This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer File: fHcuHibmwj9ArWZoyF_pUNoQY_w.cer (raw, json) Hash identifier: OwSYQucdhPobkYnw/UHk1nONOJCmYH9AtjXFlmSVgU8= Subject key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F857FC72A9AA08D3EBECA9E26998462 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51301 IP: 185.135.188.0/24 IP: 2a10:15c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:7f:c7:2a:9a:a0:8d:3e:be:ca:9e:26:99:84:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cd:41:cb:60:e4:46:25:f8:5c:6a:bd:a3:19: 36:88:bc:bb:26:6e:f2:27:98:78:1d:c8:2c:02:66: 4e:3d:a2:69:f4:c4:f9:1a:e4:63:3a:9d:06:c1:7a: 47:1a:9f:00:65:3e:9a:e5:31:48:5f:83:fe:e3:83: 46:85:c6:e2:cf:7b:b0:5a:d9:81:49:5b:1d:b5:11: 5b:cd:4a:97:b4:ef:89:62:a1:0b:88:50:3e:30:2f: 29:bd:b8:27:34:7b:43:81:41:1e:54:df:98:c8:e9: fd:85:bf:9f:5c:c6:31:a3:f7:d4:18:27:1f:18:41: e0:a3:14:4e:72:c8:3a:2d:91:f8:ce:4e:6e:37:e3: 36:c8:62:14:6d:79:df:54:6e:67:84:43:d9:39:4e: f5:92:a9:7b:da:7b:29:3f:4e:bb:15:24:a2:44:8e: 10:68:41:05:7a:7e:77:0c:5c:17:c8:9d:fa:03:cf: df:bb:4e:9d:bd:3f:13:64:b0:e8:88:5e:a1:6a:9b: 9b:0d:51:15:e3:f3:d1:86:09:48:6b:af:3f:66:40: a5:55:2d:e6:ee:65:4e:18:fa:a0:89:47:59:fc:ec: 3f:59:cd:a0:fd:9f:86:89:f5:91:6c:49:fa:5b:c4: fe:6b:0b:d2:6e:d3:5e:e1:c0:aa:32:26:9c:a1:d2: 97:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.188.0/24 IPv6: 2a10:15c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51301 Signature Algorithm: sha256WithRSAEncryption 46:95:8b:84:9a:f6:6a:05:51:1d:a3:ae:cd:d2:22:07:20:5c: 33:31:41:54:48:bd:43:b5:d6:44:62:29:86:a5:b8:9c:dd:86: 33:2b:58:ad:33:5b:a7:6c:62:a3:cd:6a:ce:b5:1a:17:49:56: 33:20:3b:5d:8a:b7:cf:dc:21:da:ed:f4:43:71:45:ab:64:59: 2d:34:03:d5:81:79:03:b9:bb:05:27:db:e8:50:09:2d:e9:44: 2e:d0:f8:81:30:c9:39:4a:b8:d3:a9:32:af:04:b4:c7:52:c4: 56:51:b7:37:64:55:f9:1a:3b:e2:a4:2d:d1:d3:7a:df:24:07: 96:d4:85:50:a6:f4:2f:28:21:7d:c6:2d:2e:08:4c:33:00:6d: 7f:4f:c7:b6:1d:c6:e6:4b:b5:bf:74:eb:b1:39:04:8f:f7:53: 1a:67:66:60:15:f7:59:4b:c4:1a:ca:04:d8:49:dc:2b:65:3e: 96:85:43:47:23:cf:f7:60:e5:13:5a:b1:73:a2:d8:f0:54:9d: 3a:ee:84:de:cf:1f:03:28:c5:2b:96:0a:d5:24:30:2d:b9:10: 0f:c7:51:a8:5d:cf:e6:3d:c3:4a:4e:f6:84:bd:dd:71:b4:43: fa:a5:02:21:a6:2f:58:12:81:5a:e1:c9:e3:fd:99:7c:69:82: 2e:ad:f9:8e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hX/HKpqgjT6+yp4mmYRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzc3MmUxZTI2ZTZjMjNmNDBhZDY2NjhjODVmZTk1MGRhMTA2M2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc1By2DkRiX4XGq9oxk2iLy7Jm7y J5h4HcgsAmZOPaJp9MT5GuRjOp0GwXpHGp8AZT6a5TFIX4P+44NGhcbiz3uwWtmB SVsdtRFbzUqXtO+JYqELiFA+MC8pvbgnNHtDgUEeVN+YyOn9hb+fXMYxo/fUGCcf GEHgoxROcsg6LZH4zk5uN+M2yGIUbXnfVG5nhEPZOU71kql72nspP067FSSiRI4Q aEEFen53DFwXyJ36A8/fu06dvT8TZLDoiF6hapubDVEV4/PRhglIa68/ZkClVS3m 7mVOGPqgiUdZ/Ow/Wc2g/Z+GifWRbEn6W8T+awvSbtNe4cCqMiacodKXzwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHx3Lh4m5sI/QK1maMhf6VDaEGP8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzAzNzMx ZC00YWIwLTQ5ODEtOGEzYS0yM2M0N2U5NTM1ZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMDM3MzFk LTRhYjAtNDk4MS04YTNhLTIzYzQ3ZTk1MzVlNy8xL2ZIY3VIaWJtd2o5QXJXWm95 Rl9wVU5vUVlfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuYe8MA0EAgACMAcDBQMqEBXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDIZTANBgkqhkiG9w0BAQsFAAOCAQEARpWLhJr2agVR HaOuzdIiByBcMzFBVEi9Q7XWRGIphqW4nN2GMytYrTNbp2xio81qzrUaF0lWMyA7 XYq3z9wh2u30Q3FFq2RZLTQD1YF5A7m7BSfb6FAJLelELtD4gTDJOUq406kyrwS0 x1LEVlG3N2RV+Ro74qQt0dN63yQHltSFUKb0LyghfcYtLghMMwBtf0/Hth3G5ku1 v3TrsTkEj/dTGmdmYBX3WUvEGsoE2EncK2U+loVDRyPP92DlE1qxc6LY8FSdOu6E 3s8fAyjFK5YK1SQwLbkQD8dRqF3P5j3DSk72hL3dcbRD+qUCIaYvWBKBWuHJ4/2Z fGmCLq35jg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:56 2026 by rpki-client