This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer (raw, json) Hash identifier: 2cNCn72RtyxSqOMUtqbiPzlc6zvITD3iVzNTIb8sBX0= Subject key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDE2284C3D5A0B52E614F45AE4D530 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5562 AS: 12600 AS: 13100 AS: 15830 AS: 24938 AS: 28744 AS: 39003 AS: 39757 IP: 62.209.32.0/19 IP: 62.216.224.0/19 IP: 80.85.64.0 -- 80.85.83.255 IP: 80.85.88.0/21 IP: 80.252.80.0/20 IP: 81.29.192.0/19 IP: 81.201.96.0/19 IP: 82.199.64.0/19 IP: 85.90.224.0 -- 85.90.243.255 IP: 85.90.248.0/21 IP: 85.233.192.0/19 IP: 87.237.184.0/21 IP: 87.252.192.0/19 IP: 88.80.160.0 -- 88.80.183.255 IP: 89.21.0.0/19 IP: 89.107.16.0/21 IP: 91.212.222.0/24 IP: 109.237.16.0/21 IP: 109.237.28.0/22 IP: 188.95.96.0/21 IP: 194.8.92.0/23 IP: 212.71.224.0/21 IP: 212.71.240.0/22 IP: 212.111.32.0/21 IP: 212.111.44.0 -- 212.111.63.255 IP: 213.52.132.0 -- 213.52.255.255 IP: 213.168.224.0 -- 213.168.247.255 IP: 213.168.252.0/22 IP: 213.219.0.0 -- 213.219.35.255 IP: 213.219.40.0 -- 213.219.63.255 IP: 217.20.32.0/20 IP: 217.68.16.0/20 IP: 217.114.160.0/20 IP: 217.117.144.0/20 IP: 2001:1668::/32 IP: 2001:4120::/32 IP: 2001:4d78::/32 IP: 2a02:170::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e2:28:4c:3d:5a:0b:52:e6:14:f4:5a:e4:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:bf:69:f6:e4:8d:ee:17:ae:b6:e3:dd:ec: 70:4a:1b:50:8d:55:4c:0e:c9:fa:d1:32:ca:a2:52: bd:4c:9f:8c:d0:e5:67:d8:9f:d0:2e:c4:e2:90:62: 7c:fc:8a:64:ce:a3:df:d7:b0:32:27:2e:42:af:fd: 36:82:19:9b:e7:09:9b:f3:c0:85:32:fa:5d:d3:f1: df:9f:5f:83:74:8e:11:d4:0b:d6:1a:7d:17:de:de: 1a:fc:45:12:41:ae:5d:e6:a4:dd:cd:1d:d0:cb:d6: d7:23:9e:68:5c:10:8a:5c:b7:27:83:0f:13:b4:e4: a7:36:8c:e1:57:0e:b3:e7:c6:5e:9c:99:22:8e:76: d4:97:1f:93:b7:db:33:8e:88:51:2a:dc:9f:28:8d: bc:01:b8:65:eb:20:92:07:c2:93:16:f9:e7:d0:16: b3:da:03:be:40:42:9a:bf:79:b5:10:d1:b8:cd:3d: 8e:a7:1b:fa:27:52:07:13:b0:ed:1e:f4:f8:60:ee: 4b:61:e8:dc:9e:1c:af:f6:97:98:1d:01:4d:7f:75: df:d1:4a:03:aa:1f:c5:76:b1:27:3a:23:55:67:e6: ea:74:42:5b:b9:c7:d3:66:87:93:ee:7d:a1:31:58: 7c:c2:72:f0:36:c5:28:a7:b7:a9:f6:67:44:db:98: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.209.32.0/19 62.216.224.0/19 80.85.64.0-80.85.83.255 80.85.88.0/21 80.252.80.0/20 81.29.192.0/19 81.201.96.0/19 82.199.64.0/19 85.90.224.0-85.90.243.255 85.90.248.0/21 85.233.192.0/19 87.237.184.0/21 87.252.192.0/19 88.80.160.0-88.80.183.255 89.21.0.0/19 89.107.16.0/21 91.212.222.0/24 109.237.16.0/21 109.237.28.0/22 188.95.96.0/21 194.8.92.0/23 212.71.224.0/21 212.71.240.0/22 212.111.32.0/21 212.111.44.0-212.111.63.255 213.52.132.0-213.52.255.255 213.168.224.0-213.168.247.255 213.168.252.0/22 213.219.0.0-213.219.35.255 213.219.40.0-213.219.63.255 217.20.32.0/20 217.68.16.0/20 217.114.160.0/20 217.117.144.0/20 IPv6: 2001:1668::/32 2001:4120::/32 2001:4d78::/32 