This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer (raw, json) Hash identifier: 2FDJu4tJO6KGjcjzF5RBGa5CQchW93JTrexggAd4C/M= Subject key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1E8FEA92E8AAB585DBAC5F85E3B9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210288 IP: 185.171.52.0/22 IP: 2a14:7300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e8:fe:a9:2e:8a:ab:58:5d:ba:c5:f8:5e:3b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c766b058c096753a34ad625d53275cd2dba5b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:f4:c0:85:ab:79:97:64:da:df:09:99:50: 95:0c:1a:c0:bb:96:c2:b8:33:40:06:26:86:c4:2a: 68:9f:fe:8a:20:b3:22:d2:64:07:b3:d2:09:7a:3d: 1a:46:3b:f8:18:bb:83:f9:a9:0f:46:e9:f6:eb:89: ce:1c:25:c7:75:e1:7f:d5:07:fe:0f:b1:01:89:63: 9e:bc:64:4b:24:bc:77:f7:5c:84:8d:ed:58:23:e9: dc:ba:09:f6:e7:94:d1:98:70:74:3c:cd:84:ad:c9: 54:c4:d2:31:38:94:83:71:10:64:ab:ea:33:40:c5: 2c:b6:0d:f0:aa:62:a3:14:d4:51:d7:34:23:20:cd: f2:5a:9d:5b:e3:62:a0:26:f5:dd:a9:74:a9:47:56: 15:c6:b6:6a:be:e7:19:b0:6e:29:ec:f5:b1:03:56: c5:f0:87:ee:d3:96:97:ce:a2:ca:d5:95:38:d0:bb: a5:a7:71:d3:a8:a6:b8:99:de:60:fb:e6:25:91:f7: de:68:6d:8c:17:56:85:d0:d2:12:71:2d:4a:46:d7: ae:dc:e1:ae:c9:47:87:6d:3c:7e:28:8f:5e:4c:10: 18:08:63:79:6d:5d:c0:1e:13:bb:66:c4:50:2a:64: bf:39:5d:d5:48:92:18:06:50:27:93:1d:2a:a8:a4: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.171.52.0/22 IPv6: 2a14:7300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210288 Signature Algorithm: sha256WithRSAEncryption 53:c3:d1:11:96:a3:17:f2:57:f9:c9:e5:96:69:7d:74:26:1e: 20:c3:13:0b:a5:56:7d:85:bf:c3:b7:2f:42:03:a6:20:e6:32: 7e:41:cc:e9:94:5e:6a:21:a7:33:f0:89:27:64:88:8a:11:81: 73:e8:17:e4:94:c4:a2:68:57:e0:41:c3:fe:a3:66:a5:a3:c3: a2:a0:72:3c:34:b0:48:80:90:db:b2:a8:7d:b0:8f:98:77:90: 88:4b:46:7f:ea:7c:f0:7a:d1:b9:93:c5:7e:81:87:17:8e:6d: 5b:be:3f:43:bb:a5:0b:57:94:6b:17:f3:7e:11:7d:29:3f:15: c6:b2:e1:05:3b:47:5a:9d:41:a0:ea:85:8d:c5:30:9a:92:f1: a9:cf:c4:d2:13:36:50:d9:dd:1a:bb:89:7f:fe:cd:58:97:4a: 38:93:23:d7:e0:b9:6d:07:3b:41:e0:47:be:e0:52:2f:14:13: ff:c8:44:0a:08:4e:bf:bc:17:79:56:9c:f9:af:6f:d0:6e:50: 75:d8:0c:93:17:57:c6:5d:a8:18:4a:17:3f:3b:6e:24:9c:26: e8:99:53:f4:69:79:7f:eb:28:f4:00:22:b9:54:c5:61:8d:3e: ea:a1:85:76:e1:08:d0:7b:42:41:85:7e:d2:00:7e:84:d6:c0: e9:12:fc:a8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8ej+qS6Kq1hdusX4XjudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzc2NmIwNThjMDk2NzUzYTM0YWQ2MjVkNTMyNzVjZDJkYmE1YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G/0wIWreZdk2t8JmVCVDBrAu5bC uDNABiaGxCpon/6KILMi0mQHs9IJej0aRjv4GLuD+akPRun264nOHCXHdeF/1Qf+ D7EBiWOevGRLJLx391yEje1YI+ncugn255TRmHB0PM2ErclUxNIxOJSDcRBkq+oz QMUstg3wqmKjFNRR1zQjIM3yWp1b42KgJvXdqXSpR1YVxrZqvucZsG4p7PWxA1bF 8Ifu05aXzqLK1ZU40Lulp3HTqKa4md5g++YlkffeaG2MF1aF0NIScS1KRteu3OGu yUeHbTx+KI9eTBAYCGN5bV3AHhO7ZsRQKmS/OV3VSJIYBlAnkx0qqKQmfwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBx2awWMCWdTo0rWJdUydc0tulszMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2FiODNk Yy1jMGU3LTRlYzMtYWY3Mi04MTkxN2RmZmRjZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWI4M2Rj LWMwZTctNGVjMy1hZjcyLTgxOTE3ZGZmZGNkNy8xL0hIWnJCWXdKWjFPalN0WWwx VEoxelMyNld6TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuas0MA0EAgACMAcDBQMqFHMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM1cDANBgkqhkiG9w0BAQsFAAOCAQEAU8PREZajF/JX +cnllml9dCYeIMMTC6VWfYW/w7cvQgOmIOYyfkHM6ZReaiGnM/CJJ2SIihGBc+gX 5JTEomhX4EHD/qNmpaPDoqByPDSwSICQ27KofbCPmHeQiEtGf+p88HrRuZPFfoGH F45tW74/Q7ulC1eUaxfzfhF9KT8VxrLhBTtHWp1BoOqFjcUwmpLxqc/E0hM2UNnd GruJf/7NWJdKOJMj1+C5bQc7QeBHvuBSLxQT/8hECghOv7wXeVac+a9v0G5QddgM kxdXxl2oGEoXPztuJJwm6JlT9Gl5f+so9AAiuVTFYY0+6qGFduEI0HtCQYV+0gB+ hNbA6RL8qA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:35 2026 by rpki-client