This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer (raw, json) Hash identifier: dMYLCmvtbC+Qq1YEwWzd8dGFGbWcbpQuPKYZidU1KE4= Subject key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F36970AC1D357D2D737C4B8010316 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212223 IP: 37.72.110.0/24 IP: 185.217.63.0/24 IP: 2a05:7040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:36:97:0a:c1:d3:57:d2:d7:37:c4:b8:01:03:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:84:2e:7a:be:82:7f:62:23:ea:6b:82:40:5a: 3f:06:a5:b5:3f:21:98:94:a6:53:6a:30:77:3a:d3: df:ba:7b:0a:b2:12:6a:89:63:20:78:ce:03:6b:95: fc:66:31:f9:0a:35:4b:e3:75:6f:97:cc:15:f3:70: 2d:5c:25:3f:db:45:7e:7c:68:62:7f:71:27:5a:48: 24:3d:78:69:9b:4c:25:0a:d7:e6:63:e4:f2:77:83: d4:b4:e5:e4:37:fc:3b:b1:82:a2:63:62:c7:3b:79: 29:ed:3a:3f:51:e1:9c:33:b8:6e:ce:d5:88:3a:b2: 5a:6e:67:8f:d4:ab:ce:30:5c:d1:9d:d3:29:c8:8a: b9:b1:b8:5a:9d:2b:79:b8:1d:85:31:b8:a2:7b:32: 42:db:89:e9:15:65:bc:14:bd:70:9b:93:54:37:0f: 9b:14:95:35:ee:c5:06:40:d8:01:99:ab:cf:17:e4: ac:d7:32:04:30:f0:2e:e4:e8:f0:bc:8c:aa:56:f7: 25:89:32:c3:88:20:30:9b:08:a3:30:35:cd:9a:ea: 61:80:ea:f2:67:bc:03:fb:55:33:21:02:98:7b:52: fd:3a:3b:fd:e4:2a:96:0b:a7:4d:5e:26:ab:8e:34: 21:18:f7:c9:fe:d0:5e:d1:aa:c4:81:55:ba:ec:d3: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.110.0/24 185.217.63.0/24 IPv6: 2a05:7040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212223 Signature Algorithm: sha256WithRSAEncryption 66:01:80:87:ed:f0:73:c4:a7:47:79:04:11:f6:12:ff:78:16: e4:bb:6f:a9:2b:ea:34:75:a3:96:f2:75:e3:23:7c:83:68:95: 5e:84:03:2a:ab:74:98:8f:c7:b2:d4:32:b6:94:34:3d:51:be: 4a:c7:54:56:6e:74:36:52:c7:3a:cf:3e:c1:46:7f:17:65:ab: 94:44:d1:f3:32:ba:ee:77:f6:51:47:36:3d:24:64:de:55:bf: 8f:48:5c:ce:3b:b7:4f:72:66:ec:c5:74:c8:b9:03:6d:92:04: c0:88:55:73:72:46:1e:b3:40:62:d2:9e:58:fe:2a:f1:45:fa: 99:9a:69:8c:6c:13:7d:1d:34:fb:79:19:98:e6:9f:c3:a3:9b: 4a:69:8c:c4:3a:30:2c:8d:b5:04:28:e8:71:1d:a5:df:c9:23: e4:2a:e3:5c:12:71:18:1e:5d:4d:d2:6e:52:46:c1:3f:1c:21: 21:74:75:ed:34:d1:f2:80:82:1d:d3:93:f3:9c:62:c4:80:f0: 3a:bf:a6:6a:2f:80:27:0b:5c:26:e4:d6:8c:f0:75:0c:49:40: 0a:cd:a6:fb:99:02:2c:93:0f:6a:a7:24:f7:84:f5:55:5a:6b: 6d:b4:9b:8d:da:c0:50:60:6e:b8:3d:7c:54:d1:c2:27:42:24: 66:ca:b4:6f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fzaXCsHTV9LXN8S4AQMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDA0YWYyOGY4ZjdhYTg1OGUyN2Q4ZTJjNzYxMTRjNmZmNDliYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34Quer6Cf2Ij6muCQFo/BqW1PyGY lKZTajB3OtPfunsKshJqiWMgeM4Da5X8ZjH5CjVL43Vvl8wV83AtXCU/20V+fGhi f3EnWkgkPXhpm0wlCtfmY+Tyd4PUtOXkN/w7sYKiY2LHO3kp7To/UeGcM7huztWI OrJabmeP1KvOMFzRndMpyIq5sbhanSt5uB2FMbiiezJC24npFWW8FL1wm5NUNw+b FJU17sUGQNgBmavPF+Ss1zIEMPAu5OjwvIyqVvcliTLDiCAwmwijMDXNmuphgOry Z7wD+1UzIQKYe1L9Ojv95CqWC6dNXiarjjQhGPfJ/tBe0arEgVW67NOKgwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFB0Eryj496qFjifY4sdhFMb/SbrOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2E2ZDQw MC04YzQzLTQ0Y2MtOTM1NS03MGI0ZTBiM2ZjOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvYTZkNDAw LThjNDMtNDRjYy05MzU1LTcwYjRlMGIzZmM5ZS8xL0hRU3ZLUGozcW9XT0o5aml4 MkVVeHY5SnVzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAJUhuAwQAudk/MA0EAgACMAcDBQMqBXBAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8/zANBgkqhkiG9w0BAQsFAAOCAQEAZgGA h+3wc8SnR3kEEfYS/3gW5LtvqSvqNHWjlvJ14yN8g2iVXoQDKqt0mI/HstQytpQ0 PVG+SsdUVm50NlLHOs8+wUZ/F2WrlETR8zK67nf2UUc2PSRk3lW/j0hczju3T3Jm 7MV0yLkDbZIEwIhVc3JGHrNAYtKeWP4q8UX6mZppjGwTfR00+3kZmOafw6ObSmmM xDowLI21BCjocR2l38kj5CrjXBJxGB5dTdJuUkbBPxwhIXR17TTR8oCCHdOT85xi xIDwOr+mai+AJwtcJuTWjPB1DElACs2m+5kCLJMPaqck94T1VVprbbSbjdrAUGBu uD18VNHCJ0IkZsq0bw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:53 2026 by rpki-client