This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.cer (raw, json) Hash identifier: 5T7jtYMYdpxZficviCIRQhkTEdAujNgCovyQW1mluOA= Subject key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79100D502625C6BACC4D3B9B33CCE36D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8586 IP: 5.102.80.0/20 IP: 37.152.32.0/20 IP: 62.8.96.0/19 IP: 84.252.192.0/18 IP: 94.250.224.0/20 IP: 146.255.0.0/20 IP: 164.40.208.0/20 IP: 178.239.96.0/20 IP: 185.13.140.0/22 IP: 195.12.0.0/19 IP: 195.74.128.0/19 IP: 212.58.32.0/19 IP: 213.83.64.0/18 IP: 213.246.128.0/18 IP: 2001:4160::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0d:50:26:25:c6:ba:cc:4d:3b:9b:33:cc:e3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d476b006351a2f9cf2a91386de50ce27f1550595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:00:a4:d8:ba:08:33:50:d2:32:d1:5a:00: 2a:69:ff:c1:50:af:23:9a:48:be:ec:22:91:c7:a9: fe:b9:ea:08:f5:a0:45:27:a2:e1:11:c5:d1:cd:f5: 80:95:b4:36:61:97:b4:89:00:69:0e:64:fd:c6:ec: 35:8b:bb:8d:83:e5:fc:fb:20:10:8a:2c:66:4a:57: 36:30:26:ca:13:c2:a9:71:e1:9d:0f:8c:15:28:5a: ba:e3:f9:21:34:3d:63:ac:26:09:00:3d:17:6f:b8: a0:62:74:bc:fb:a5:ba:0e:c9:1c:77:6c:ac:e1:8a: 06:3d:0e:ad:1f:ee:55:02:c3:38:cd:cd:70:06:be: 50:58:1f:b4:09:f8:20:e3:0d:01:14:fe:bb:f4:fe: dd:92:ae:b8:2e:d7:a7:fc:97:7c:30:ca:5b:2b:62: 46:74:6b:8e:c4:14:73:d7:73:d6:87:45:20:e7:29: 17:dd:aa:ec:ef:e9:d6:94:89:13:cb:6e:f7:60:79: c5:52:7c:b8:ec:0b:1b:0c:ba:73:6c:09:57:4f:15: 24:3d:a1:73:bf:cd:72:7d:b5:46:fd:2f:50:0d:c7: 55:6a:84:42:56:7a:8b:a0:22:11:c5:16:6e:cf:38: 84:b4:a9:83:71:03:df:3c:b4:ce:f3:f0:13:2e:22: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.80.0/20 37.152.32.0/20 62.8.96.0/19 84.252.192.0/18 94.250.224.0/20 146.255.0.0/20 164.40.208.0/20 178.239.96.0/20 185.13.140.0/22 195.12.0.0/19 195.74.128.0/19 212.58.32.0/19 213.83.64.0/18 213.246.128.0/18 IPv6: 2001:4160::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8586 Signature Algorithm: sha256WithRSAEncryption 21:e0:df:1b:be:aa:99:71:90:f4:a3:dd:98:5d:48:3d:34:50: 35:15:68:f3:fb:2d:9a:09:87:03:49:88:f0:cb:a7:8a:8d:ef: aa:bb:0b:3c:3a:d7:4b:f2:ee:7f:47:bf:7e:b9:d6:81:19:55: 79:cf:e0:b3:88:0f:3c:2b:f4:14:ac:d9:aa:3f:50:89:31:81: 65:57:06:a9:df:58:75:1c:b2:21:07:36:66:64:3f:12:de:cc: 99:c1:00:61:9d:80:ec:1a:37:f8:c9:28:d6:57:50:fb:30:cd: 99:bc:52:f0:2e:5c:b5:f4:70:ba:da:f3:6c:91:77:a4:d7:93: db:da:a6:50:b5:5b:8c:d6:d1:5f:71:42:70:90:65:03:b2:aa: eb:4d:b5:09:bd:ab:5c:45:3c:fd:63:43:7e:af:61:7a:3e:be: f5:23:10:85:05:6e:ab:01:68:49:55:00:b5:3a:fa:6d:fb:36: 21:67:b1:0b:66:bd:63:3b:95:c5:c1:69:3d:88:d2:a5:24:c3: 4b:e5:79:4f:0d:74:60:e2:81:4c:14:b0:e7:c6:88:86:66:55: d0:97:74:87:7a:ff:93:87:6c:ca:21:36:05:8d:90:b7:93:2d: b3:dd:cb:4e:df:98:87:e5:b4:b9:ce:31:aa:ab:71:ad:e1:dc: f4:7b:1a:22 -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISAZt5EA1QJiXGusxNO5szzONtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDc2YjAwNjM1MWEyZjljZjJhOTEzODZkZTUwY2UyN2YxNTUwNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtoApNi6CDNQ0jLRWgAqaf/BUK8j mki+7CKRx6n+ueoI9aBFJ6LhEcXRzfWAlbQ2YZe0iQBpDmT9xuw1i7uNg+X8+yAQ iixmSlc2MCbKE8KpceGdD4wVKFq64/khND1jrCYJAD0Xb7igYnS8+6W6Dskcd2ys 4YoGPQ6tH+5VAsM4zc1wBr5QWB+0Cfgg4w0BFP679P7dkq64Lten/Jd8MMpbK2JG dGuOxBRz13PWh0Ug5ykX3ars7+nWlIkTy273YHnFUny47AsbDLpzbAlXTxUkPaFz v81yfbVG/S9QDcdVaoRCVnqLoCIRxRZuzziEtKmDcQPfPLTO8/ATLiKfpwIDAQAB o4IC/DCCAvgwHQYDVR0OBBYEFNR2sAY1Gi+c8qkTht5QzifxVQWVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzQ2MjA3 Zi03ZTM0LTQyOTItYjE0YS00NGMwN2YzMTQ5MDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNDYyMDdm LTdlMzQtNDI5Mi1iMTRhLTQ0YzA3ZjMxNDkwNC8xLzFIYXdCalVhTDV6eXFST0cz bERPSl9GVkJaVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUF BwEHAQH/BG0wazBaBAIAATBUAwQEBWZQAwQEJZggAwQFPghgAwQGVPzAAwQEXvrg AwQEkv8AAwQEpCjQAwQEsu9gAwQCuQ2MAwQFwwwAAwQFw0qAAwQF1DogAwQG1VNA AwQG1faAMA0EAgACMAcDBQAgAUFgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiGK MA0GCSqGSIb3DQEBCwUAA4IBAQAh4N8bvqqZcZD0o92YXUg9NFA1FWjz+y2aCYcD SYjwy6eKje+quws8OtdL8u5/R79+udaBGVV5z+CziA88K/QUrNmqP1CJMYFlVwap 31h1HLIhBzZmZD8S3syZwQBhnYDsGjf4ySjWV1D7MM2ZvFLwLly19HC62vNskXek 15Pb2qZQtVuM1tFfcUJwkGUDsqrrTbUJvatcRTz9Y0N+r2F6Pr71IxCFBW6rAWhJ VQC1Ovpt+zYhZ7ELZr1jO5XFwWk9iNKlJMNL5XlPDXRg4oFMFLDnxoiGZlXQl3SH ev+Th2zKITYFjZC3ky2z3ctO35iH5bS5zjGqq3Gt4dz0exoi -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:49 2026 by rpki-client