This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer File: jHcBPkiKCccJtjIkbZQF2kWMVTg.cer (raw, json) Hash identifier: mt9HIaXhK1t3lpZaKCxpAFpAifqzpcby4NhUmLjFkAQ= Subject key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECB83E302A4D8EF5C415624E63F713 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51184 AS: 56471 AS: 57738 AS: 200388 IP: 5.180.152.0/22 IP: 91.206.8.0/23 IP: 116.204.196.0/22 IP: 178.251.64.0/21 IP: 185.17.12.0/22 IP: 185.68.248.0/22 IP: 185.128.244.0/22 IP: 185.129.172.0/22 IP: 193.238.236.0/22 IP: 194.11.27.0/24 IP: 217.116.176.0/20 IP: 2001:1b98::/32 IP: 2a02:1748::/32 IP: 2a06:d180::/29 IP: 2a06:d500::/29 IP: 2a0c:ad40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b8:3e:30:2a:4d:8e:f5:c4:15:62:4e:63:f7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c77013e488a09c709b632246d9405da458c5538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:ae:3a:ef:99:17:da:3b:b9:ab:6d:08:eb: 93:35:3b:06:7c:e6:c3:87:98:6d:4f:a0:6e:43:71: 71:29:00:85:e8:15:0f:c7:d7:e0:e5:a7:82:de:81: fa:04:d0:8b:4b:e7:68:45:3a:b6:13:70:1a:7a:90: 19:c2:18:4f:17:78:06:a4:33:95:6b:d2:54:c3:b7: ab:82:bf:1f:d6:ad:85:99:c4:c8:f1:17:80:c5:a8: 3b:ff:46:c8:67:35:1b:93:7f:ac:f8:32:19:fa:93: 7e:22:b4:f3:64:dd:e1:70:52:46:ef:cc:8a:ad:16: 61:ec:59:65:1f:55:2a:66:3c:5e:e9:7d:4c:af:82: c9:9f:29:2b:24:1d:c7:1e:bc:b8:d6:ec:a3:49:e1: b9:8c:2d:5c:45:46:e6:11:cf:dd:a4:d1:eb:64:aa: a5:4f:8f:73:ff:95:a5:77:c7:69:d2:b9:0f:ae:ab: 9a:68:4a:16:67:8d:0b:e8:0e:7a:e8:91:4c:03:16: ac:c3:94:2c:73:26:a4:1c:06:80:99:b2:59:ef:b9: c0:d1:6b:79:af:ad:e6:30:e3:73:9f:24:04:b0:90: 2a:85:d3:c1:39:b4:36:61:b6:92:b2:01:e1:01:34: cd:b8:40:2c:6d:2f:ba:f2:fe:8a:9f:50:f2:e0:3b: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.152.0/22 91.206.8.0/23 116.204.196.0/22 178.251.64.0/21 185.17.12.0/22 185.68.248.0/22 185.128.244.0/22 185.129.172.0/22 193.238.236.0/22 194.11.27.0/24 217.116.176.0/20 IPv6: 2001:1b98::/32 2a02:1748::/32 2a06:d180::/29 2a06:d500::/29 2a0c:ad40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51184 56471 57738 200388 Signature Algorithm: sha256WithRSAEncryption 9d:68:bb:60:3f:17:3e:33:de:5a:88:f9:f5:f3:7c:43:f0:67: e7:dd:3d:9f:5d:66:46:18:2e:e5:16:54:a5:c2:1d:8e:34:52: 20:1a:bf:ef:de:04:a9:38:2d:8f:4c:d3:f8:0b:ad:35:a9:1f: