This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.cer (raw, json) Hash identifier: GK4kON3yOjG2e59OIiTf9NmTP4zr/0fw6100OtUZ2S0= Subject key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366D3656B62F4F0C2DF0697A187BD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 188.92.28.0/24 IP: 2a0a:c140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6d:36:56:b6:2f:4f:0c:2d:f0:69:7a:18:7b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:f1:e3:0e:94:ab:86:96:b2:a3:af:95:76: 87:f6:6c:e4:96:33:33:5b:5e:9c:f6:36:2c:2c:61: 6c:7d:ae:e2:bb:39:c9:7e:69:04:57:68:a5:0c:f5: f0:6a:0b:06:81:80:5b:fb:8e:3a:e7:5d:1c:2f:c4: 31:c8:fd:73:c1:71:75:ca:9d:be:46:3c:7d:97:ad: e6:57:1e:37:c8:db:45:f7:70:cc:a1:fb:c4:5e:c2: 8a:da:3e:c4:c8:9d:8c:89:22:48:57:fd:1f:d1:93: 3c:2a:bc:f3:f9:29:2a:f8:d6:7d:35:65:4f:53:ff: bf:d9:9e:52:4e:61:c0:ff:4b:0c:3e:e5:cf:b6:3c: 05:df:9c:80:2b:30:71:db:02:cd:ca:1a:be:c8:a5: ae:10:db:67:34:e1:dc:2f:22:59:cb:84:50:6f:b0: f7:c2:f5:92:1a:79:07:e7:a0:f8:8c:be:05:65:6a: ea:85:1b:cd:d2:0e:e1:71:8d:60:88:51:44:91:60: 4c:c5:78:cb:2a:f2:72:a6:e2:c5:85:e9:27:d8:1f: ed:fd:70:38:ab:ec:f9:6e:48:3b:5e:f4:2d:94:66: 13:17:fd:7f:cd:bb:2b:73:fa:8f:52:a6:eb:f6:b3: 01:19:ff:15:99:fe:38:5d:e0:0f:69:ac:10:15:84: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.28.0/24 IPv6: 2a0a:c140::/29 Signature Algorithm: sha256WithRSAEncryption 68:95:06:cd:e8:9d:3b:ac:55:eb:d7:6f:1a:c6:64:50:50:79: 73:0e:4b:6c:42:69:e1:0b:7a:c1:6a:71:4f:29:0e:7c:c7:71: 5e:e7:b7:a7:b5:38:ce:df:31:73:71:14:5d:b8:0e:af:e2:21: c6:64:b9:ca:23:29:3c:4f:5a:49:2e:0b:b0:4d:2f:4c:eb:04: 80:8f:b0:21:97:7b:52:1c:a0:70:23:de:8c:3d:22:63:48:ba: c8:1a:17:66:de:c9:d0:54:21:3e:c6:d0:ed:78:80:b4:1a:33: ce:e5:06:3f:9e:e0:ce:9a:d0:16:6f:0e:ba:5e:06:fc:a8:2a: bf:f1:30:c2:88:02:b5:37:0d:94:18:87:8f:c2:ea:73:58:22: 20:9e:c1:52:4c:88:6f:94:d3:a1:89:63:84:50:30:47:cd:72: b9:c8:75:a3:31:07:d0:05:9a:a7:3e:5c:5f:21:29:fc:9f:c0: 1f:0a:6d:ae:30:29:ae:52:66:dc:27:64:64:5c:09:52:b3:dd: 2f:17:5e:1d:1a:68:0f:0d:b6:bd:87:e3:ff:19:37:14:48:d5: 19:33:83:3c:c4:49:58:c6:79:41:9d:64:53:7e:8e:e0:cd:c1: bb:df:3a:5c:c0:b9:9b:46:98:e3:61:99:b9:7d:fe:1a:32:14: de:6f:87:e7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Nm02VrYvTwwt8Gl6GHvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDcwOTYwZWQ5YTBkYTFjOWI3ZTI0NTdlYWJjYjY2MDQ3OGQwOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSfx4w6Uq4aWsqOvlXaH9mzkljMz W16c9jYsLGFsfa7iuznJfmkEV2ilDPXwagsGgYBb+446510cL8QxyP1zwXF1yp2+ Rjx9l63mVx43yNtF93DMofvEXsKK2j7EyJ2MiSJIV/0f0ZM8Krzz+Skq+NZ9NWVP U/+/2Z5STmHA/0sMPuXPtjwF35yAKzBx2wLNyhq+yKWuENtnNOHcLyJZy4RQb7D3 wvWSGnkH56D4jL4FZWrqhRvN0g7hcY1giFFEkWBMxXjLKvJypuLFhekn2B/t/XA4 q+z5bkg7XvQtlGYTF/1/zbsrc/qPUqbr9rMBGf8Vmf44XeAPaawQFYQ2zwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNBwlg7ZoNocm34kV+q8tmBHjQiuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzAzNTU4 ZS02ODhmLTRlMWMtYTY2Zi02ZWVmZGExMTA4YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvMDM1NThl LTY4OGYtNGUxYy1hNjZmLTZlZWZkYTExMDhhZC8xLzBIQ1dEdG1nMmh5YmZpUlg2 cnkyWUVlTkNLNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAvFwcMA0EAgACMAcDBQMqCsFAMA0GCSqGSIb3 DQEBCwUAA4IBAQBolQbN6J07rFXr128axmRQUHlzDktsQmnhC3rBanFPKQ58x3Fe 57entTjO3zFzcRRduA6v4iHGZLnKIyk8T1pJLguwTS9M6wSAj7Ahl3tSHKBwI96M PSJjSLrIGhdm3snQVCE+xtDteIC0GjPO5QY/nuDOmtAWbw66Xgb8qCq/8TDCiAK1 Nw2UGIePwupzWCIgnsFSTIhvlNOhiWOEUDBHzXK5yHWjMQfQBZqnPlxfISn8n8Af Cm2uMCmuUmbcJ2RkXAlSs90vF14dGmgPDba9h+P/GTcUSNUZM4M8xElYxnlBnWRT fo7gzcG73zpcwLmbRpjjYZm5ff4aMhTeb4fn -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:16 2026 by rpki-client