This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer File: HHJWatYok1xux10O3dMXx7CnZpM.cer (raw, json) Hash identifier: H+hYyVfysVX3YM17yPK7hasXs0X8sYMve9z933S+X+4= Subject key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD53812C4322ACD651E61CBC169DC54AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 07:46:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 87.199.144.0/22 IP: 185.153.32.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:38:12:c4:32:2a:cd:65:1e:61:cb:c1:69:dc:54:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 07:46:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:99:ba:ea:f0:cb:18:34:dd:00:34:21:3c:0d: 6a:6d:e4:4d:85:6b:b9:a2:51:30:3a:a9:ec:ca:58: 74:55:00:30:73:4b:6a:be:72:79:be:75:90:9a:b7: c6:3a:39:75:c9:94:36:1b:53:66:30:c0:2f:57:aa: 18:15:ce:7d:d3:ed:9a:62:84:1f:07:be:07:a4:0d: 87:e3:7c:23:87:f3:ae:25:70:a6:4f:1f:d3:c9:3a: 28:2e:93:16:7f:fa:de:0d:d7:79:f3:63:59:18:1c: 9d:d6:c8:90:9d:ea:77:67:2a:08:57:c8:50:06:fa: 69:e3:08:b1:61:c8:a5:0a:26:a4:40:00:20:21:43: 06:de:e5:54:71:20:60:99:c4:9e:27:11:55:95:79: 61:88:ef:fb:1b:1d:12:9f:b7:15:38:f5:a9:0a:8c: 32:84:36:3a:4a:0c:18:72:41:6c:2a:9f:56:25:6f: b8:82:15:27:cd:26:a5:bc:78:fb:3d:b2:52:4b:28: 46:5f:35:cd:7b:22:a6:e1:f6:a7:cf:42:61:27:2c: ea:46:7b:0a:cc:94:7b:e5:3c:67:02:e5:e9:97:cd: 34:ad:11:4c:80:04:05:10:36:8f:5e:29:9e:e4:7f: 41:58:b3:40:88:0e:d1:ac:f9:42:1a:a4:85:9f:0b: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.199.144.0/22 185.153.32.0/22 Signature Algorithm: sha256WithRSAEncryption 70:87:f5:f5:3c:8c:50:7b:b3:2f:4a:fd:cc:63:28:5d:2d:46: b9:8b:fc:25:a5:a9:44:7e:29:83:fc:a1:f8:9e:d6:cc:49:f0: 4d:4c:dd:9f:11:53:27:7f:ee:7a:a9:a7:3d:d8:10:3f:74:e6: de:83:a1:8b:e4:47:17:cd:87:7e:0b:72:59:34:fb:e7:8e:ac: 38:81:9f:f7:34:b7:97:8d:2a:4d:4d:ec:ec:62:15:5e:a5:8b: b3:a2:64:62:99:fe:47:77:76:79:87:8e:ee:3e:37:8a:07:50: e7:7c:4c:5c:ea:5b:12:94:08:80:ce:1d:dc:2d:13:2e:73:de: 4d:a9:86:0c:66:95:80:dc:d2:62:89:32:9a:2c:7e:ee:c3:32: f8:0c:ff:0b:53:4f:1f:17:cb:01:b6:00:40:04:dc:f7:9f:0c: 95:f8:66:71:3d:50:05:ac:a7:aa:7a:9d:a2:18:1d:0b:16:8f: ce:04:9a:af:45:e8:eb:65:e6:0d:8d:a3:b5:e5:bd:9c:9c:39: f7:9e:5b:bd:7b:79:fb:be:ee:d6:aa:6d:6e:26:d3:dc:2a:fc: 95:a0:f5:2a:ee:ca:80:b5:7d:dc:af:2d:89:95:f5:a5:84:90: e0:c2:c8:77:ec:e2:85:c0:a4:bb:3a:6a:aa:e4:0e:bc:48:5e: 19:bc:b5:20 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZvVOBLEMirNZR5hy8Fp3FSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MDc0NjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzcyNTY2YWQ2Mjg5MzVjNmVjNzVkMGVkZGQzMTdjN2IwYTc2NjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95m66vDLGDTdADQhPA1qbeRNhWu5 olEwOqnsylh0VQAwc0tqvnJ5vnWQmrfGOjl1yZQ2G1NmMMAvV6oYFc590+2aYoQf B74HpA2H43wjh/OuJXCmTx/TyTooLpMWf/reDdd582NZGByd1siQnep3ZyoIV8hQ Bvpp4wixYcilCiakQAAgIUMG3uVUcSBgmcSeJxFVlXlhiO/7Gx0Sn7cVOPWpCowy hDY6SgwYckFsKp9WJW+4ghUnzSalvHj7PbJSSyhGXzXNeyKm4fanz0JhJyzqRnsK zJR75TxnAuXpl800rRFMgAQFEDaPXime5H9BWLNAiA7RrPlCGqSFnwuhUQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBxyVmrWKJNcbsddDt3TF8ewp2aTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzhlZDdj OS0wYjQ1LTRkMjEtYTIwMy1mYzc1MjFhMjViYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvOGVkN2M5 LTBiNDUtNGQyMS1hMjAzLWZjNzUyMWEyNWJiYS8xL0hISldhdFlvazF4dXgxME8z ZE1YeDdDblpwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCV8eQAwQCuZkgMA0GCSqGSIb3DQEBCwUAA4IB AQBwh/X1PIxQe7MvSv3MYyhdLUa5i/wlpalEfimD/KH4ntbMSfBNTN2fEVMnf+56 qac92BA/dObeg6GL5EcXzYd+C3JZNPvnjqw4gZ/3NLeXjSpNTezsYhVepYuzomRi mf5Hd3Z5h47uPjeKB1DnfExc6lsSlAiAzh3cLRMuc95NqYYMZpWA3NJiiTKaLH7u wzL4DP8LU08fF8sBtgBABNz3nwyV+GZxPVAFrKeqep2iGB0LFo/OBJqvRejrZeYN jaO15b2cnDn3nlu9e3n7vu7Wqm1uJtPcKvyVoPUq7sqAtX3cry2JlfWlhJDgwsh3 7OKFwKS7Omqq5A68SF4ZvLUg -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:09 2026 by rpki-client