This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer File: T_hs8z4V6kCJ2inip4gddG34Ju8.cer (raw, json) Hash identifier: Jv/v1vmEZgqk5czG7/awpB7rMK9WqmV2t6vhrS1mU2g= Subject key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA43B01563B868466EB2D2AE1E7536D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199959 AS: 205320 IP: 193.29.56.0/22 IP: 2a07:efc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:3b:01:56:3b:86:84:66:eb:2d:2a:e1:e7:53:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:50:2b:e5:32:b9:c6:44:3d:2c:49:a8:8b: 61:9c:e7:7c:4f:6a:8a:2a:b0:8c:40:83:3a:2e:76: ae:87:18:cd:c0:b4:d9:dc:71:4e:30:f2:8e:95:0d: 63:f0:17:80:46:cb:5b:2a:3d:86:8d:92:c5:63:bd: 80:86:aa:28:24:4c:ee:74:07:f2:99:90:b4:0a:6a: cf:e4:78:c2:d9:1d:45:b6:8b:cd:af:7d:b9:86:3a: a6:ac:fc:73:0f:ea:3d:8c:d9:3a:62:3e:b6:3c:db: 4e:c6:40:46:f3:88:54:42:b2:1f:48:32:96:5f:c8: e8:df:8a:ed:80:b3:01:4f:a3:bc:72:30:28:e0:5c: 4b:15:c2:5d:0f:92:ac:7c:50:ba:a4:96:0c:d9:f4: e8:ad:05:e1:2a:ab:c8:3a:9e:a3:79:45:0d:89:80: 10:a2:de:04:dc:d4:cc:e7:04:79:3a:98:ef:89:70: 9b:30:1b:c2:8e:41:4a:86:11:08:81:6f:55:88:50: 09:c9:b1:03:e8:1e:67:1f:f6:24:85:3e:e9:ec:25: 3a:c9:53:cb:6e:9a:a5:a2:4f:da:41:4a:18:1b:48: 9f:14:77:de:74:1b:9d:2a:60:10:63:2f:6a:84:e7: 02:6a:aa:c5:20:13:af:19:97:f2:d9:e8:9d:bf:05: 0b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.56.0/22 IPv6: 2a07:efc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199959 205320 Signature Algorithm: sha256WithRSAEncryption a7:4e:1b:05:cd:f8:c7:28:90:19:b0:23:0f:3b:7a:a1:07:e2: 12:b1:e1:b7:d4:8e:f7:b5:9d:f1:24:53:08:14:5f:30:f8:04: 0b:6d:02:3f:fe:ea:26:e2:8c:55:66:70:ee:68:af:43:cf:e4: 01:03:37:5d:8b:53:44:ad:25:b3:a2:2d:17:49:31:c8:5e:02: 45:9f:23:23:b2:f7:80:f6:ee:ff:ba:2d:b6:0a:b5:6f:89:dc: d2:d2:56:c6:95:0c:54:06:4c:af:87:47:4d:21:32:21:53:70: 6e:fd:61:e4:b0:89:ac:34:9b:5e:8d:f3:a9:39:c9:f3:dc:e1: a5:cf:6d:98:69:86:1d:ce:ef:c2:ef:c1:b5:84:d4:61:55:23: 56:19:30:9c:dd:9d:2d:a9:03:95:a3:a2:96:2e:1a:7e:22:cd: df:5e:e4:99:15:94:41:8f:ba:a2:97:ad:a1:74:4f:10:1b:5d: 07:17:d4:2c:2d:4e:56:54:0f:05:b4:91:7d:28:d4:7a:85:aa: d0:3c:f6:63:e7:48:e2:30:51:04:e6:e6:66:83:21:76:e2:84: e7:97:2a:38:1b:bc:21:60:34:ff:bb:89:10:d5:4d:39:f2:4d: 4c:cc:89:77:e3:c0:6e:1d:ec:6a:70:10:f5:26:3e:44:47:57: 90:7c:e5:f4 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7pDsBVjuGhGbrLSrh51NtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmY4NmNmMzNlMTVlYTQwODlkYTI5ZTJhNzg4MWQ3NDZkZjgyNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMJQK+UyucZEPSxJqIthnOd8T2qK KrCMQIM6LnauhxjNwLTZ3HFOMPKOlQ1j8BeARstbKj2GjZLFY72AhqooJEzudAfy mZC0CmrP5HjC2R1FtovNr325hjqmrPxzD+o9jNk6Yj62PNtOxkBG84hUQrIfSDKW X8jo34rtgLMBT6O8cjAo4FxLFcJdD5KsfFC6pJYM2fTorQXhKqvIOp6jeUUNiYAQ ot4E3NTM5wR5OpjviXCbMBvCjkFKhhEIgW9ViFAJybED6B5nH/YkhT7p7CU6yVPL bpqlok/aQUoYG0ifFHfedBudKmAQYy9qhOcCaqrFIBOvGZfy2eidvwULjQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFE/4bPM+FepAidop4qeIHXRt+CbvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2M5OTFl ZS1iZDQxLTRhZDEtYjg4ZC02ZmM1ZmNhMDk2MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYzk5MWVl LWJkNDEtNGFkMS1iODhkLTZmYzVmY2EwOTYyOS8xL1RfaHM4ejRWNmtDSjJpbmlw NGdkZEczNEp1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwR04MA0EAgACMAcDBQAqB+/AMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMNFwIDAyIIMA0GCSqGSIb3DQEBCwUAA4IBAQCnThsF zfjHKJAZsCMPO3qhB+ISseG31I73tZ3xJFMIFF8w+AQLbQI//uom4oxVZnDuaK9D z+QBAzddi1NErSWzoi0XSTHIXgJFnyMjsveA9u7/ui22CrVvidzS0lbGlQxUBkyv h0dNITIhU3Bu/WHksImsNJtejfOpOcnz3OGlz22YaYYdzu/C78G1hNRhVSNWGTCc 3Z0tqQOVo6KWLhp+Is3fXuSZFZRBj7qil62hdE8QG10HF9QsLU5WVA8FtJF9KNR6 harQPPZj50jiMFEE5uZmgyF24oTnlyo4G7whYDT/u4kQ1U058k1MzIl348BuHexq cBD1Jj5ER1eQfOX0 -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:59 2026 by rpki-client