This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer (raw, json) Hash identifier: 1nUK2sUNZQNhFx8B1sU+zMVfNxjFzwbo62YFPfNFVuw= Subject key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF06D08A3D8CB33CFEC54374D0CB911 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44929 IP: 91.203.29.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:6d:08:a3:d8:cb:33:cf:ec:54:37:4d:0c:b9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:38:ab:72:5c:a7:d8:0f:fc:33:a9:cd:50: 1e:15:7c:d6:70:00:13:12:c5:f7:ab:bb:d6:54:8e: 9f:5f:61:60:e5:83:4a:0b:c1:9f:90:71:bf:b4:6f: fb:f6:ea:b8:68:50:36:51:ef:0d:bf:97:ab:15:3a: 26:06:f9:fc:08:2a:b9:ef:72:8e:86:be:cd:69:e7: d5:f6:ec:cb:dc:c5:80:15:09:87:55:5d:be:85:4a: a9:b6:4d:74:a1:a9:a8:d2:49:68:44:06:8c:11:20: 2a:6d:ff:fa:a6:33:d3:86:ce:06:a2:9b:b1:e9:90: 81:4c:db:19:ca:7b:ef:c5:38:b0:db:5f:31:68:62: a6:be:5f:31:c0:2f:fa:9c:74:13:2a:88:83:ae:06: 94:11:c4:33:b9:34:14:24:eb:1c:9b:c1:ea:d0:43: 8e:03:58:b3:ea:88:8d:e0:52:89:0a:42:2d:bd:01: 27:a8:19:ac:8c:e9:0c:ed:54:21:58:6d:7c:f3:12: 99:ee:fd:05:b0:a2:96:42:77:4e:4a:9e:18:c6:8b: b1:ff:f3:d7:0a:99:0f:28:12:c2:64:07:58:32:60: e4:cc:98:5d:e3:7c:c2:ab:01:0a:5c:c7:fb:90:b0: fb:67:cd:60:69:dd:54:0e:f9:26:f2:8d:fc:15:1f: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.29.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44929 Signature Algorithm: sha256WithRSAEncryption 8f:84:76:c0:90:72:a6:a7:db:9a:65:04:e9:0d:6a:3b:12:f0: ad:a5:5b:e7:70:f0:d9:91:2d:dd:fb:98:d3:6b:bd:00:71:83: 69:e9:8c:6e:c4:87:82:f9:28:43:f2:4e:73:a9:66:2a:9b:67: 03:29:c8:5b:59:61:a6:eb:45:f2:e8:45:48:11:66:8e:16:23: 2c:d6:67:5a:cd:11:a6:06:fe:f1:4f:d9:3d:e6:ad:47:fb:03: c2:ef:30:9e:f5:06:bf:ef:4d:3a:ee:33:af:a6:cc:54:a0:62: cc:2e:58:4b:45:7a:3a:f5:51:28:eb:2a:c2:d6:0e:52:fa:79: 7a:52:28:0f:14:2f:a7:d5:ea:ba:bc:6c:12:1a:e8:e6:c5:da: 31:10:40:1d:21:f0:80:ef:5a:e6:59:71:3e:13:35:e8:f0:ee: a3:01:3f:27:86:fa:13:5f:12:db:a9:16:86:9e:ca:54:b8:07: 52:84:c5:81:31:a9:bd:4e:98:b9:83:2c:9b:e6:07:cc:0c:12: 38:fc:b6:84:95:57:f2:95:af:ea:ce:ba:07:02:08:e3:39:d8: 01:07:7c:87:01:70:93:08:93:cb:17:b6:20:30:3e:70:e7:7a: ae:d0:b2:c2:3f:e3:de:7e:65:a0:c8:d6:b2:c4:87:76:f0:0b: 90:e7:75:c7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8G0Io9jLM8/sVDdNDLkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmVlMTI2OGZlMGFhZGYzMTdhYjQ0ZmQ4MTZkMTBmZTU0ZGRmYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hY4q3Jcp9gP/DOpzVAeFXzWcAAT EsX3q7vWVI6fX2Fg5YNKC8GfkHG/tG/79uq4aFA2Ue8Nv5erFTomBvn8CCq573KO hr7NaefV9uzL3MWAFQmHVV2+hUqptk10oamo0kloRAaMESAqbf/6pjPThs4Gopux 6ZCBTNsZynvvxTiw218xaGKmvl8xwC/6nHQTKoiDrgaUEcQzuTQUJOscm8Hq0EOO A1iz6oiN4FKJCkItvQEnqBmsjOkM7VQhWG188xKZ7v0FsKKWQndOSp4Yxoux//PX CpkPKBLCZAdYMmDkzJhd43zCqwEKXMf7kLD7Z81gad1UDvkm8o38FR+1GwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIbuEmj+Cq3zF6tE/YFtEP5U3fwMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2YzNDI1 NC0wZTlkLTRkYzUtYTQxOC0xYjcxMWFlYzFmYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZjM0MjU0 LTBlOWQtNGRjNS1hNDE4LTFiNzExYWVjMWZiYy8xL2h1NFNhUDRLcmZNWHEwVDln VzBRX2xUZF9Bdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8sdMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCvgTANBgkqhkiG9w0BAQsFAAOCAQEAj4R2wJBypqfbmmUE6Q1qOxLwraVb53Dw 2ZEt3fuY02u9AHGDaemMbsSHgvkoQ/JOc6lmKptnAynIW1lhputF8uhFSBFmjhYj LNZnWs0Rpgb+8U/ZPeatR/sDwu8wnvUGv+9NOu4zr6bMVKBizC5YS0V6OvVRKOsq wtYOUvp5elIoDxQvp9XqurxsEhro5sXaMRBAHSHwgO9a5llxPhM16PDuowE/J4b6 E18S26kWhp7KVLgHUoTFgTGpvU6YuYMsm+YHzAwSOPy2hJVX8pWv6s66BwII4znY AQd8hwFwkwiTyxe2IDA+cOd6rtCywj/j3n5loMjWssSHdvALkOd1xw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:42 2026 by rpki-client