This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ht0n6sNt0imcKImqN2-WPa5y9Cs.cer File: ht0n6sNt0imcKImqN2-WPa5y9Cs.cer (raw, json) Hash identifier: XrcvUYzzBYq4kPqQhpAh4+Ee3c0BkN3DkFlOqTyT+PQ= Subject key identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BCDE766148A4696384F920283FB598AE8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 17 Jan 2026 21:40:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204518 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cd:e7:66:14:8a:46:96:38:4f:92:02:83:fb:59:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 17 21:40:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86dd27eac36dd2299c2889aa376f963dae72f42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:9b:bb:50:76:fa:44:8d:10:63:a8:80:c1: 69:43:76:72:14:6a:5a:a0:03:0f:06:a3:c1:d4:3e: 92:94:87:96:2b:f1:71:f7:47:77:46:a2:d4:77:8c: 97:18:c3:bd:30:0b:7d:a2:63:ea:df:f6:aa:63:21: d4:ca:d9:ee:8a:0b:03:7f:c7:9f:83:b1:11:3d:ea: 0e:e5:d3:ee:d0:2c:c1:9e:36:74:d1:a6:59:6a:0a: f5:ec:74:e5:12:7f:e8:b6:e5:ef:c4:b3:4d:8d:ad: 39:09:7a:be:19:4e:3e:b4:94:44:1b:31:9c:b4:73: 70:f4:b7:7b:62:f4:4f:76:95:7a:8b:0f:64:96:b1: d5:8c:95:71:c7:eb:eb:8f:40:d2:4c:ad:b4:68:fa: 2e:0e:00:68:e7:b6:af:f0:4c:0c:17:3b:01:7f:69: 39:8c:a6:5c:94:08:5a:9d:a8:6e:a7:4a:a3:4b:12: 94:68:b1:90:14:b7:7c:13:9e:0a:e1:d3:ac:1a:f4: f0:36:1f:e6:76:c6:5c:83:1b:2e:c5:d5:2c:0a:e2: be:f2:e5:4b:dc:96:78:48:11:8b:b0:2c:6a:e7:9e: 9c:da:64:d7:3b:a8:dc:7a:33:d1:32:fd:0e:7d:56: c0:2a:c4:e9:d2:dc:e6:01:11:dc:6f:f9:d6:cd:ae: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DD:27:EA:C3:6D:D2:29:9C:28:89:AA:37:6F:96:3D:AE:72:F4:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/86DD27EAC36DD2299C2889AA376F963DAE72F42B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204518 Signature Algorithm: sha256WithRSAEncryption 9b:de:ed:c8:19:4e:3b:4f:f1:f6:d9:78:01:81:8f:4e:87:4e: c6:3c:8b:7e:24:f7:95:89:a7:58:f4:9a:ab:e2:21:14:d0:93: 2b:26:1b:df:88:17:b3:72:cd:ab:d6:b5:dc:01:7c:f7:36:83: df:9b:41:5e:27:39:1c:ab:60:72:65:77:f1:f7:23:e2:33:96: 13:15:c2:25:b6:1b:f6:b0:00:a1:96:ec:17:97:08:69:9b:87: f1:13:2e:84:38:ec:84:3c:75:65:44:c4:72:16:dc:02:02:2f: 06:86:f3:25:2e:9a:97:dc:e8:d7:1f:74:ed:1f:00:25:e2:b8: ac:04:43:7a:f8:6f:90:f3:2d:38:25:32:35:76:68:7a:73:0b: 69:01:0c:e5:68:94:d5:66:14:d5:d2:3d:d4:64:62:d1:df:8c: 70:84:9f:c5:7b:fd:2e:3a:bb:27:9b:31:21:71:4b:27:f0:72: 5c:b4:35:c1:19:31:ef:8e:a4:f7:71:3d:f4:22:fd:47:06:66: ae:58:7d:a4:6b:d8:bb:7b:a1:3a:8a:b9:e4:e5:7e:d1:48:15: 07:a4:d1:b4:80:b5:96:28:77:75:0a:09:a3:a4:67:3c:63:86: 28:11:9b:b7:60:34:4e:50:8c:05:f8:be:e6:9a:8f:c0:b4:d3: e5:57:28:6d -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZvN52YUikaWOE+SAoP7WYroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE3MjE0MDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmRkMjdlYWMzNmRkMjI5OWMyODg5YWEzNzZmOTYzZGFlNzJmNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4ybu1B2+kSNEGOogMFpQ3ZyFGpa oAMPBqPB1D6SlIeWK/Fx90d3RqLUd4yXGMO9MAt9omPq3/aqYyHUytnuigsDf8ef g7ERPeoO5dPu0CzBnjZ00aZZagr17HTlEn/otuXvxLNNja05CXq+GU4+tJREGzGc tHNw9Ld7YvRPdpV6iw9klrHVjJVxx+vrj0DSTK20aPouDgBo57av8EwMFzsBf2k5 jKZclAhanahup0qjSxKUaLGQFLd8E54K4dOsGvTwNh/mdsZcgxsuxdUsCuK+8uVL 3JZ4SBGLsCxq556c2mTXO6jcejPRMv0OfVbAKsTp0tzmARHcb/nWza4KvwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFIbdJ+rDbdIpnCiJqjdvlj2ucvQrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1 ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8yLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGFm YjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0ZjBlLzIvODZERDI3RUFDMzZE RDIyOTlDMjg4OUFBMzc2Rjk2M0RBRTcyRjQyQi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDHuYw DQYJKoZIhvcNAQELBQADggEBAJve7cgZTjtP8fbZeAGBj06HTsY8i34k95WJp1j0 mqviIRTQkysmG9+IF7NyzavWtdwBfPc2g9+bQV4nORyrYHJld/H3I+IzlhMVwiW2 G/awAKGW7BeXCGmbh/ETLoQ47IQ8dWVExHIW3AICLwaG8yUumpfc6NcfdO0fACXi uKwEQ3r4b5DzLTglMjV2aHpzC2kBDOVolNVmFNXSPdRkYtHfjHCEn8V7/S46uyeb MSFxSyfwcly0NcEZMe+OpPdxPfQi/UcGZq5YfaRr2Lt7oTqKueTlftFIFQek0bSA tZYod3UKCaOkZzxjhigRm7dgNE5QjAX4vuaaj8C00+VXKG0= -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:13 2026 by rpki-client