This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer File: h0HsF9wDCbE9iKZ-oi3Luyak46E.cer (raw, json) Hash identifier: YtMNPxFyxiVO//DOY9XYA8UuyApDZetKRfODx0HOZGk= Subject key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38B58ABD3C244AAF08D59178EC4BA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200233 IP: 138.124.176.0/24 IP: 147.87.0.0/16 IP: 193.5.80.0/21 IP: 2a07:6b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b5:8a:bd:3c:24:4a:af:08:d5:91:78:ec:4b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:c0:9f:2b:39:81:90:29:6d:22:4b:77:ae: d4:a1:9c:0a:aa:c5:a8:22:7e:e1:23:53:e0:63:73: fb:06:0a:d5:41:c7:25:ec:2a:bc:6e:2d:9f:f3:a1: 25:5a:57:84:a5:c2:39:56:0b:d0:a3:92:11:79:79: 84:b5:75:8f:23:ad:ab:10:cb:db:ec:15:1a:73:5e: 7d:71:b6:77:84:60:45:71:48:ef:2f:60:d5:bf:5a: a5:d5:7c:a2:bb:78:50:15:3e:2c:ec:c0:2b:c1:c1: 4c:fa:a7:01:38:42:0f:66:99:d2:79:16:66:e2:0d: bc:29:dc:93:e9:81:3d:2b:70:2f:b3:ca:8a:31:cc: 18:07:ab:03:3a:54:30:49:47:34:b8:ed:36:3c:8f: bf:17:d4:01:8c:3a:64:76:6a:f1:f4:e1:bf:fa:9b: a5:9f:66:f7:42:90:80:86:bb:10:c9:c0:91:d0:34: 7e:17:5e:67:6d:8c:63:b1:38:69:9b:95:06:a9:e3: 66:79:81:82:9b:ca:a5:03:0b:0b:f9:a4:d2:05:f4: d6:d6:79:28:b7:d4:49:8f:7a:31:a5:0f:75:6f:bf: bc:de:a8:22:e5:5b:c6:09:3f:c0:fc:93:f3:60:d6: c1:a6:7b:ff:46:d3:b9:1b:51:6c:52:e5:47:51:a9: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.176.0/24 147.87.0.0/16 193.5.80.0/21 IPv6: 2a07:6b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200233 Signature Algorithm: sha256WithRSAEncryption 36:9d:4a:2c:b1:80:b3:61:b3:bc:e2:24:d7:ae:3d:8c:4d:6c: 64:78:40:c2:c2:38:35:1e:b9:4a:ee:b2:45:ae:6c:1a:29:cc: 82:49:63:35:97:00:b3:9a:25:13:b4:1e:1e:67:82:fc:87:81: 2b:c1:ca:22:21:26:aa:00:46:02:34:6d:a6:37:b7:70:98:1b: f0:3f:4e:76:e8:a9:75:95:c5:85:2c:78:fc:64:36:b2:fa:8f: 1d:a8:de:1e:8d:d1:58:5a:4c:0f:ed:f3:bf:17:ae:6c:5e:ba: 06:68:a1:38:2b:30:71:18:fe:76:2f:2d:5b:d3:b0:73:ba:9a: d4:67:dc:26:d3:0d:a7:58:3d:39:24:00:e0:a2:9a:fc:37:30: 21:e7:e9:18:5a:6a:35:48:ca:38:4b:0e:8e:e9:0d:59:28:33: 15:a7:d2:fa:e5:7d:c2:fa:18:d2:8a:b6:20:84:ca:14:39:f6: be:ed:66:1e:01:30:b8:05:67:dc:b1:e7:55:de:0c:33:a8:12: 6c:32:42:cc:12:2c:de:3f:0a:89:6d:db:7a:21:d5:ac:82:1b: 0e:43:6e:6a:a8:60:a1:d2:89:9a:9e:cb:5b:c1:0e:21:27:70: d9:76:ad:e9:63:a1:53:5b:11:53:9f:0d:fd:9f:21:65:09:c5: cc:e3:f7:5b -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt+OLWKvTwkSq8I1ZF47EulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzQxZWMxN2RjMDMwOWIxM2Q4OGE2N2VhMjJkY2JiYjI2YTRlM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ3Anys5gZApbSJLd67UoZwKqsWo In7hI1PgY3P7BgrVQccl7Cq8bi2f86ElWleEpcI5VgvQo5IReXmEtXWPI62rEMvb 7BUac159cbZ3hGBFcUjvL2DVv1ql1Xyiu3hQFT4s7MArwcFM+qcBOEIPZpnSeRZm 4g28KdyT6YE9K3Avs8qKMcwYB6sDOlQwSUc0uO02PI+/F9QBjDpkdmrx9OG/+pul n2b3QpCAhrsQycCR0DR+F15nbYxjsThpm5UGqeNmeYGCm8qlAwsL+aTSBfTW1nko t9RJj3oxpQ91b7+83qgi5VvGCT/A/JPzYNbBpnv/RtO5G1FsUuVHUaks0wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFIdB7BfcAwmxPYimfqIty7smpOOhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzMyNjZm MS03Yzg4LTRmNTktYjU2Ni0xYWM0YTQwMDdkYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMzI2NmYx LTdjODgtNGY1OS1iNTY2LTFhYzRhNDAwN2RiNC8xL2gwSHNGOXdEQ2JFOWlLWi1v aTNMdXlhazQ2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAXBAIAATARAwQAinywAwMAk1cDBAPBBVAwDQQCAAIwBwMFAyoH a0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAw4pMA0GCSqGSIb3DQEBCwUAA4IB AQA2nUossYCzYbO84iTXrj2MTWxkeEDCwjg1HrlK7rJFrmwaKcyCSWM1lwCzmiUT tB4eZ4L8h4ErwcoiISaqAEYCNG2mN7dwmBvwP0526Kl1lcWFLHj8ZDay+o8dqN4e jdFYWkwP7fO/F65sXroGaKE4KzBxGP52Ly1b07BzuprUZ9wm0w2nWD05JADgopr8 NzAh5+kYWmo1SMo4Sw6O6Q1ZKDMVp9L65X3C+hjSirYghMoUOfa+7WYeATC4BWfc sedV3gwzqBJsMkLMEizePwqJbdt6IdWsghsOQ25qqGCh0omanstbwQ4hJ3DZdq3p Y6FTWxFTnw39nyFlCcXM4/db -----END CERTIFICATE-----Generated at Mon Jan 26 08:23:42 2026 by rpki-client