This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer File: paHquv4t5wOCJ6hZOnrFzDkvN04.cer (raw, json) Hash identifier: 0V2uSPWKDMCa+pbplbBU6xKJsDcitTMOl8o8/fZC/ao= Subject key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE084D8436D47272C76B7A57C99BDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12952 IP: 185.118.128.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:08:4d:84:36:d4:72:72:c7:6b:7a:57:c9:9b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:f0:53:f7:77:4f:df:8b:d2:e9:73:30:7f: 0d:0f:f1:41:eb:17:65:20:6f:fc:1b:21:c6:89:38: 87:e0:36:b3:2f:e0:ba:ed:08:29:d3:6c:bb:a1:25: a3:7a:cb:3d:aa:64:53:44:c9:24:a5:4d:54:31:cb: de:d5:f9:0f:96:8e:c1:24:ed:fa:ca:47:21:10:88: 3c:cb:0d:bd:eb:64:dd:79:02:86:21:af:9e:d7:ec: 35:f3:61:0d:96:20:78:5a:36:44:f0:9f:33:a6:dc: bd:80:a2:b6:64:26:12:ac:fa:0c:b1:68:4b:1e:1b: 97:6f:8f:35:62:13:aa:c3:55:9c:2f:cb:3c:c8:ab: 05:0d:d6:ef:12:90:10:6f:f4:49:65:49:67:6d:c2: 94:c8:37:2d:4f:bd:67:2f:fd:7b:80:3c:3d:8e:06: 60:36:5b:d6:95:f7:84:29:f8:22:4b:67:c2:94:c7: d8:4f:da:15:49:81:12:15:af:07:28:c7:61:1d:98: 8f:bf:3f:88:d4:38:31:0f:74:94:7b:32:98:b5:10: 3e:37:f5:35:ce:b2:9f:19:00:ce:ef:67:6f:dd:b9: 84:ba:49:5d:16:2f:2b:58:95:d7:a6:c8:08:e0:c3: 86:c0:fa:0a:9d:51:0d:a9:d7:99:3d:f6:dd:22:d7: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.128.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12952 Signature Algorithm: sha256WithRSAEncryption 90:19:85:ec:83:bd:f2:fb:bf:e2:24:63:ab:8b:76:99:ba:fc: df:c1:35:ff:12:f4:a2:d5:c1:1e:d2:52:77:39:e5:c0:0e:ac: 72:ce:2e:6d:4f:14:1f:c9:83:0b:32:22:da:b8:19:9f:da:d2: 70:9c:ed:53:9f:ed:eb:6d:1b:f1:05:af:ec:f4:b1:83:68:cf: 62:21:23:68:59:68:01:18:cd:09:bf:e4:88:d5:20:b3:cf:9c: 23:d4:e0:e1:64:ae:01:0b:4f:7f:93:bc:97:bb:c7:a8:04:58: 1f:c9:69:df:8a:5c:59:40:0c:df:9d:58:05:be:be:e8:dc:9f: 60:fe:c1:1d:af:66:cd:51:5f:81:80:20:cf:21:5b:0d:f7:19: 7c:e6:c6:5d:2b:ac:60:99:80:33:cd:4e:c7:19:d2:ce:93:ab: 68:bb:73:31:f5:25:22:b3:b2:9c:6c:c1:37:36:ab:9a:64:e8: 55:2d:39:b9:28:3a:37:a4:40:d8:66:a1:b2:ee:90:12:89:28: 75:84:f1:db:ec:2a:0f:2a:9a:f2:01:9e:08:10:07:bc:fa:72: ba:1b:51:48:53:0e:92:dc:6a:a1:45:21:19:8d:0a:6f:dd:ec: 9d:83:fe:4a:93:d8:5b:ba:11:d8:25:41:cf:14:3a:c1:4e:13: 24:d5:cf:33 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt87ghNhDbUcnLHa3pXyZvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWExZWFiYWZlMmRlNzAzODIyN2E4NTkzYTdhYzVjYzM5MmYzNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq3wU/d3T9+L0ulzMH8ND/FB6xdl IG/8GyHGiTiH4DazL+C67Qgp02y7oSWjess9qmRTRMkkpU1UMcve1fkPlo7BJO36 ykchEIg8yw2962TdeQKGIa+e1+w182ENliB4WjZE8J8zpty9gKK2ZCYSrPoMsWhL HhuXb481YhOqw1WcL8s8yKsFDdbvEpAQb/RJZUlnbcKUyDctT71nL/17gDw9jgZg NlvWlfeEKfgiS2fClMfYT9oVSYESFa8HKMdhHZiPvz+I1DgxD3SUezKYtRA+N/U1 zrKfGQDO72dv3bmEukldFi8rWJXXpsgI4MOGwPoKnVENqdeZPfbdIteIewIDAQAB o4ICnzCCApswHQYDVR0OBBYEFKWh6rr+LecDgieoWTp6xcw5LzdOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzRmNGI0 ZS0yM2NjLTRjM2EtOTBhZi00ZWYzOTUxNGFhNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvNGY0YjRl LTIzY2MtNGMzYS05MGFmLTRlZjM5NTE0YWE0My8xL3BhSHF1djR0NXdPQ0o2aFpP bnJGekRrdk4wNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXaAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjKYMA0GCSqGSIb3DQEBCwUAA4IBAQCQGYXsg73y+7/iJGOri3aZuvzfwTX/EvSi 1cEe0lJ3OeXADqxyzi5tTxQfyYMLMiLauBmf2tJwnO1Tn+3rbRvxBa/s9LGDaM9i ISNoWWgBGM0Jv+SI1SCzz5wj1ODhZK4BC09/k7yXu8eoBFgfyWnfilxZQAzfnVgF vr7o3J9g/sEdr2bNUV+BgCDPIVsN9xl85sZdK6xgmYAzzU7HGdLOk6tou3Mx9SUi s7KcbME3NquaZOhVLTm5KDo3pEDYZqGy7pASiSh1hPHb7CoPKpryAZ4IEAe8+nK6 G1FIUw6S3GqhRSEZjQpv3eydg/5Kk9hbuhHYJUHPFDrBThMk1c8z -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:13 2026 by rpki-client