66:93:7c:99:d4:13:29:36:3a: 0f:2e:07:c7:57:12:08:bf:4f:30:38:a3:d4:a9:57:b3:0e:b4: 60:38:40:b2:4a:46:be:7d:48:b0:9f:87:16:be:7a:1d:f3:9f: c7:f2:f0:39:80:6c:1d:25:ef:82:51:c3:b1:c7:12:42:07:39: 89:40:2a:70 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt7pUNvC926fQOnk7alUkWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmVmYjQ5ZGYyNDc0YTYwNDJiOWYyMTBiZmVhODYxYjFiMjg4NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy59ngl2t7HM5vJwu2yyZ5P+Hcsom baDOVPgm6xXxnYhqF9c7bqhXRjHS6XqyhNwOLRfxag+vyEvrLmB/6VUXGYMfQWWQ GNdwUtHVH0iDPzV4qGF8nOOGj6lCj1fHzasQuJhq5LSyaZZfzN3qV9rUz5B6qBfG UpXhqTuXvdY29E7dJ6/5DlGRr/czfa7JsmbWvyE6Ed7mZimNcjgM+mhzHZ0cL7MS vi5hVm21O7IOFNHSMp6u+ZsrCW6MkAyvMlGrSwjypmr+z3Gy6g5LXVgvHXpnPPf/ 89/Iz35XXeorG6GFo6ZeienyzR0Tw7eaNst7D1o4T6jCf73htuVWxm/yfQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFIbvtJ3yR0pgQrnyEL/qhhsbKIbtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzQzNTE4 NC03NzkxLTRiNTQtYjliOC05NWIyNzFmMmUyMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvNDM1MTg0 LTc3OTEtNGI1NC1iOWI4LTk1YjI3MWYyZTIwYi8xL2h1LTBuZkpIU21CQ3VmSVF2 LXFHR3hzb2h1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAwG3MAwQAwpJ5AwQAw+otMB4GCCsGAQUFBwEI AQH/BA8wDaALMAkCAnNdAgMAi3UwDQYJKoZIhvcNAQELBQADggEBAFHNs+63zwDV LrJ5uH6InmFm77HQDCfqfaP3J+FYPzRK6H0oiUcB5FGljLLhDn7cP9AWkwQivFN3 2rdKUAEh5EectXxhl8NWG74yuEFiHhVpKNUQAFSA258kDQCO/OzVPwfHg0RwsJ/R gOyBDxQq+iW0Tr82YdDa0S/7hAfKj04kYW5Zye+fC+7w6LPqOkvSwMiXkt/gByzD Qz2OPz1nTcNR54bm6fiPd7IdtLDrIFJudC2TfL3gXQA4SGFUEWaTfJnUEyk2Og8u B8dXEgi/TzA4o9SpV7MOtGA4QLJKRr59SLCfhxa+eh3zn8fy8DmAbB0l74JRw7HH EkIHOYlAKnA= -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:20 2026 by rpki-client