This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer File: huGrpgDN5ewxgxmxVZS2irlslWw.cer (raw, json) Hash identifier: lqjgYEJzklxfYIewNPIaYXQiU8/fDX4hyaAnEXfovZE= Subject key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED191DD3673798CF2827C046E24566 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207586 IP: 176.126.116.0/24 IP: 2a11:d540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:19:1d:d3:67:37:98:cf:28:27:c0:46:e2:45:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86e1aba600cde5ec318319b15594b68ab96c956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:54:c7:3c:7e:ad:70:97:9f:7e:e4:89:28: bf:3e:ea:14:5c:89:d9:e8:b7:ea:b3:d2:74:b5:c0: f5:52:c5:0e:35:e1:fe:09:e0:97:c8:94:fc:47:a7: 38:ca:8f:66:e3:64:23:12:15:4b:77:18:3c:5b:1d: d6:1a:e7:c1:e5:ed:8f:ad:02:13:51:b0:33:b1:da: 9c:66:51:e4:24:37:f4:32:4d:eb:9d:38:18:c7:b0: 98:b0:71:ec:e1:7f:ee:1e:09:71:6e:9b:7c:24:05: 9b:dc:8b:41:34:bb:ca:fc:0b:f6:e1:b3:e7:c2:99: 88:e4:7e:7c:c4:dd:c1:dc:6e:7d:a7:6d:e1:8e:9b: ea:bd:f7:ae:f7:e9:87:21:b0:6b:bc:87:7d:6b:90: 54:ed:c4:40:00:b7:f4:f2:ba:e7:07:63:cb:17:61: 6d:db:a7:84:02:81:d4:c5:c5:3a:be:9c:61:76:d2: 8f:7a:d2:7b:55:2e:25:fc:f3:62:55:c7:86:dd:4c: 60:8f:ef:43:1b:ba:89:1b:34:0a:e1:cd:97:6a:0c: dd:e4:88:72:7b:3a:1d:3b:e3:60:cf:66:9c:51:f7: 31:07:bf:55:cf:4e:f6:9e:9c:d2:39:48:c9:50:79: 4c:50:0a:aa:00:f7:c6:a3:97:15:a4:28:3e:2e:21: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.116.0/24 IPv6: 2a11:d540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207586 Signature Algorithm: sha256WithRSAEncryption 33:8b:36:bb:88:f0:f2:89:f3:38:c7:a6:ce:e0:64:81:f1:5c: ac:08:da:f8:69:29:c0:9c:2c:67:8b:11:b3:13:37:91:2c:2e: e3:8f:84:ed:71:59:e5:87:8c:7d:b3:0e:ce:82:01:81:76:8f: 7f:5b:b4:ce:f2:30:af:f5:4a:ba:75:ed:bb:d9:83:5c:2d:1b: e7:96:ac:e3:48:66:7a:03:31:78:44:98:cd:dc:e9:a9:f0:44: 4e:3f:b5:83:f1:a7:0a:b3:e3:7b:9f:9d:81:f5:05:4f:b0:85: f2:d1:cb:a4:79:45:91:18:1d:11:fe:1e:4c:ac:17:db:e2:60: cf:24:5c:97:ac:4c:07:ff:43:6b:fa:ba:de:0b:c2:88:62:ab: 16:1e:7c:08:0e:c5:99:8b:ce:28:05:2c:dd:97:1f:96:be:ae: 3b:c4:75:fd:64:a7:fb:6c:3e:fb:e9:91:fc:f6:38:5c:aa:fa: 92:25:1d:fa:09:04:05:25:2b:a1:78:bc:9f:38:81:b5:5e:a2: 2c:97:3e:7e:63:1a:27:c1:99:76:8a:cb:1c:30:25:8d:15:14: 36:df:5a:63:df:fa:26:a1:c0:e2:ad:13:2d:1e:34:c6:fa:f6: b4:1b:2c:ee:0f:34:07:ec:8d:b1:b3:6b:5b:c2:ec:6f:f9:6c: 00:93:c6:45 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57Rkd02c3mM8oJ8BG4kVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmUxYWJhNjAwY2RlNWVjMzE4MzE5YjE1NTk0YjY4YWI5NmM5NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ZUxzx+rXCXn37kiSi/PuoUXInZ 6Lfqs9J0tcD1UsUONeH+CeCXyJT8R6c4yo9m42QjEhVLdxg8Wx3WGufB5e2PrQIT UbAzsdqcZlHkJDf0Mk3rnTgYx7CYsHHs4X/uHglxbpt8JAWb3ItBNLvK/Av24bPn wpmI5H58xN3B3G59p23hjpvqvfeu9+mHIbBrvId9a5BU7cRAALf08rrnB2PLF2Ft 26eEAoHUxcU6vpxhdtKPetJ7VS4l/PNiVceG3Uxgj+9DG7qJGzQK4c2Xagzd5Ihy ezodO+Ngz2acUfcxB79Vz072npzSOUjJUHlMUAqqAPfGo5cVpCg+LiG9wwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIbhq6YAzeXsMYMZsVWUtoq5bJVsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2U2ODQ1 ZC0xYzNjLTQ4ZDYtYTZiMi1kNjA1YzUzYTM1YmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvZTY4NDVk LTFjM2MtNDhkNi1hNmIyLWQ2MDVjNTNhMzViZS8xL2h1R3JwZ0RONWV3eGd4bXhW WlMyaXJsc2xXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAsH50MA0EAgACMAcDBQMqEdVAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMq4jANBgkqhkiG9w0BAQsFAAOCAQEAM4s2u4jw8onz OMemzuBkgfFcrAja+GkpwJwsZ4sRsxM3kSwu44+E7XFZ5YeMfbMOzoIBgXaPf1u0 zvIwr/VKunXtu9mDXC0b55as40hmegMxeESYzdzpqfBETj+1g/GnCrPje5+dgfUF T7CF8tHLpHlFkRgdEf4eTKwX2+JgzyRcl6xMB/9Da/q63gvCiGKrFh58CA7FmYvO KAUs3Zcflr6uO8R1/WSn+2w+++mR/PY4XKr6kiUd+gkEBSUroXi8nziBtV6iLJc+ fmMaJ8GZdorLHDAljRUUNt9aY9/6JqHA4q0TLR40xvr2tBss7g80B+yNsbNrW8Ls b/lsAJPGRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:09 2026 by rpki-client