This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer (raw, json) Hash identifier: V4yLoNVdqGQIA9gLRqWFd0sCQIdASu828G4YhuMGZ/4= Subject key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD6E4D1EDBBD99688A02EAE49E16E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 137.56.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d6:e4:d1:ed:bb:d9:96:88:a0:2e:ae:49:e1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=854e8383e8208936802362a09f36085a50fcd85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:28:29:3c:85:4d:98:94:bb:bc:df:03:4d: a6:5e:a1:30:0a:0b:5f:b9:93:6a:d5:8b:d8:43:71: ef:95:b9:89:df:04:ab:f7:f7:26:c8:7b:0a:ed:d9: ab:04:d0:80:41:5c:cf:fa:75:2b:54:71:1f:ee:75: e9:de:3f:0c:2c:7a:b6:9d:70:2b:da:88:22:ac:14: 96:77:fb:af:09:2a:7e:c9:70:93:66:19:5f:05:62: 01:61:f1:22:1f:21:ed:00:6f:59:3e:49:94:5f:12: a0:1b:00:1b:26:3b:c8:92:9c:68:a1:57:9d:9f:fa: 3e:dc:64:54:b7:63:42:34:84:3b:e9:f8:91:ab:03: 1a:7f:85:6b:0c:4e:7b:64:b5:93:14:29:44:1b:77: 82:c2:c3:97:6a:2e:51:37:9c:6b:ac:d0:3d:c4:43: 76:a2:f7:0e:f2:82:88:0d:d2:41:55:69:97:a6:04: 04:1c:0c:4c:8f:f7:b3:47:2e:63:52:3f:c3:b1:bc: d5:ac:f9:b4:53:48:7b:9b:2e:64:95:27:9c:39:93: f8:00:09:14:e1:42:02:42:9f:2f:61:6f:da:f0:94: 5a:9e:bd:47:b9:6d:6e:3a:fa:dc:1c:59:0e:6a:c9: 85:15:1e:4e:47:77:75:9a:1b:b9:24:ed:5e:2e:a4: ae:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption a4:65:47:a1:76:27:4c:57:29:1b:c4:07:36:a2:1b:f5:94:ff: 2b:74:1c:d5:8d:f0:15:a8:f1:41:63:d0:92:81:8d:8e:57:33: fb:2f:ce:1e:3e:84:b8:62:d0:38:56:c5:b4:65:77:c7:7b:53: 22:31:a0:96:67:34:0d:ad:91:3c:76:f0:c0:01:2e:9e:b8:44: 38:4c:15:72:06:a7:9b:8c:d3:ea:38:fd:e6:14:0b:ea:85:4b: 76:51:b7:e7:13:f1:c5:a5:db:9d:8c:9a:9d:76:62:ca:49:ab: 38:a2:3d:86:3a:2a:0d:2e:03:e5:e9:b5:56:6d:ea:06:22:ca: 21:cd:80:7f:71:04:f7:ed:1a:4d:a7:4b:35:13:db:f9:2c:8e: 78:f8:0b:19:b4:40:6c:32:3b:e0:90:71:4d:61:ee:1b:ea:f5: b9:66:2b:07:37:dc:55:d0:1d:ca:22:52:85:92:de:8d:d9:6b: 1c:76:a3:65:69:95:f7:90:c4:39:28:a5:6d:a7:ac:10:e3:67: 39:63:b8:38:b3:37:5e:f4:11:97:ed:c5:d4:05:95:05:6c:9c: 1f:13:bb:e0:fb:52:b7:ba:41:22:87:5a:61:8b:39:46:36:2f: d5:c2:8a:07:ad:3f:33:80:28:f4:93:32:c7:89:e9:84:a5:72: 9d:dc:82:1d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt8f9bk0e272ZaIoC6uSeFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTRlODM4M2U4MjA4OTM2ODAyMzYyYTA5ZjM2MDg1YTUwZmNkODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQAoKTyFTZiUu7zfA02mXqEwCgtf uZNq1YvYQ3HvlbmJ3wSr9/cmyHsK7dmrBNCAQVzP+nUrVHEf7nXp3j8MLHq2nXAr 2ogirBSWd/uvCSp+yXCTZhlfBWIBYfEiHyHtAG9ZPkmUXxKgGwAbJjvIkpxooVed n/o+3GRUt2NCNIQ76fiRqwMaf4VrDE57ZLWTFClEG3eCwsOXai5RN5xrrNA9xEN2 ovcO8oKIDdJBVWmXpgQEHAxMj/ezRy5jUj/DsbzVrPm0U0h7my5klSecOZP4AAkU 4UICQp8vYW/a8JRanr1HuW1uOvrcHFkOasmFFR5OR3d1mhu5JO1eLqSuiwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFIVOg4PoIIk2gCNioJ82CFpQ/NhaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2UxZWRh Yi0yNDM5LTRhN2MtOTg0Yy1lNmZmN2NhM2VjZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZTFlZGFi LTI0MzktNGE3Yy05ODRjLWU2ZmY3Y2EzZWNlZi8xL2hVNkRnLWdnaVRhQUkyS2du ellJV2xEODJGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAiTgwDQYJKoZIhvcNAQELBQADggEBAKRlR6F2 J0xXKRvEBzaiG/WU/yt0HNWN8BWo8UFj0JKBjY5XM/svzh4+hLhi0DhWxbRld8d7 UyIxoJZnNA2tkTx28MABLp64RDhMFXIGp5uM0+o4/eYUC+qFS3ZRt+cT8cWl252M mp12YspJqziiPYY6Kg0uA+XptVZt6gYiyiHNgH9xBPftGk2nSzUT2/ksjnj4Cxm0 QGwyO+CQcU1h7hvq9blmKwc33FXQHcoiUoWS3o3Zaxx2o2VplfeQxDkopW2nrBDj ZzljuDizN170EZftxdQFlQVsnB8Tu+D7Ure6QSKHWmGLOUY2L9XCigetPzOAKPST MseJ6YSlcp3cgh0= -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:37 2026 by rpki-client