This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer File: humRNBcbWGP2LyK316v3QDSVKOw.cer (raw, json) Hash identifier: MjQnISKQFuFtuPiEZPsyxnem11KIxm583uTNsnB6MdI= Subject key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783434AB970D4EDB0D05E07858688327 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60439 AS: 209230 IP: 5.182.76.0/22 IP: 5.183.112.0/22 IP: 45.10.76.0/22 IP: 45.12.20.0/22 IP: 45.82.92.0/22 IP: 45.90.148.0/22 IP: 45.94.80.0/22 IP: 45.131.112.0/22 IP: 45.136.212.0/22 IP: 45.141.224.0/22 IP: 45.151.80.0/22 IP: 85.208.196.0/22 IP: 91.207.248.0/24 IP: 139.28.16.0/22 IP: 193.160.22.0/23 IP: 193.160.30.0/23 IP: 194.117.73.0/24 IP: 2a13:8240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:34:ab:97:0d:4e:db:0d:05:e0:78:58:68:83:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86e99134171b5863f62f22b7d7abf740349528ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:a1:29:ca:31:dd:2c:4b:fe:21:ce:8b:10: c9:f7:2c:dc:6d:75:11:ea:c5:99:12:a6:75:2e:16: 49:89:d3:96:75:d0:5f:25:50:8c:b8:eb:16:4e:5a: 76:26:09:38:23:af:69:55:af:02:33:d0:d7:90:4a: f6:aa:a5:56:a1:f1:83:80:e5:b8:dd:07:14:ae:fa: 4c:dc:c2:f1:74:95:19:69:cb:29:ed:28:85:38:da: 5d:85:87:8b:3b:bf:4c:a6:c8:5c:40:96:34:d6:7a: e7:48:e0:a0:9f:50:2a:bd:fc:e4:17:2e:96:22:d7: 55:06:c3:95:b7:e4:58:15:5d:60:63:fb:4f:b8:09: 02:c1:34:23:a9:65:f2:59:7b:6d:e4:b5:52:93:5c: a4:43:9f:a7:71:83:97:00:44:df:c3:f5:f7:c1:08: c4:dc:8e:04:fe:a2:62:a8:08:35:0a:08:52:8b:d5: bd:ff:6c:ca:2e:88:67:e6:33:96:75:34:3a:7e:2e: 6c:94:ba:03:67:c6:51:5b:c0:c8:ce:bc:84:a3:92: 02:68:f4:eb:95:87:d9:a9:88:9b:c3:d7:6a:95:2c: 65:6a:2c:84:9f:aa:93:e9:b2:5d:26:19:df:83:d1: c3:8b:06:02:ca:03:eb:27:d1:35:39:a4:41:51:78: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.76.0/22 5.183.112.0/22 45.10.76.0/22 45.12.20.0/22 45.82.92.0/22 45.90.148.0/22 45.94.80.0/22 45.131.112.0/22 45.136.212.0/22 45.141.224.0/22 45.151.80.0/22 85.208.196.0/22 91.207.248.0/24 139.28.16.0/22 193.160.22.0/23 193.160.30.0/23 194.117.73.0/24 IPv6: 2a13:8240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60439 209230 Signature Algorithm: sha256WithRSAEncryption 7b:ea:f7:89:3b:77:4d:66:6e:aa:57:ab:df:12:9c:ee:73:31: 3a:9f:f6:a3:6c:fb:8f:2c:b8:3c:4f:25:20:d8:cd:d9:fe:94: 17:22:bf:1d:f7:cf:70:4a:51:f4:d3:28:14:f4:f1:21:01:95: