This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer (raw, json) Hash identifier: +h80qDDFZG+1pcCg0dIrYNFzwaXmqlkQSVSAqo/9fo0= Subject key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E388B3C61DAB4427B5DEC88B3117776 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8885 AS: 13237 AS: 15479 AS: 15702 AS: 30834 IP: 62.4.64.0/19 IP: 62.80.96.0/19 IP: 62.93.192.0/18 IP: 80.86.160.0/19 IP: 80.252.32.0/20 IP: 81.209.128.0/17 IP: 82.98.200.0 -- 82.98.231.255 IP: 82.197.128.0/19 IP: 83.124.0.0/14 IP: 83.133.0.0/16 IP: 83.137.80.0/21 IP: 84.207.0.0/16 IP: 91.190.248.0/21 IP: 185.99.80.0/22 IP: 185.250.84.0/22 IP: 193.26.5.0/24 IP: 195.74.65.0/24 IP: 217.19.32.0/20 IP: 217.71.96.0/20 IP: 217.112.144.0/20 IP: 2001:7f0::/29 IP: 2001:1618::/29 IP: 2001:4d40::/29 IP: 2a00:cc0::/29 IP: 2a00:fa0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8b:3c:61:da:b4:42:7b:5d:ec:88:b3:11:77:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7a:1a:d5:07:2d:68:3c:f5:33:f2:cd:16:bf: 67:25:e5:8c:06:09:a0:bb:af:d4:2f:4e:21:64:cb: 2b:66:51:75:61:77:65:8e:6f:b0:c5:ba:a1:40:d4: a3:bf:65:cd:bc:13:44:b3:f5:4d:4c:b3:c7:fb:f3: 7c:af:c3:33:06:f9:08:80:7c:97:10:91:e3:12:d3: 4b:c3:b6:aa:65:6f:f4:08:a8:3f:c4:c2:28:c6:dd: 90:91:7e:9e:af:86:cf:93:8f:4a:4c:50:a3:f9:b3: 05:a2:a8:25:71:4d:24:72:fd:c8:b0:5d:4c:b1:67: e4:61:2e:5b:31:fd:61:9a:21:cd:86:f5:bf:c0:73: 6c:eb:d0:38:c0:61:d8:dd:9d:f8:aa:93:90:f7:95: cb:eb:5d:40:8e:15:e8:30:56:bc:84:8b:a3:62:98: 1c:ea:cf:2c:e9:fc:b8:f0:89:91:f3:e8:4b:f2:9c: d6:ac:d4:76:32:81:59:a8:7c:66:e8:b7:f2:e7:8b: f1:16:4e:d6:80:2f:64:88:ea:f6:95:0b:fc:8e:66: 8f:db:8f:56:15:67:6d:3a:5c:f8:a0:a4:1d:0e:01: 7b:78:35:eb:7a:e4:77:0b:f0:8d:d2:1c:14:65:85: 93:0d:a2:ce:db:bd:72:be:f6:e6:33:63:68:23:f0: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.4.64.0/19 62.80.96.0/19 62.93.192.0/18 80.86.160.0/19 80.252.32.0/20 81.209.128.0/17 82.98.200.0-82.98.231.255 82.197.128.0/19 83.124.0.0/14 83.133.0.0/16 83.137.80.0/21 84.207.0.0/16 91.190.248.0/21 185.99.80.0/22 185.250.84.0/22 193.26.5.0/24 195.74.65.0/24 217.19.32.0/20 217.71.96.0/20 217.112.144.0/20 IPv6: 2001:7f0::/29 2001:1618::/29 2001:4d40::/29 2a00:cc0::/29 2a00:fa0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8885 13237 15479 15702 30834 Signature Algorithm: sha256WithRSAEncryption 1d:69:48:c2:96:64:c8:6f:99:4a:ae:26:a0:f5:f4:91:c4:2d: 8e:de:44:8e:38:00:97:84:2c:90:e1:59:4a:96:e5:65:88:98: