This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer (raw, json) Hash identifier: RltGPbgxOfqbEt48bjEdNb4P8f3K4x55Jtk2qFdJTMk= Subject key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA73166D652E219E0EEFFF4FA60D7DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214704 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:31:66:d6:52:e2:19:e0:ee:ff:f4:fa:60:d7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac7862c299d6088718760a96168272fccbfda970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:5a:3b:58:e5:24:fd:13:80:40:cb:66:6e: 35:2c:ed:9b:9a:f5:18:e1:77:e9:47:98:06:2a:64: 94:08:ab:89:30:0c:a3:e3:85:1b:d0:ab:74:41:b0: c0:ec:e0:08:34:cd:35:85:55:7e:b5:8c:e4:dd:da: ee:ef:19:bc:98:f6:96:82:8a:93:01:e8:a3:7c:f7: d1:5b:96:9a:9a:02:bc:84:bc:29:fb:e2:b9:b9:be: 6c:03:62:d1:db:ba:1e:6d:7b:d7:dc:1d:a6:84:c8: 12:b4:df:49:92:a0:99:2b:bc:94:7b:ac:82:00:08: c5:3c:59:61:97:98:46:8e:60:35:af:6a:b0:14:d6: 32:ca:d5:7d:f8:0e:89:92:9d:15:0c:67:ff:0f:17: a3:b8:23:74:cc:4b:0f:15:cd:13:fa:e4:ee:c4:02: cb:a9:58:07:c0:d0:3a:84:7a:98:a8:ac:45:04:b7: 1a:5d:c0:c4:50:e1:8d:02:18:34:ea:9c:44:33:2e: 91:a1:74:fc:82:8f:3c:74:59:34:b2:09:8e:f1:3b: cc:00:f4:43:82:b5:b8:a3:cc:f9:5d:f4:be:fa:fd: 63:20:61:4b:33:0b:ef:cb:0c:38:49:54:45:e1:a5: 22:01:d5:e4:47:a3:02:73:9d:ca:87:29:9f:87:da: a6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214704 Signature Algorithm: sha256WithRSAEncryption 9a:19:77:07:e8:63:8e:29:b2:f4:e1:bc:eb:5d:72:79:7a:60: 52:a0:bd:8e:55:5d:fe:eb:e3:bb:a5:99:29:ca:b9:22:ed:47: 7b:1c:b6:0e:64:a2:05:46:51:6e:fe:85:2e:1e:c7:3a:cb:c4: e0:75:8a:f8:ea:68:20:ac:ce:ab:61:f4:65:bf:95:81:4d:47: e6:d6:dc:f5:9d:4a:e0:e7:20:dc:8f:f3:d2:a8:32:47:62:d6: 36:7f:3d:ad:ef:46:02:03:b5:e8:9b:07:79:56:54:a6:cf:40: 7c:1e:92:5a:9b:13:3a:0e:4f:5f:a0:3d:6b:fb:d9:cb:16:cb: 6e:51:bd:c4:e3:ef:c5:7d:b9:20:6c:5f:26:59:ee:5a:ee:91: da:41:00:79:5c:52:1c:b3:28:ae:4e:7a:df:ca:b5:63:f4:d9: 2b:d0:9f:92:06:2e:fc:e1:73:67:ad:e9:df:1e:2d:da:51:ca: 8d:4c:82:98:bf:4e:cc:2c:8e:e4:22:ce:36:92:08:be:73:4d: 74:da:ad:a0:b5:7b:fb:f5:66:cb:95:9f:be:01:9b:b1:d6:2c: 08:fd:37:1e:74:9c:87:c7:86:67:1d:fc:cc:39:64:b4:ad:02: b0:e7:22:a6:a7:63:66:1a:bc:12:9a:b1:9b:83:ea:cf:6f:4a: 2a:b0:e2:6b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+pzFm1lLiGeDu//T6YNffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzc4NjJjMjk5ZDYwODg3MTg3NjBhOTYxNjgyNzJmY2NiZmRhOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8daO1jlJP0TgEDLZm41LO2bmvUY 4XfpR5gGKmSUCKuJMAyj44Ub0Kt0QbDA7OAINM01hVV+tYzk3dru7xm8mPaWgoqT AeijfPfRW5aamgK8hLwp++K5ub5sA2LR27oebXvX3B2mhMgStN9JkqCZK7yUe6yC AAjFPFlhl5hGjmA1r2qwFNYyytV9+A6Jkp0VDGf/DxejuCN0zEsPFc0T+uTuxALL qVgHwNA6hHqYqKxFBLcaXcDEUOGNAhg06pxEMy6RoXT8go88dFk0sgmO8TvMAPRD grW4o8z5XfS++v1jIGFLMwvvyww4SVRF4aUiAdXkR6MCc53Khymfh9qmhwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFKx4YsKZ1giHGHYKlhaCcvzL/alwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2U5NGZi Zi03NzQ4LTQxODMtODRkMC1mYTJmYWRlYjAyODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvZTk0ZmJm LTc3NDgtNDE4My04NGQwLWZhMmZhZGViMDI4MS8xL3JIaGl3cG5XQ0ljWWRncVdG b0p5X012OXFYQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGsDANBgkqhkiG9w0BAQsFAAOCAQEAmhl3B+hjjimy 9OG8611yeXpgUqC9jlVd/uvju6WZKcq5Iu1Hexy2DmSiBUZRbv6FLh7HOsvE4HWK +OpoIKzOq2H0Zb+VgU1H5tbc9Z1K4Ocg3I/z0qgyR2LWNn89re9GAgO16JsHeVZU ps9AfB6SWpsTOg5PX6A9a/vZyxbLblG9xOPvxX25IGxfJlnuWu6R2kEAeVxSHLMo rk5638q1Y/TZK9CfkgYu/OFzZ63p3x4t2lHKjUyCmL9OzCyO5CLONpIIvnNNdNqt oLV7+/Vmy5WfvgGbsdYsCP03HnSch8eGZx38zDlktK0CsOcipqdjZhq8Epqxm4Pq z29KKrDiaw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:29 2026 by rpki-client