This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer File: HPLsgl-mOB6OlP05sG6ji2PkGhA.cer (raw, json) Hash identifier: oAr/8eee5MXVVDyMsoY7AKC2/6dzs/f63XIP+cRS85w= Subject key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8080CC7C21F0E26FB362B63F6E399D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198930 IP: 91.106.128.0/18 IP: 170.133.0.0/18 IP: 185.78.60.0/22 IP: 185.161.144.0/22 IP: 2a07:c540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:80:cc:7c:21:f0:e2:6f:b3:62:b6:3f:6e:39:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:46:5f:fa:75:1a:6e:1e:8c:da:01:cf:e2: fc:e4:59:1d:b1:b8:f1:b5:14:92:97:6c:a3:75:46: 10:0c:c6:7f:30:72:9c:1c:41:a7:76:98:5c:4f:fb: 75:12:7a:43:1a:26:ac:30:b5:db:f0:9c:71:ab:59: d0:1c:40:6b:9b:87:5f:da:7d:00:c0:f5:b6:17:31: be:7f:42:e8:3a:b4:9c:6f:a5:90:ae:75:80:21:e3: 52:dd:d1:b6:80:7d:d1:49:25:5f:80:49:e3:51:e3: 15:1c:1b:3e:b3:2c:cc:89:3c:fe:73:3b:05:80:cb: 7a:4a:a9:94:31:d3:70:49:78:24:ff:32:10:52:3f: 2c:b1:87:0a:c1:5e:d2:04:3f:20:a0:78:5f:3c:7a: bb:a0:a7:ce:28:cf:e8:96:a9:6d:1c:33:39:c2:28: 82:93:9e:1c:07:14:40:f0:ea:fd:cd:4e:3b:a0:da: ef:f8:93:37:bb:39:fb:0e:f1:92:70:75:31:2a:04: 7c:a3:2f:34:47:83:1a:5f:53:84:13:ea:23:21:2c: fc:44:48:5f:92:d8:20:00:02:05:8c:e9:d5:c3:36: 1a:23:41:71:26:58:34:39:c1:2c:e3:e7:47:1c:6a: 45:16:6f:e9:9a:c8:fe:35:0c:fc:02:64:f7:f7:1c: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.128.0/18 170.133.0.0/18 185.78.60.0/22 185.161.144.0/22 IPv6: 2a07:c540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198930 Signature Algorithm: sha256WithRSAEncryption 24:37:c3:4f:a3:15:39:2d:2e:a9:49:c5:80:c3:92:fc:34:ab: ca:94:78:20:31:25:4e:71:79:5f:01:31:ac:cb:cf:0a:e3:15: 3f:a4:7a:ee:52:50:74:e5:85:75:9b:37:16:42:1f:18:c4:54: a0:62:f1:59:9e:44:40:b6:34:9b:26:de:e7:0d:f7:93:37:dd: 5c:f1:a6:63:d9:36:ac:66:3c:1e:58:20:14:5f:a6:e7:d2:80: 60:bc:58:a3:28:5d:74:cf:58:88:e3:fb:10:7e:f3:36:99:3a: 0c:6d:e0:3a:6f:45:bb:f5:3b:3c:28:e3:7b:d6:1a:80:8f:0e: 61:77:b4:9a:5b:2f:59:3f:4a:b4:4a:bd:ae:53:ce:81:5e:00: d5:c2:0b:57:5f:77:3f:b7:b0:6d:00:2e:58:2e:d8:f5:59:67: 0a:e3:ee:be:80:ad:9d:6d:14:c0:44:63:e1:26:bb:a6:97:a3: 21:ec:09:68:27:d6:54:a1:b8:d7:ed:25:16:f4:cf:48:e9:d8: 7e:4b:b0:7b:41:aa:97:e1:cd:80:52:9c:c4:19:5a:98:2c:e7: 2c:6f:3b:45:2d:60:33:df:8e:6f:ad:9b:43:cb:37:84:30:88: 23:18:36:0b:61:54:03:11:cc:1d:32:7f:42:97:3e:85:09:1f: a1:e2:a9:fa -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt8gIDMfCHw4m+zYrY/bjmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2YyZWM4MjVmYTYzODFlOGU5NGZkMzliMDZlYTM4YjYzZTQxYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJZGX/p1Gm4ejNoBz+L85Fkdsbjx tRSSl2yjdUYQDMZ/MHKcHEGndphcT/t1EnpDGiasMLXb8Jxxq1nQHEBrm4df2n0A wPW2FzG+f0LoOrScb6WQrnWAIeNS3dG2gH3RSSVfgEnjUeMVHBs+syzMiTz+czsF gMt6SqmUMdNwSXgk/zIQUj8ssYcKwV7SBD8goHhfPHq7oKfOKM/olqltHDM5wiiC k54cBxRA8Or9zU47oNrv+JM3uzn7DvGScHUxKgR8oy80R4MaX1OEE+ojISz8REhf ktggAAIFjOnVwzYaI0FxJlg0OcEs4+dHHGpFFm/pmsj+NQz8AmT39xw8cwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFBzy7IJfpjgejpT9ObBuo4tj5BoQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3L2EwMDll OC0yZGM3LTRlZjgtYTVjZS1jNGM2Mzk4M2I1MGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvYTAwOWU4 LTJkYzctNGVmOC1hNWNlLWM0YzYzOTgzYjUwYy8xL0hQTHNnbC1tT0I2T2xQMDVz RzZqaTJQa0doQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQGW2qAAwQGqoUAAwQCuU48AwQCuaGQMA0EAgAC MAcDBQMqB8VAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMJEjANBgkqhkiG9w0B AQsFAAOCAQEAJDfDT6MVOS0uqUnFgMOS/DSrypR4IDElTnF5XwExrMvPCuMVP6R6 7lJQdOWFdZs3FkIfGMRUoGLxWZ5EQLY0mybe5w33kzfdXPGmY9k2rGY8HlggFF+m 59KAYLxYoyhddM9YiOP7EH7zNpk6DG3gOm9Fu/U7PCjje9YagI8OYXe0mlsvWT9K tEq9rlPOgV4A1cILV193P7ewbQAuWC7Y9VlnCuPuvoCtnW0UwERj4Sa7ppejIewJ aCfWVKG41+0lFvTPSOnYfkuwe0Gql+HNgFKcxBlamCznLG87RS1gM9+Ob62bQ8s3 hDCIIxg2C2FUAxHMHTJ/Qpc+hQkfoeKp+g== -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:26 2026 by rpki-client