fb:60:8b:4f:60:f2:46:e2:d1:7a:e2:d2:97:68:be:e3:04:ef: 98:fa:67:f7:71:cb:c8:8b:c9:e9:82:88:ca:25:ce:ee:d8:c0: a2:3e:6e:7d:19:7d:8e:9f:16:24:91:24:aa:f1:51:45:13:01: bd:27:8a:74:3a:52:c1:9b:b0:38:04:c3:2c:cf:67:3b:09:53: 2e:1d:6c:2d:14:8e:66:8e:94:f6:06:8e:d8:2f:1c:48:c6:c8: 47:af:87:51:93:ab:39:fe:e1:11:7e:52:3c:95:cb:e9:08:36: 65:9b:bd:b2:3a:9f:18:8f:53:59:6b:97:c7:6f:5b:3c:9a:9b: a8:1c:f6:0e:89:e1:59:32:5e:f8:16:c5:19:61:ce:7f:f9:75: a4:3a:03:c2:f8:47:94:e0:3d:dd:8c:71:65:b0:2b:9e:2b:ee: 2d:89:8c:56:ae:35:16:98:9a:04:93:cc:e0:76:39:29:fc:47: 56:c8:d8:43:5f:8c:eb:10:d9:fe:df:1b:c9:37:38:09:b9:64: 62:b1:ed:1e -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISAZt57Lg+MCpNjvXEFWJOY/cTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzc3MDEzZTQ4OGEwOWM3MDliNjMyMjQ2ZDk0MDVkYTQ1OGM1NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xiuOu+ZF9o7uattCOuTNTsGfObD h5htT6BuQ3FxKQCF6BUPx9fg5aeC3oH6BNCLS+doRTq2E3AaepAZwhhPF3gGpDOV a9JUw7ergr8f1q2FmcTI8ReAxag7/0bIZzUbk3+s+DIZ+pN+IrTzZN3hcFJG78yK rRZh7FllH1UqZjxe6X1Mr4LJnykrJB3HHry41uyjSeG5jC1cRUbmEc/dpNHrZKql T49z/5Wld8dp0rkPrquaaEoWZ40L6A566JFMAxasw5QscyakHAaAmbJZ77nA0Wt5 r63mMONznyQEsJAqhdPBObQ2YbaSsgHhATTNuEAsbS+68v6Kn1Dy4DtqAwIDAQAB o4IDFzCCAxMwHQYDVR0OBBYEFIx3AT5IignHCbYyJG2UBdpFjFU4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzE2ODUw OS0yY2YzLTQ4M2QtYmNkOC0wMjEyOTUzM2EzM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvMTY4NTA5 LTJjZjMtNDgzZC1iY2Q4LTAyMTI5NTMzYTMzZC8xL2pIY0JQa2lLQ2NjSnRqSWti WlFGMmtXTVZUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGGBggrBgEF BQcBBwEB/wR3MHUwSAQCAAEwQgMEAgW0mAMEAVvOCAMEAnTMxAMEA7L7QAMEArkR DAMEArlE+AMEArmA9AMEArmBrAMEAsHu7AMEAMILGwMEBNl0sDApBAIAAjAjAwUA IAEbmAMFACoCF0gDBQMqBtGAAwUDKgbVAAMFAyoMrUAwKQYIKwYBBQUHAQgBAf8E GjAYoBYwFAIDAMfwAgMA3JcCAwDhigIDAw7EMA0GCSqGSIb3DQEBCwUAA4IBAQCd aLtgPxc+M95aiPn183xD8Gfn3T2fXWZGGC7lFlSlwh2ONFIgGr/v3gSpOC2PTNP4 C601qR/7YItPYPJG4tF64tKXaL7jBO+Y+mf3ccvIi8npgojKJc7u2MCiPm59GX2O nxYkkSSq8VFFEwG9J4p0OlLBm7A4BMMsz2c7CVMuHWwtFI5mjpT2Bo7YLxxIxshH r4dRk6s5/uERflI8lcvpCDZlm72yOp8Yj1NZa5fHb1s8mpuoHPYOieFZMl74FsUZ Yc5/+XWkOgPC+EeU4D3djHFlsCueK+4tiYxWrjUWmJoEk8zgdjkp/EdWyNhDX4zr ENn+3xvJNzgJuWRise0e -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:14 2026 by rpki-client