This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer File: HGEEotM1CCfK0RoWVpyrWfD4d0w.cer (raw, json) Hash identifier: /awpn95GI7MOC7JdMi/Bq1SnT/man01Zdbc6AbRAQOs= Subject key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E374F66927717BEB9A2F3A436B0FBE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200296 IP: 213.108.240.0/22 IP: 2a0d:1540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4f:66:92:77:17:be:b9:a2:f3:a4:36:b0:fb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c6104a2d3350827cad11a16569cab59f0f8774c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:12:a2:c7:c0:b9:ed:e7:e8:8d:54:6a:34: 91:de:3e:cf:ac:c9:03:59:30:3b:30:89:52:2a:78: f4:4a:93:d4:2d:ab:ea:8a:33:41:4a:3a:f8:bd:43: 31:07:92:7e:c4:ac:3e:48:4e:aa:79:b9:78:d4:f6: b2:77:f5:b2:4f:e7:4d:db:22:cf:76:20:e8:cf:c2: 4d:37:aa:d2:20:d9:1b:27:97:77:bc:3f:46:40:42: 7e:1e:4b:09:3d:c6:59:06:8e:ce:a5:c1:64:ee:b0: d5:5f:ca:7c:54:25:1f:63:4a:d6:c8:fd:1a:67:48: 48:0c:9a:1b:49:62:92:9c:5d:1e:f6:7b:25:45:ff: 7e:1f:0a:9f:bb:62:b5:4c:a1:69:e2:00:c8:1d:20: 9d:25:31:1a:09:bf:37:5f:04:83:fa:f2:46:e1:cd: e8:e4:f2:86:01:da:6f:29:36:ff:9e:9d:1e:60:c6: 9a:f4:ba:0d:9e:d6:25:79:2a:07:86:4a:a0:c1:25: 59:da:93:22:e9:48:6e:61:02:b0:af:4e:3d:b8:43: b4:cc:05:46:91:2c:75:db:e8:f9:cc:8e:b4:e1:66: 63:f0:da:e5:3d:8c:5e:ea:23:7a:19:06:7a:02:8b: 21:64:71:bd:3b:23:31:42:aa:9b:e1:95:b9:60:63: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.240.0/22 IPv6: 2a0d:1540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200296 Signature Algorithm: sha256WithRSAEncryption 31:8f:87:ab:d7:3c:c5:78:72:4f:43:9b:81:f4:4b:c5:cd:e7: 14:05:9f:11:3a:65:f7:2a:3c:4b:f1:a0:b5:ce:28:6d:f8:76: 05:77:04:e6:8a:d4:90:f9:7d:84:1d:b9:ff:b3:16:61:1b:83: c5:48:8a:c2:c4:fa:72:91:39:23:0f:f5:53:19:36:81:bf:cd: 98:3c:5c:5f:74:d5:15:1c:74:3a:05:e2:f9:bc:58:49:8a:09: 2b:f9:5d:9e:70:2e:2c:b5:43:f7:2a:ab:11:20:c4:53:e8:12: 36:49:0f:6f:67:c1:2d:f9:46:a1:f4:22:e6:93:a5:e7:95:b8: 7d:5a:21:17:45:69:b2:54:0d:47:50:5f:1a:43:fc:d2:85:fe: bb:c7:3c:a7:a7:ce:69:b3:1a:b2:72:94:43:b8:75:27:b2:5b: 32:51:7f:d1:9e:82:a3:09:26:bd:00:9e:d0:f6:13:7b:a5:a1: 27:8c:09:6b:be:f7:12:b6:69:d6:85:eb:0e:05:89:84:ee:93: df:8a:8b:ec:c5:b4:68:6f:ba:6e:ee:a2:c6:63:b6:31:07:18: 17:31:d0:51:ae:31:3d:e3:33:fe:b5:fa:10:ce:21:e7:20:97: c0:11:30:82:e2:7b:d7:68:04:99:68:7b:7f:69:7f:dc:75:da: 6d:7b:81:0e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N09mkncXvrmi86Q2sPvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzYxMDRhMmQzMzUwODI3Y2FkMTFhMTY1NjljYWI1OWYwZjg3NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwQSosfAue3n6I1UajSR3j7PrMkD WTA7MIlSKnj0SpPULavqijNBSjr4vUMxB5J+xKw+SE6qebl41Payd/WyT+dN2yLP diDoz8JNN6rSINkbJ5d3vD9GQEJ+HksJPcZZBo7OpcFk7rDVX8p8VCUfY0rWyP0a Z0hIDJobSWKSnF0e9nslRf9+Hwqfu2K1TKFp4gDIHSCdJTEaCb83XwSD+vJG4c3o 5PKGAdpvKTb/np0eYMaa9LoNntYleSoHhkqgwSVZ2pMi6UhuYQKwr049uEO0zAVG kSx12+j5zI604WZj8NrlPYxe6iN6GQZ6AoshZHG9OyMxQqqb4ZW5YGNLZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBxhBKLTNQgnytEaFlacq1nw+HdMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzljZGVk Yi00ZGQ1LTRkYWMtOTc3ZS0xNDkwNzk2Mjc3MTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvOWNkZWRi LTRkZDUtNGRhYy05NzdlLTE0OTA3OTYyNzcxMy8xL0hHRUVvdE0xQ0NmSzBSb1dW cHlyV2ZENGQwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQC1WzwMA0EAgACMAcDBQMqDRVAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMOaDANBgkqhkiG9w0BAQsFAAOCAQEAMY+Hq9c8xXhy T0ObgfRLxc3nFAWfETpl9yo8S/Ggtc4obfh2BXcE5orUkPl9hB25/7MWYRuDxUiK wsT6cpE5Iw/1Uxk2gb/NmDxcX3TVFRx0OgXi+bxYSYoJK/ldnnAuLLVD9yqrESDE U+gSNkkPb2fBLflGofQi5pOl55W4fVohF0VpslQNR1BfGkP80oX+u8c8p6fOabMa snKUQ7h1J7JbMlF/0Z6CowkmvQCe0PYTe6WhJ4wJa773ErZp1oXrDgWJhO6T34qL 7MW0aG+6bu6ixmO2MQcYFzHQUa4xPeMz/rX6EM4h5yCXwBEwguJ712gEmWh7f2l/ 3HXabXuBDg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:51 2026 by rpki-client