This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer File: HQSvKPj3qoWOJ9jix2EUxv9Jus4.cer (raw, json) Hash identifier: GdtycoygRWDYjvzHKJAgPYkjKff8KJqzGerYiEGIgP0= Subject key identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ACA82C96D3179153F996156F2EFC49E11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 12:49:20 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 212223 IP: 37.72.110.0/24 IP: 185.217.63.0/24 IP: 2a05:7040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:82:c9:6d:31:79:15:3f:99:61:56:f2:ef:c4:9e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 12:49:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d04af28f8f7aa858e27d8e2c76114c6ff49bace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:84:2e:7a:be:82:7f:62:23:ea:6b:82:40:5a: 3f:06:a5:b5:3f:21:98:94:a6:53:6a:30:77:3a:d3: df:ba:7b:0a:b2:12:6a:89:63:20:78:ce:03:6b:95: fc:66:31:f9:0a:35:4b:e3:75:6f:97:cc:15:f3:70: 2d:5c:25:3f:db:45:7e:7c:68:62:7f:71:27:5a:48: 24:3d:78:69:9b:4c:25:0a:d7:e6:63:e4:f2:77:83: d4:b4:e5:e4:37:fc:3b:b1:82:a2:63:62:c7:3b:79: 29:ed:3a:3f:51:e1:9c:33:b8:6e:ce:d5:88:3a:b2: 5a:6e:67:8f:d4:ab:ce:30:5c:d1:9d:d3:29:c8:8a: b9:b1:b8:5a:9d:2b:79:b8:1d:85:31:b8:a2:7b:32: 42:db:89:e9:15:65:bc:14:bd:70:9b:93:54:37:0f: 9b:14:95:35:ee:c5:06:40:d8:01:99:ab:cf:17:e4: ac:d7:32:04:30:f0:2e:e4:e8:f0:bc:8c:aa:56:f7: 25:89:32:c3:88:20:30:9b:08:a3:30:35:cd:9a:ea: 61:80:ea:f2:67:bc:03:fb:55:33:21:02:98:7b:52: fd:3a:3b:fd:e4:2a:96:0b:a7:4d:5e:26:ab:8e:34: 21:18:f7:c9:fe:d0:5e:d1:aa:c4:81:55:ba:ec:d3: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:04:AF:28:F8:F7:AA:85:8E:27:D8:E2:C7:61:14:C6:FF:49:BA:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a6d400-8c43-44cc-9355-70b4e0b3fc9e/1/HQSvKPj3qoWOJ9jix2EUxv9Jus4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.110.0/24 185.217.63.0/24 IPv6: 2a05:7040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212223 Signature Algorithm: sha256WithRSAEncryption 4e:ad:9a:50:10:17:e2:25:71:dd:41:c8:9c:f2:04:97:f6:09: 1d:91:96:9a:8c:4f:bd:82:cb:f8:c0:27:9c:88:24:ec:30:58: c5:b4:39:ce:bc:74:15:c5:61:8e:ed:52:8a:55:e2:78:92:8f: 60:63:04:2e:2e:4d:b7:d7:6c:56:49:f4:db:5d:6b:54:8e:d7: 98:1a:84:4a:05:2f:56:27:34:7c:82:96:1d:96:0c:93:07:0c: ed:38:3f:4a:1c:56:f6:26:4d:60:fb:8a:c3:53:21:b5:c7:a7: d3:9e:84:c7:85:bd:d4:0b:fe:14:59:2f:e7:91:29:18:81:49: 11:8f:87:00:d4:13:9c:40:bb:dd:39:c8:20:49:83:90:e9:e0: 51:f1:75:80:f9:c5:83:fc:02:ac:14:33:e6:39:ff:d1:0f:5b: 01:93:65:7c:4d:e6:11:78:cb:a9:39:99:46:12:0e:f8:8d:df: b2:07:0c:25:7b:0f:c9:ec:13:92:f7:8f:ac:a0:e5:e9:71:4f: 3d:cb:df:d5:53:ad:f0:da:a6:c5:19:25:11:33:2d:8e:c0:9f: fe:eb:e5:b2:13:1f:a5:67:e8:f5:37:b1:b1:1b:cb:b6:4a:54: 44:55:2c:39:f7:82:2b:b1:9e:71:d0:95:2e:ff:1c:45:3d:80: 51:9e:e7:53 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZrKgsltMXkVP5lhVvLvxJ4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MTI0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDA0YWYyOGY4ZjdhYTg1OGUyN2Q4ZTJjNzYxMTRjNmZmNDliYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34Quer6Cf2Ij6muCQFo/BqW1PyGY lKZTajB3OtPfunsKshJqiWMgeM4Da5X8ZjH5CjVL43Vvl8wV83AtXCU/20V+fGhi f3EnWkgkPXhpm0wlCtfmY+Tyd4PUtOXkN/w7sYKiY2LHO3kp7To/UeGcM7huztWI OrJabmeP1KvOMFzRndMpyIq5sbhanSt5uB2FMbiiezJC24npFWW8FL1wm5NUNw+b FJU17sUGQNgBmavPF+Ss1zIEMPAu5OjwvIyqVvcliTLDiCAwmwijMDXNmuphgOry Z7wD+1UzIQKYe1L9Ojv95CqWC6dNXiarjjQhGPfJ/tBe0arEgVW67NOKgwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFB0Eryj496qFjifY4sdhFMb/SbrOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2E2ZDQw MC04YzQzLTQ0Y2MtOTM1NS03MGI0ZTBiM2ZjOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvYTZkNDAw LThjNDMtNDRjYy05MzU1LTcwYjRlMGIzZmM5ZS8xL0hRU3ZLUGozcW9XT0o5aml4 MkVVeHY5SnVzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAJUhuAwQAudk/MA0EAgACMAcDBQMqBXBAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8/zANBgkqhkiG9w0BAQsFAAOCAQEATq2a UBAX4iVx3UHInPIEl/YJHZGWmoxPvYLL+MAnnIgk7DBYxbQ5zrx0FcVhju1SilXi eJKPYGMELi5Nt9dsVkn0211rVI7XmBqESgUvVic0fIKWHZYMkwcM7Tg/ShxW9iZN YPuKw1Mhtcen056Ex4W91Av+FFkv55EpGIFJEY+HANQTnEC73TnIIEmDkOngUfF1 gPnFg/wCrBQz5jn/0Q9bAZNlfE3mEXjLqTmZRhIO+I3fsgcMJXsPyewTkvePrKDl 6XFPPcvf1VOt8NqmxRklETMtjsCf/uvlshMfpWfo9TexsRvLtkpURFUsOfeCK7Ge cdCVLv8cRT2AUZ7nUw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:41:43 2025 by rpki-client