b5:15:32:15:69:05:60:14:71:df:18:99:9d:b6:81:8a:4a:86: d7:aa:dc:95:28:4f:ee:de:f8:54:61:db:2f:92:ca:bf:00:4a: cf:7f:fa:6a:3c:aa:b2:93:07:44:e6:16:e3:cf:12:f4:a6:5d: 0f:62:e4:b8:03:85:a7:b7:c9:95:04:54:d8:8a:ed:64:29:a2: 10:37:43:98:8c:db:a6:fb:51:38:5b:f9:de:33:65:57:cb:a5: e6:b8:21:d1:37:60:19:e0:ac:6f:fd:2e:b1:f4:2c:44:03:13: df:93:6c:bd:91:7f:42:18:c0:8a:e3:6e:a8:e1:e2:b2:fb:de: 71:ff:60:d1:98:ce:6e:22:25:e3:88:f2:2a:c0:c8:c5:49:33: 1e:5c:d8:32:b1:fa:6f:32:cc:9b:c7:f6:4c:f2:12:25:e0:82: bf:db:7c:31:54:fa:9e:8a:1a:84:3a:ab:77:5a:2c:41:69:8d: 84:c5:29:43:7f:91:4e:9d:5c:1d:91:c1:eb:cf:94:f1:22:ce: a6:52:c6:5b:bb:4a:c2:1e:fa:47:05:1a:98:6b:2d:c7:09:e9: ba:93:b8:a6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAZt+OIs8Ydq0Qntd7IizEXd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmU5MGZkZTk3ODRhOTFkOTNhN2EyYWY1OWQ0ZDA0M2YxMTcxZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHoa1QctaDz1M/LNFr9nJeWMBgmg u6/UL04hZMsrZlF1YXdljm+wxbqhQNSjv2XNvBNEs/VNTLPH+/N8r8MzBvkIgHyX EJHjEtNLw7aqZW/0CKg/xMIoxt2QkX6er4bPk49KTFCj+bMFoqglcU0kcv3IsF1M sWfkYS5bMf1hmiHNhvW/wHNs69A4wGHY3Z34qpOQ95XL611AjhXoMFa8hIujYpgc 6s8s6fy48ImR8+hL8pzWrNR2MoFZqHxm6Lfy54vxFk7WgC9kiOr2lQv8jmaP249W FWdtOlz4oKQdDgF7eDXreuR3C/CN0hwUZYWTDaLO271yvvbmM2NoI/AKAQIDAQAB o4IDVTCCA1EwHQYDVR0OBBYEFB/pD96XhKkdk6eir1nU0EPxFx+6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2E5NDVm Ny01M2IzLTRkYjUtYWUwNC0yMzc3MmU3ZjkyZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYTk0NWY3 LTUzYjMtNGRiNS1hZTA0LTIzNzcyZTdmOTJlMy8xL0gta1AzcGVFcVIyVHA2S3ZX ZFRRUV9FWEg3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHEBggrBgEF BQcBBwEB/wSBtDCBsTCBgwQCAAEwfQMEBT4EQAMEBT5QYAMEBj5dwAMEBVBWoAME BFD8IAMEB1HRgDAMAwQDUmLIAwQDUmLgAwQFUsWAAwMCU3wDAwBThQMEA1OJUAMD AFTPAwQDW774AwQCuWNQAwQCufpUAwQAwRoFAwQAw0pBAwQE2RMgAwQE2UdgAwQE 2XCQMCkEAgACMCMDBQMgAQfwAwUDIAEWGAMFAyABTUADBQMqAAzAAwUDKgAPoDAp BggrBgEFBQcBCAEB/wQaMBigFjAUAgIitQICM7UCAjx3AgI9VgICeHIwDQYJKoZI hvcNAQELBQADggEBAB1pSMKWZMhvmUquJqD19JHELY7eRI44AJeELJDhWUqW5WWI mLUVMhVpBWAUcd8YmZ22gYpKhteq3JUoT+7e+FRh2y+Syr8ASs9/+mo8qrKTB0Tm FuPPEvSmXQ9i5LgDhae3yZUEVNiK7WQpohA3Q5iM26b7UThb+d4zZVfLpea4IdE3 YBngrG/9LrH0LEQDE9+TbL2Rf0IYwIrjbqjh4rL73nH/YNGYzm4iJeOI8irAyMVJ Mx5c2DKx+m8yzJvH9kzyEiXggr/bfDFU+p6KGoQ6q3daLEFpjYTFKUN/kU6dXB2R wevPlPEizqZSxlu7SsIe+kcFGphrLccJ6bqTuKY= -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:56 2026 by rpki-client