This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer (raw, json) Hash identifier: LF91us1Nuesp5dMnbOC/0nRfqpRX8B8CXYDwVvsMwxc= Subject key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA74C67A8AE4B45B2D3E82C4B509300 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.72.120.0/23 IP: 2001:678:56c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4c:67:a8:ae:4b:45:b2:d3:e8:2c:4b:50:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87e64170f9d82c51670b9a44f329b20613a8082d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:70:a8:b7:6f:48:50:15:04:13:df:22:92: 18:bf:fd:0b:de:8d:f6:34:aa:23:6a:ec:8b:95:89: 88:90:03:77:3d:fb:ea:fa:43:de:d3:a9:3e:a3:bc: 43:fc:4c:e4:d1:00:79:71:60:dc:a0:6d:30:0f:59: 24:da:c4:ef:38:f5:41:20:d7:f1:31:bc:cc:3d:4c: 40:51:bf:21:5b:c4:85:fe:50:3a:ff:5d:e4:11:af: ef:50:01:57:56:c0:43:2a:e2:ad:21:5d:fe:06:52: de:78:1a:61:1e:8a:bf:f9:11:ca:35:d5:b1:0a:cf: 4c:cb:50:3e:e5:c6:55:19:78:3c:57:98:c9:b0:72: 82:62:b7:4e:f3:57:86:c6:cd:ca:cd:56:0b:48:8f: 7e:1f:9e:b2:29:09:3f:30:1d:e6:ca:02:48:c9:7e: 83:64:be:eb:d5:16:1d:85:ef:0f:19:24:a9:87:e6: f2:54:a0:26:a8:4f:e0:54:3b:1e:2c:51:80:ef:51: 2c:ce:9f:f4:c4:f1:80:8e:e1:06:2a:77:31:ed:52: c8:89:4e:56:0e:d8:19:a5:9a:2d:71:83:42:50:d6: cf:60:a5:1d:79:b6:74:63:a0:30:83:0a:0a:7d:45: 6b:10:04:9b:06:f4:ce:8d:0c:7e:64:30:c3:d1:60: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.72.120.0/23 IPv6: 2001:678:56c::/48 Signature Algorithm: sha256WithRSAEncryption 30:f0:4b:e7:2f:68:93:ac:03:ac:29:06:0c:dd:2e:2a:dd:66: a5:84:2d:a6:67:6e:b0:5c:64:d7:a5:57:d8:a8:81:cd:43:f1: d9:fb:2f:e8:23:03:4d:d1:96:20:8f:f2:5e:a2:37:2d:f1:42: 2c:4e:ca:2d:6e:1b:d6:2c:62:7d:7e:ca:4d:ac:62:9a:3e:8b: 98:e7:8d:16:ae:77:39:92:b6:b5:c2:62:6a:f9:64:56:30:e5: 33:13:7f:a5:97:69:6d:d2:52:09:e8:74:fb:6f:a7:9d:d2:c1: 97:0f:13:82:de:af:65:45:22:b2:c7:01:1e:d9:2b:98:f9:eb: 67:3c:47:ec:00:bd:21:55:26:71:07:71:44:46:e5:00:6d:01: 7d:06:0b:c3:3b:61:a6:6a:00:66:30:a8:0d:fb:8a:e5:a6:6e: 18:17:f0:91:35:73:ae:38:26:70:f6:47:e8:91:5d:9a:a8:7c: e9:92:91:b0:a0:6d:57:08:77:1f:4e:c8:51:c2:13:d6:22:64: 92:bc:e4:59:ce:7b:84:6e:09:8b:80:b3:d8:44:e7:32:f3:1a: 9e:d5:7f:bd:61:5a:a4:4c:5d:81:20:42:f0:2a:a4:f1:2b:c8: 45:21:b6:97:85:e8:8a:e8:28:f9:c6:30:33:48:7d:c5:83:75: 77:d2:32:94 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt+p0xnqK5LRbLT6CxLUJMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2U2NDE3MGY5ZDgyYzUxNjcwYjlhNDRmMzI5YjIwNjEzYTgwODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAVwqLdvSFAVBBPfIpIYv/0L3o32 NKojauyLlYmIkAN3Pfvq+kPe06k+o7xD/Ezk0QB5cWDcoG0wD1kk2sTvOPVBINfx MbzMPUxAUb8hW8SF/lA6/13kEa/vUAFXVsBDKuKtIV3+BlLeeBphHoq/+RHKNdWx Cs9My1A+5cZVGXg8V5jJsHKCYrdO81eGxs3KzVYLSI9+H56yKQk/MB3mygJIyX6D ZL7r1RYdhe8PGSSph+byVKAmqE/gVDseLFGA71Eszp/0xPGAjuEGKncx7VLIiU5W DtgZpZotcYNCUNbPYKUdebZ0Y6AwgwoKfUVrEASbBvTOjQx+ZDDD0WAcjwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFIfmQXD52CxRZwuaRPMpsgYTqAgtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2JlYjI5 ZC1mMGVlLTQwN2EtOTcwMi02ZTEzY2NiZjQ5MDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvYmViMjlk LWYwZWUtNDA3YS05NzAyLTZlMTNjY2JmNDkwNi8xL2gtWkJjUG5ZTEZGbkM1cEU4 eW15QmhPb0NDMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw0h4MA8EAgACMAkDBwAgAQZ4BWwwDQYJKoZI hvcNAQELBQADggEBADDwS+cvaJOsA6wpBgzdLirdZqWELaZnbrBcZNelV9iogc1D 8dn7L+gjA03RliCP8l6iNy3xQixOyi1uG9YsYn1+yk2sYpo+i5jnjRaudzmStrXC Ymr5ZFYw5TMTf6WXaW3SUgnodPtvp53SwZcPE4Ler2VFIrLHAR7ZK5j562c8R+wA vSFVJnEHcURG5QBtAX0GC8M7YaZqAGYwqA37iuWmbhgX8JE1c644JnD2R+iRXZqo fOmSkbCgbVcIdx9OyFHCE9YiZJK85FnOe4RuCYuAs9hE5zLzGp7Vf71hWqRMXYEg QvAqpPEryEUhtpeF6IroKPnGMDNIfcWDdXfSMpQ= -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:41 2026 by rpki-client