This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer File: HH3TyBbYWWCARyBUNICV7SuFUeU.cer (raw, json) Hash identifier: n8mOkygBSJ63m5ejx/k0zvRIuCKsr3xJiKFFqiOdONQ= Subject key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED88BAEB7E3D375E8E3AD7C744FFA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212567 IP: 2001:678:e68::/48 IP: 2001:678:ed0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:88:ba:eb:7e:3d:37:5e:8e:3a:d7:c7:44:ff:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c7dd3c816d8596080472054348095ed2b8551e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:b6:e4:4d:ff:b9:3f:5b:0a:75:8e:0c:db: ea:49:91:13:aa:c4:e6:ad:64:86:96:20:cc:2c:35: 20:b0:74:cc:02:d6:5a:39:48:87:af:d5:19:28:c5: 2a:be:16:04:d6:b0:8d:46:bd:d2:f2:3a:f7:60:a6: 72:63:85:ea:52:8c:a7:22:75:32:79:d0:82:99:4f: 1b:3a:c9:4c:d4:9b:50:3a:34:5d:b9:12:d6:7f:02: dc:1c:ae:c6:34:4f:3f:ae:1e:79:13:ff:bf:eb:41: aa:72:65:98:8a:17:7f:76:54:44:09:f9:95:17:21: 06:df:08:a1:b9:b7:8d:ed:89:84:df:a0:12:99:c2: 79:35:4d:aa:f2:d7:89:2b:8f:35:3a:38:1e:53:92: e4:16:67:f2:eb:b1:42:34:00:5e:93:a7:c1:97:4c: bf:4a:58:2d:f1:46:36:2d:dc:0b:df:a9:cc:ba:6e: a5:8b:20:7a:b9:98:5e:ff:41:1a:63:65:2e:27:c4: 57:b7:74:db:e6:db:55:dd:9e:16:b0:22:07:76:03: b8:9e:cd:2b:57:bc:81:e7:e6:64:c6:91:05:09:40: 82:7c:e4:77:a3:25:e8:70:06:76:95:12:f4:85:bc: 91:6f:e5:31:bf:41:40:4b:5a:5d:91:0a:d9:f5:0d: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e68::/48 2001:678:ed0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212567 Signature Algorithm: sha256WithRSAEncryption 00:cd:58:c8:43:61:8c:91:a1:c6:27:53:ba:a1:7a:6c:50:db: cd:2a:41:17:5c:b2:a1:5e:20:4c:57:b4:1f:96:16:d8:08:96: 80:73:59:ee:af:e1:d0:54:6b:ee:43:a4:94:e1:03:5d:cd:2e: 0b:21:78:98:51:99:63:58:1a:6c:1e:05:09:6a:80:6d:bb:c1: 31:c9:e2:91:b1:10:b0:05:0f:c9:23:ad:c1:1f:3a:d8:1c:e6: 5d:03:84:fc:de:92:f8:2d:a4:de:95:18:e2:46:37:93:46:fd: 45:6b:f8:f7:d2:08:3d:45:4d:32:5c:c0:5b:ba:29:cb:68:cb: d1:ef:39:e3:41:a4:9a:4c:a7:d8:77:a0:02:e9:b7:b0:a9:5a: de:46:6b:a3:d0:18:b0:ed:6c:8f:38:cf:dd:29:45:46:a7:91: b6:8f:47:3e:4e:8f:d0:1b:d2:fa:39:7b:70:a8:2b:17:c9:eb: c4:34:2f:e0:8f:51:a3:69:70:43:2f:78:f7:af:30:a7:ef:87: c0:4a:b5:52:6c:3f:dd:bb:ed:bc:7d:02:0d:a0:3a:4b:52:00: 74:b7:e7:67:8c:4c:b2:26:8f:17:44:01:03:f6:61:a7:bb:51: 6e:74:db:a9:f2:1d:1a:ed:8d:7b:05:41:4b:3a:0e:7f:50:fd: 36:b2:88:f1 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt87Yi66349N16OOtfHRP+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzdkZDNjODE2ZDg1OTYwODA0NzIwNTQzNDgwOTVlZDJiODU1MWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsG25E3/uT9bCnWODNvqSZETqsTm rWSGliDMLDUgsHTMAtZaOUiHr9UZKMUqvhYE1rCNRr3S8jr3YKZyY4XqUoynInUy edCCmU8bOslM1JtQOjRduRLWfwLcHK7GNE8/rh55E/+/60GqcmWYihd/dlRECfmV FyEG3wihubeN7YmE36ASmcJ5NU2q8teJK481OjgeU5LkFmfy67FCNABek6fBl0y/ Slgt8UY2LdwL36nMum6liyB6uZhe/0EaY2UuJ8RXt3Tb5ttV3Z4WsCIHdgO4ns0r V7yB5+ZkxpEFCUCCfOR3oyXocAZ2lRL0hbyRb+Uxv0FAS1pdkQrZ9Q34MQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFBx908gW2FlggEcgVDSAle0rhVHlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2JhYWIz Ni04ODg2LTQyMDYtOWU3OS1jYzJjZDdkMzFhMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvYmFhYjM2 LTg4ODYtNDIwNi05ZTc5LWNjMmNkN2QzMWEyNi8xL0hIM1R5QmJZV1dDQVJ5QlVO SUNWN1N1RlVlVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeA5oAwcAIAEGeA7QMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwM+VzANBgkqhkiG9w0BAQsFAAOCAQEAAM1YyENhjJGhxidT uqF6bFDbzSpBF1yyoV4gTFe0H5YW2AiWgHNZ7q/h0FRr7kOklOEDXc0uCyF4mFGZ Y1gabB4FCWqAbbvBMcnikbEQsAUPySOtwR862BzmXQOE/N6S+C2k3pUY4kY3k0b9 RWv499IIPUVNMlzAW7opy2jL0e8540Gkmkyn2HegAum3sKla3kZro9AYsO1sjzjP 3SlFRqeRto9HPk6P0BvS+jl7cKgrF8nrxDQv4I9Ro2lwQy94968wp++HwEq1Umw/ 3bvtvH0CDaA6S1IAdLfnZ4xMsiaPF0QBA/Zhp7tRbnTbqfIdGu2NewVBSzoOf1D9 NrKI8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:00 2026 by rpki-client