This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer File: ho8gMJli98bhwyZ_CD4STYPddvw.cer (raw, json) Hash identifier: PcW87OrwZ5O1QhFsgep5XbccjUi1oljQOjOlCuaS8U0= Subject key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9686BBC39484F2510A184702CCDE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41151 IP: 194.140.245.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:68:6b:bc:39:48:4f:25:10:a1:84:70:2c:cd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=868f20309962f7c6e1c3267f083e124d83dd76fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:23:4d:95:37:e1:05:bd:ea:29:e1:c5:61: f0:20:8d:ea:19:f5:2e:4e:56:01:5c:fc:c4:40:6b: 26:0e:d4:8c:71:27:12:53:97:61:6d:b8:02:4d:89: b5:b8:a2:a2:80:7d:70:ac:05:75:c5:64:ef:2b:3b: 31:06:78:31:fe:13:a9:3f:84:d4:b2:cd:7a:9c:ec: e9:e0:4e:d6:37:66:31:f4:f7:53:40:62:69:07:a6: 39:45:8d:fd:17:82:de:50:1f:3b:6b:32:9d:0e:47: 5a:99:23:0c:59:e1:07:9f:63:91:71:0c:8a:80:9f: 33:57:f6:4d:01:cf:35:54:e1:7b:9e:ad:1d:30:86: ee:31:34:f0:7a:1b:1a:30:37:44:65:7c:99:8b:27: cf:99:7a:dd:fd:0d:df:2a:81:d4:dc:4b:55:14:b7: 6d:15:f2:17:84:56:0c:c8:8b:bf:79:a4:81:b5:19: 47:84:14:82:df:d3:79:a2:f0:ff:a2:88:35:ab:36: 40:56:c2:1b:ee:c5:42:6c:0d:71:3a:cf:ca:32:3e: ac:d3:ce:12:b7:9e:e6:e7:b2:8c:4c:40:85:22:25: dc:bb:c5:3b:30:f2:d4:d6:a7:8f:d3:ab:f8:76:c3: f9:de:d5:2e:dd:3d:32:ff:d9:34:4e:b2:38:ea:96: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.245.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41151 Signature Algorithm: sha256WithRSAEncryption 29:4a:03:8d:69:3a:62:88:55:ee:cf:06:20:6c:79:73:f8:23: 8d:e1:62:85:9f:10:01:db:8a:2f:68:ef:f3:f0:02:22:76:7d: 22:b1:19:67:90:20:4e:d4:6b:1c:48:ca:32:d0:12:97:bb:b1: 64:9c:85:9f:ca:51:ea:67:91:eb:4f:96:fb:bd:c9:06:bc:a1: f5:2d:1a:85:a6:e8:ec:8e:50:85:f2:8f:89:cc:e8:e8:d0:e8: 82:bc:c1:d7:7b:6a:66:a7:97:36:73:fd:51:6f:a3:18:17:05: 3e:7c:9e:61:de:e4:a9:a8:d7:26:a7:87:cf:2c:55:98:8c:e8: 06:44:a9:db:d9:40:3d:5c:b8:c8:59:0f:8e:35:ac:36:c5:da: 65:39:e5:76:1f:38:b5:a4:a1:ba:35:d0:07:6a:26:b9:be:d0: c7:71:c2:8b:d8:82:da:a5:d2:3a:83:82:26:93:8d:1d:27:5f: e1:1e:6f:b3:fb:20:9c:5c:7e:aa:e7:15:67:37:19:4e:18:ae: 98:6e:cb:b3:61:00:02:d9:0e:36:98:3b:26:5c:09:4e:16:22: d0:a5:e6:2b:3a:68:c1:9c:99:0d:d6:78:54:77:d7:12:66:0f: af:55:c5:29:42:82:66:6b:8a:b3:ed:21:4d:6f:d1:76:03:ef: 24:5c:84:c5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yWhrvDlITyUQoYRwLM3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjhmMjAzMDk5NjJmN2M2ZTFjMzI2N2YwODNlMTI0ZDgzZGQ3NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno0jTZU34QW96inhxWHwII3qGfUu TlYBXPzEQGsmDtSMcScSU5dhbbgCTYm1uKKigH1wrAV1xWTvKzsxBngx/hOpP4TU ss16nOzp4E7WN2Yx9PdTQGJpB6Y5RY39F4LeUB87azKdDkdamSMMWeEHn2ORcQyK gJ8zV/ZNAc81VOF7nq0dMIbuMTTwehsaMDdEZXyZiyfPmXrd/Q3fKoHU3EtVFLdt FfIXhFYMyIu/eaSBtRlHhBSC39N5ovD/oog1qzZAVsIb7sVCbA1xOs/KMj6s084S t57m57KMTECFIiXcu8U7MPLU1qeP06v4dsP53tUu3T0y/9k0TrI46pbuNQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIaPIDCZYvfG4cMmfwg+Ek2D3Xb8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzEyNmNl ZS1mMTZjLTQ1YTgtOTdiMi02MjMzODRmM2UxMjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMTI2Y2Vl LWYxNmMtNDVhOC05N2IyLTYyMzM4NGYzZTEyNS8xL2hvOGdNSmxpOThiaHd5Wl9D RDRTVFlQZGR2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwoz1MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCgvzANBgkqhkiG9w0BAQsFAAOCAQEAKUoDjWk6YohV7s8GIGx5c/gjjeFihZ8Q AduKL2jv8/ACInZ9IrEZZ5AgTtRrHEjKMtASl7uxZJyFn8pR6meR60+W+73JBryh 9S0ahabo7I5QhfKPiczo6NDogrzB13tqZqeXNnP9UW+jGBcFPnyeYd7kqajXJqeH zyxVmIzoBkSp29lAPVy4yFkPjjWsNsXaZTnldh84taShujXQB2omub7Qx3HCi9iC 2qXSOoOCJpONHSdf4R5vs/sgnFx+qucVZzcZThiumG7Ls2EAAtkONpg7JlwJThYi 0KXmKzpowZyZDdZ4VHfXEmYPr1XFKUKCZmuKs+0hTW/RdgPvJFyExQ== -----END CERTIFICATE-----Generated at Fri Jan 2 16:55:56 2026 by rpki-client