This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer File: rwmHHP1haABnerIynsumHed3V-Y.cer (raw, json) Hash identifier: iLWIwcrkI14899bqsS2ilazUtQMBN5bJjDq3KuF8JDw= Subject key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70448F9FE4355922A2A7A2A187278 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204058 IP: 185.254.248.0/22 IP: 193.3.242.0/24 IP: 2a0c:b3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:04:48:f9:fe:43:55:92:2a:2a:7a:2a:18:72:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af09871cfd616800677ab2329ecba61de77757e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:42:af:a2:e0:c8:ba:55:95:e8:03:9d:9f: 62:16:ef:4d:08:b1:22:1f:d8:9b:23:3d:6a:12:da: eb:c9:27:d9:29:06:6d:47:51:07:a0:f4:8a:4f:29: 2c:7c:9e:8f:d4:52:e4:a0:18:be:a3:6b:aa:f9:a6: 78:f7:1c:f7:20:8d:3b:c7:c8:54:b5:d0:b1:6f:36: d5:58:93:5b:fd:63:d0:0c:55:37:4a:be:6f:a3:09: 4d:6e:dc:49:7e:53:2e:d8:db:df:e3:e9:48:e1:38: 21:4d:b6:2d:5c:06:55:c9:08:af:0b:02:e6:b0:2c: bc:d7:ee:36:07:cb:e4:13:2c:ce:2b:39:27:0e:4c: d6:71:1e:f6:0e:09:56:1b:67:d5:dd:2a:11:be:cf: e2:22:bc:08:b0:e4:aa:81:7f:bf:d9:65:b6:ea:15: 9a:88:b9:e7:6b:0c:65:bc:f5:14:24:0f:ac:3f:62: 78:64:5a:e3:8e:90:d5:bb:4a:d8:2b:74:5d:e5:bd: 4d:30:c9:59:fd:66:9e:e3:06:ac:6a:72:bd:a0:45: 70:bd:a7:e7:24:07:30:f1:ec:51:56:c2:ee:3c:49: b4:9e:50:4a:96:d5:36:f5:64:31:75:ac:64:8b:80: 4a:dc:14:f2:b9:c1:30:81:8d:7f:01:be:ce:65:c1: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.248.0/22 193.3.242.0/24 IPv6: 2a0c:b3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204058 Signature Algorithm: sha256WithRSAEncryption 9d:d9:3c:d8:e1:32:b2:f7:a1:64:9d:29:49:2e:b1:c8:98:af: 8d:6e:f3:e5:3b:56:b9:90:f5:a1:f3:c4:4f:05:04:39:dc:be: 14:e5:d1:fe:58:f5:92:fa:04:31:c9:6a:82:7b:8b:28:49:bc: 03:16:06:39:d7:16:d0:d6:ff:d8:9e:cd:42:1c:ab:77:89:72: 33:bd:51:5b:b5:0d:c3:27:23:c3:a6:65:bc:70:55:88:86:c9: 92:40:83:99:b1:ea:7e:c0:0b:65:0e:28:d7:25:32:3d:81:96: 31:ca:fc:16:fe:05:e8:66:05:4b:8f:c4:cd:0c:ac:41:d8:cc: 31:38:13:75:eb:ce:94:d9:fa:59:e0:7f:13:3b:69:d7:c5:da: 9f:a7:07:30:36:31:c1:06:30:20:c7:df:ca:aa:25:b3:06:39: 80:2b:4b:98:ae:b6:4d:f1:a6:27:b2:bd:e1:07:d6:b8:b8:6b: 74:23:d3:9f:7c:47:17:69:16:54:36:76:20:ad:7c:f7:12:b2: 40:0e:b0:e4:ea:d9:f1:24:1b:4c:3d:42:65:9c:6d:71:09:f3: 2d:8f:9f:5e:56:74:bc:3d:27:f0:29:40:7a:97:2d:59:5b:70: 8d:21:ee:23:ae:73:da:ab:03:8a:c4:70:fc:0b:49:0c:39:02: f5:ba:5e:08 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xwRI+f5DVZIqKnoqGHJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjA5ODcxY2ZkNjE2ODAwNjc3YWIyMzI5ZWNiYTYxZGU3Nzc1N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL9Cr6LgyLpVlegDnZ9iFu9NCLEi H9ibIz1qEtrrySfZKQZtR1EHoPSKTyksfJ6P1FLkoBi+o2uq+aZ49xz3II07x8hU tdCxbzbVWJNb/WPQDFU3Sr5vowlNbtxJflMu2Nvf4+lI4TghTbYtXAZVyQivCwLm sCy81+42B8vkEyzOKzknDkzWcR72DglWG2fV3SoRvs/iIrwIsOSqgX+/2WW26hWa iLnnawxlvPUUJA+sP2J4ZFrjjpDVu0rYK3Rd5b1NMMlZ/Wae4wasanK9oEVwvafn JAcw8exRVsLuPEm0nlBKltU29WQxdaxki4BK3BTyucEwgY1/Ab7OZcHnKQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFK8Jhxz9YWgAZ3qyMp7Lph3nd1fmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzhhZDli My0wYjlmLTQyMjQtOTA5Yi1iNDNkYmY4OTVjZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvOGFkOWIz LTBiOWYtNDIyNC05MDliLWI0M2RiZjg5NWNmZS8xL3J3bUhIUDFoYUFCbmVySXlu c3VtSGVkM1YtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuf74AwQAwQPyMA0EAgACMAcDBQMqDLPAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdGjANBgkqhkiG9w0BAQsFAAOCAQEAndk8 2OEysvehZJ0pSS6xyJivjW7z5TtWuZD1ofPETwUEOdy+FOXR/lj1kvoEMclqgnuL KEm8AxYGOdcW0Nb/2J7NQhyrd4lyM71RW7UNwycjw6ZlvHBViIbJkkCDmbHqfsAL ZQ4o1yUyPYGWMcr8Fv4F6GYFS4/EzQysQdjMMTgTdevOlNn6WeB/Eztp18Xan6cH MDYxwQYwIMffyqolswY5gCtLmK62TfGmJ7K94QfWuLhrdCPTn3xHF2kWVDZ2IK18 9xKyQA6w5OrZ8SQbTD1CZZxtcQnzLY+fXlZ0vD0n8ClAepctWVtwjSHuI65z2qsD isRw/AtJDDkC9bpeCA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:39 2026 by rpki-client