2a02:170::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5562 12600 13100 15830 24938 28744 39003 39757 Signature Algorithm: sha256WithRSAEncryption 66:56:8b:6d:4d:2a:3e:88:f1:7d:63:14:b6:6b:e4:4f:39:31: e3:bb:95:25:8b:a8:c9:db:97:0a:1c:ad:f5:13:ac:24:be:83: 47:46:f5:c7:25:23:9e:56:ef:52:3d:33:f0:c0:cc:7d:03:90: d8:83:90:47:06:93:87:82:86:f3:8f:8a:cc:3b:58:77:26:fc: 68:23:74:65:1c:46:5b:af:c4:64:88:66:23:2a:37:83:e1:03: 09:b0:25:99:90:79:35:36:ef:b9:24:0f:20:82:fe:4a:89:a8: f9:48:83:79:c4:39:33:a5:ff:e3:50:0a:6b:30:e8:11:30:c0: 09:4f:6d:4b:26:b7:f5:11:e2:3f:2d:19:d3:0f:32:1e:5a:6d: e8:eb:2c:6c:80:11:9b:34:60:3e:98:06:b7:a1:53:40:dc:35: b1:ff:0b:c1:5b:9e:ae:26:f6:b9:0c:6a:ab:ae:7e:71:57:2c: d1:2a:83:5f:ad:8d:d9:5b:1d:51:5d:d8:c0:ad:9a:f1:e6:59: 09:07:96:7b:b8:c0:f8:d4:aa:b6:59:c1:1e:94:5c:a3:a9:29: a3:83:03:23:ce:6d:ca:5f:ee:97:57:bb:1c:73:48:82:c7:f4: d6:ed:92:65:0c:8e:c4:3b:d3:e4:8a:30:6a:f9:97:a6:b1:76: aa:d2:76:7c -----BEGIN CERTIFICATE----- MIIG4zCCBcugAwIBAgISAZt87eIoTD1aC1LmFPRa5NUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzg2NDgxM2MwODYyZTZiNDc1NmY4ZGZkYTg5NTdjNmFlYWM2NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd6/afbkje4Xrrbj3exwShtQjVVM Dsn60TLKolK9TJ+M0OVn2J/QLsTikGJ8/IpkzqPf17AyJy5Cr/02ghmb5wmb88CF Mvpd0/Hfn1+DdI4R1AvWGn0X3t4a/EUSQa5d5qTdzR3Qy9bXI55oXBCKXLcngw8T tOSnNozhVw6z58ZenJkijnbUlx+Tt9szjohRKtyfKI28Abhl6yCSB8KTFvnn0Baz 2gO+QEKav3m1ENG4zT2Opxv6J1IHE7DtHvT4YO5LYejcnhyv9peYHQFNf3Xf0UoD qh/FdrEnOiNVZ+bqdEJbucfTZoeT7n2hMVh8wnLwNsUop7ep9mdE25gbywIDAQAB o4ID7zCCA+swHQYDVR0OBBYEFByGSBPAhi5rR1b439qJV8aurGZUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzEwMzkz ZC1hMDMwLTRhZjUtODk5NS04ZjJkNjY4NGM4MTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvMTAzOTNk LWEwMzAtNGFmNS04OTk1LThmMmQ2Njg0YzgxNC8xL0hJWklFOENHTG10SFZ2amYy b2xYeHE2c1psUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBTwYIKwYB BQUHAQcBAf8EggE+MIIBOjCCARIEAgABMIIBCgMEBT7RIAMEBT7Y4DAMAwQGUFVA AwQCUFVQAwQDUFVYAwQEUPxQAwQFUR3AAwQFUclgAwQFUsdAMAwDBAVVWuADBAJV WvADBANVWvgDBAVV6cADBANX7bgDBAVX/MAwDAMEBVhQoAMEA1hQsAMEBVkVAAME A1lrEAMEAFvU3gMEA23tEAMEAm3tHAMEA7xfYAMEAcIIXAMEA9RH4AMEAtRH8AME A9RvIDAMAwQC1G8sAwQG1G8AMAsDBALVNIQDAwDVNDAMAwQF1ajgAwQD1ajwAwQC 1aj8MAsDAwDV2wMEAtXbIDAMAwQD1dsoAwQG1dsAAwQE2RQgAwQE2UQQAwQE2XKg AwQE2XWQMCIEAgACMBwDBQAgARZoAwUAIAFBIAMFACABTXgDBQAqAgFwMDcGCCsG AQUFBwEIAQH/BCgwJqAkMCICAhW6AgIxOAICMywCAj3WAgJhagICcEgCAwCYWwID AJtNMA0GCSqGSIb3DQEBCwUAA4IBAQBmVottTSo+iPF9YxS2a+RPOTHju5Uli6jJ 25cKHK31E6wkvoNHRvXHJSOeVu9SPTPwwMx9A5DYg5BHBpOHgobzj4rMO1h3Jvxo I3RlHEZbr8RkiGYjKjeD4QMJsCWZkHk1Nu+5JA8ggv5Kiaj5SIN5xDkzpf/jUApr MOgRMMAJT21LJrf1EeI/LRnTDzIeWm3o6yxsgBGbNGA+mAa3oVNA3DWx/wvBW56u Jva5DGqrrn5xVyzRKoNfrY3ZWx1RXdjArZrx5lkJB5Z7uMD41Kq2WcEelFyjqSmj gwMjzm3KX+6XV7scc0iCx/TW7ZJlDI7EO9PkijBq+ZemsXaq0nZ8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:42 2026 by rpki-client