This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer File: H4ls09jRoGmdpSEFXftY3Abd3zU.cer (raw, json) Hash identifier: qWARef1rxqtK22oT+14UuuGq+j5UZEb4MqVjXEgVOoU= Subject key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BC7B44CD99AC50160ACCC823ACCAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59882 IP: 185.153.208.0/22 IP: 2a07:88c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c7:b4:4c:d9:9a:c5:01:60:ac:cc:82:3a:cc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:aa:56:ca:02:76:b2:a5:d5:72:08:53:8c: f3:db:67:21:1e:e2:01:f5:47:27:40:c0:ef:3b:f0: 7a:b8:97:75:cc:9d:80:53:77:c6:da:ee:3f:0a:d5: 02:d8:11:fc:dd:5e:3c:86:cf:bb:8d:f6:fc:3e:9f: d9:d1:cd:88:47:06:b1:9b:33:c8:a7:1d:83:e3:52: db:6f:f2:1a:48:96:7d:4b:2a:ea:d4:61:02:17:c1: 92:14:6d:5f:9c:dd:fa:74:20:98:12:fc:dd:03:63: b3:08:7f:e3:f8:e7:ed:75:cd:3b:d1:5a:2b:59:c7: a6:a8:64:e4:c3:87:07:b2:af:3b:95:f0:b1:8d:3a: d8:b7:45:87:b5:42:67:74:bd:d9:29:d3:8d:cb:ff: 89:bc:2a:ab:79:24:c5:cc:dd:a9:ee:db:fd:e1:e9: b9:3e:14:9e:2e:d9:c5:c0:65:bd:2d:70:27:d9:d9: 31:56:0e:45:87:86:62:c2:c5:1e:a2:7e:71:98:ef: a0:72:38:07:2a:a6:24:6e:4a:9e:9d:53:dd:85:94: 40:d5:3d:e1:e6:af:1e:1c:56:c2:15:c2:3b:95:bc: 51:0d:e7:3f:da:70:47:c9:5d:db:d6:26:01:0b:b9: 9c:6f:b8:87:74:34:e4:67:ce:98:c8:9d:e9:fa:ef: fb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.208.0/22 IPv6: 2a07:88c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59882 Signature Algorithm: sha256WithRSAEncryption 71:8e:e7:78:d1:3a:f7:7a:83:cc:95:0d:0c:1c:c6:8f:14:55: f3:96:83:f1:ce:0b:c7:12:3d:92:fa:6d:96:d1:a7:89:3e:d8: f6:34:95:18:6d:f4:34:13:49:ef:85:f2:5a:f2:56:a7:e8:ef: 62:ae:f8:70:03:fb:2d:c2:52:78:46:bb:e1:30:6b:79:8a:54: 33:10:6c:f2:ef:8d:67:bb:73:a2:7e:22:ab:b3:19:e4:b9:22: 87:ba:17:0f:bf:97:ab:7b:d9:21:1e:94:13:d0:42:18:57:f6: c5:33:64:78:33:be:d1:90:94:eb:27:9d:2a:c8:9a:11:73:0c: 67:a0:38:b5:40:b1:22:e1:20:42:37:9e:67:78:39:e6:d4:a4: 49:07:97:95:65:e7:85:72:c2:bb:67:8c:57:65:d5:32:c2:28: 0f:28:96:23:ca:02:ff:12:c0:0b:76:ec:63:84:7a:b1:14:8c: 69:af:34:b3:9b:18:a5:20:ad:24:e1:36:bb:6c:ef:fb:f7:cc: 4f:e9:12:3c:8d:af:9f:df:eb:76:27:97:8a:c6:5d:6e:c2:9a: 44:16:fe:63:76:65:57:6a:c4:ad:23:f9:0e:f8:01:b3:b5:f5: 1e:d3:7a:3a:72:9f:87:2d:3e:6c:1a:e7:9e:3d:ac:55:6d:4c: ce:00:a1:fc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9W8e0TNmaxQFgrMyCOsytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjg5NmNkM2Q4ZDFhMDY5OWRhNTIxMDU1ZGZiNThkYzA2ZGRkZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7mqVsoCdrKl1XIIU4zz22chHuIB 9UcnQMDvO/B6uJd1zJ2AU3fG2u4/CtUC2BH83V48hs+7jfb8Pp/Z0c2IRwaxmzPI px2D41Lbb/IaSJZ9Syrq1GECF8GSFG1fnN36dCCYEvzdA2OzCH/j+Oftdc070Vor WcemqGTkw4cHsq87lfCxjTrYt0WHtUJndL3ZKdONy/+JvCqreSTFzN2p7tv94em5 PhSeLtnFwGW9LXAn2dkxVg5Fh4ZiwsUeon5xmO+gcjgHKqYkbkqenVPdhZRA1T3h 5q8eHFbCFcI7lbxRDec/2nBHyV3b1iYBC7mcb7iHdDTkZ86YyJ3p+u/7bwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB+JbNPY0aBpnaUhBV37WNwG3d81MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2ZhYjQ5 YS05MWY0LTQ2MGMtODI3Yi1jMzMyNzgyMmExMzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZmFiNDlh LTkxZjQtNDYwYy04MjdiLWMzMzI3ODIyYTEzOC8xL0g0bHMwOWpSb0dtZHBTRUZY ZnRZM0FiZDN6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZnQMA0EAgACMAcDBQMqB4jAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDp6jANBgkqhkiG9w0BAQsFAAOCAQEAcY7neNE693qD zJUNDBzGjxRV85aD8c4LxxI9kvptltGniT7Y9jSVGG30NBNJ74XyWvJWp+jvYq74 cAP7LcJSeEa74TBreYpUMxBs8u+NZ7tzon4iq7MZ5Lkih7oXD7+Xq3vZIR6UE9BC GFf2xTNkeDO+0ZCU6yedKsiaEXMMZ6A4tUCxIuEgQjeeZ3g55tSkSQeXlWXnhXLC u2eMV2XVMsIoDyiWI8oC/xLAC3bsY4R6sRSMaa80s5sYpSCtJOE2u2zv+/fMT+kS PI2vn9/rdieXisZdbsKaRBb+Y3ZlV2rErSP5DvgBs7X1HtN6OnKfhy0+bBrnnj2s VW1MzgCh/A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:19 2026 by rpki-client