f1:ff:18:11:ee:52:93:1e:43:58:75:a3:5e:b0:af:b5:42:44: 5b:74:4e:a4:2c:64:ba:d1:0e:1b:e7:a0:9f:05:52:5f:66:fc: 03:df:95:49:f9:fc:12:5d:54:4c:d8:87:30:fb:7a:11:61:bd: b3:39:36:cf:b9:18:65:24:b5:2f:80:54:e4:19:8c:88:c6:bb: d9:7f:7b:5e:67:dd:28:f3:82:b9:89:ef:77:41:a2:05:79:63: 32:12:d1:9b:67:57:67:03:d4:76:1a:0c:d6:86:b9:0d:05:d5: 1b:7a:6c:8c:2c:e4:ed:d4:06:68:11:d3:87:ae:23:f8:cd:23: a8:c3:1d:b6:58:e3:50:20:0a:ce:7e:16:e7:ed:11:75:90:e2: ff:46:65:9a:eb:e9:8c:3f:02:91:4c:72:bc:aa:84:61:c0:31: ba:5b:58:b0:68:12:a9:d1:c4:65:b0:49:3e:b6:34:1f:98:55: 22:09:ad:62:4e:a6:dd:ef:c6:0c:55:a2:03:13:3d:34:a7:c3: dc:4c:f9:77 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZt4NDSrlw1O2w0F4HhYaIMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmU5OTEzNDE3MWI1ODYzZjYyZjIyYjdkN2FiZjc0MDM0OTUyOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQihKcox3SxL/iHOixDJ9yzcbXUR 6sWZEqZ1LhZJidOWddBfJVCMuOsWTlp2Jgk4I69pVa8CM9DXkEr2qqVWofGDgOW4 3QcUrvpM3MLxdJUZacsp7SiFONpdhYeLO79MpshcQJY01nrnSOCgn1AqvfzkFy6W ItdVBsOVt+RYFV1gY/tPuAkCwTQjqWXyWXtt5LVSk1ykQ5+ncYOXAETfw/X3wQjE 3I4E/qJiqAg1CghSi9W9/2zKLohn5jOWdTQ6fi5slLoDZ8ZRW8DIzryEo5ICaPTr lYfZqYibw9dqlSxlaiyEn6qT6bJdJhnfg9HDiwYCygPrJ9E1OaRBUXjCmQIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFIbpkTQXG1hj9i8it9er90A0lSjsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2MxYjVl Yy01MmZmLTRlY2ItYjNmZC1kYTk1ODA4YmEyYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvYzFiNWVj LTUyZmYtNGVjYi1iM2ZkLWRhOTU4MDhiYTJjMS8xL2h1bVJOQmNiV0dQMkx5SzMx NnYzUURTVktPdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGOBggrBgEF BQcBBwEB/wR/MH0wbAQCAAEwZgMEAgW2TAMEAgW3cAMEAi0KTAMEAi0MFAMEAi1S XAMEAi1alAMEAi1eUAMEAi2DcAMEAi2I1AMEAi2N4AMEAi2XUAMEAlXQxAMEAFvP +AMEAoscEAMEAcGgFgMEAcGgHgMEAMJ1STANBAIAAjAHAwUAKhOCQDAfBggrBgEF BQcBCAEB/wQQMA6gDDAKAgMA7BcCAwMxTjANBgkqhkiG9w0BAQsFAAOCAQEAe+r3 iTt3TWZuqler3xKc7nMxOp/2o2z7jyy4PE8lINjN2f6UFyK/HffPcEpR9NMoFPTx IQGV8f8YEe5Skx5DWHWjXrCvtUJEW3ROpCxkutEOG+egnwVSX2b8A9+VSfn8El1U TNiHMPt6EWG9szk2z7kYZSS1L4BU5BmMiMa72X97XmfdKPOCuYnvd0GiBXljMhLR m2dXZwPUdhoM1oa5DQXVG3psjCzk7dQGaBHTh64j+M0jqMMdtljjUCAKzn4W5+0R dZDi/0ZlmuvpjD8CkUxyvKqEYcAxultYsGgSqdHEZbBJPrY0H5hVIgmtYk6m3e/G DFWiAxM9NKfD3Ez5dw== -----END CERTIFICATE-----Generated at Sun Jan 18 09:51:47 2026 by rpki-client