This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer (raw, json) Hash identifier: RhzngGt4JrUaeSCWME+ELwUwKxRjhzvI2F/2OO2ImtA= Subject key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A31E4CB49896F71A85B5CC9EAB4E45 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.125.32.0/22 IP: 2a06:b780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1e:4c:b4:98:96:f7:1a:85:b5:cc:9e:ab:4e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d1e354362cb9224c016dac944e3d9d49909b17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:9a:6a:f4:ad:47:2c:24:13:ca:28:f7:39: c8:f7:87:09:30:aa:a7:15:f7:39:a1:0f:d3:26:23: 85:5e:ac:e6:1d:fe:d3:06:f8:15:e6:43:2e:25:90: 10:73:4a:a7:73:c6:d1:af:ff:19:83:79:1b:8a:ba: 60:35:95:9c:ba:e6:7b:e6:14:e3:a6:e7:5a:a6:65: 8e:30:c0:87:ea:dc:51:86:93:51:72:67:60:92:fe: 19:46:21:a3:ce:4c:6e:49:4b:54:47:36:17:b6:16: bc:38:65:8f:d2:69:b0:d1:5c:0f:a2:50:5b:0d:a5: 81:d6:c4:a4:2f:27:28:5f:e8:c8:50:81:7c:cc:96: 16:77:e8:b6:58:b3:45:d9:7a:01:18:f5:76:a6:66: f5:a0:33:67:a8:ac:46:7c:d7:0c:82:a0:90:64:b0: c5:49:04:7e:9e:13:f2:44:68:f9:d2:e8:d1:69:7e: b7:30:4f:e7:8c:ac:5d:02:eb:59:c0:a5:e9:1d:a8: aa:6b:dc:65:11:38:00:4b:5b:75:06:19:a0:6d:3d: 75:9c:6c:0f:eb:e9:69:20:16:e1:cb:c1:c4:c5:a2: 44:2e:2a:b1:1c:4b:60:55:f7:2b:2a:b3:ef:bb:a1: 6c:28:77:b9:60:6c:6f:5f:cc:6f:10:37:b4:b0:55: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.32.0/22 IPv6: 2a06:b780::/29 Signature Algorithm: sha256WithRSAEncryption 3a:b3:22:70:54:55:86:9e:95:5f:92:94:25:67:ab:c0:2f:b1: 41:18:c3:d9:85:1e:95:9b:39:71:82:2e:73:17:ed:80:58:dc: 7d:0f:8c:3a:17:06:2f:bc:75:1f:cc:25:72:74:56:86:cc:f1: b5:0e:df:6c:2a:5c:aa:b5:e7:50:6a:b9:82:d4:27:3a:72:af: 25:1c:5e:ac:6f:70:60:c0:d6:c1:f1:62:b7:f6:0a:84:67:44: d6:bc:30:57:b7:b3:71:84:f9:6a:5d:69:c1:f4:1d:06:ab:8a: 26:ed:92:98:87:09:cf:4c:9c:c6:a3:bc:ee:8d:34:b5:9b:9f: 2f:62:49:b6:68:b3:37:d0:bc:05:25:d0:60:f8:d4:c9:82:1f: bb:87:b5:28:75:70:06:55:06:1c:b7:27:e1:b8:6c:a6:7e:15: ae:da:79:96:d8:fe:b0:8d:93:be:4a:4e:8a:49:dc:e1:6f:97: 0f:90:c3:35:96:75:84:e2:38:08:ca:18:2f:19:80:c0:56:fb: de:9a:e9:cd:e6:3b:a4:f6:6a:17:58:f2:5e:ed:3d:dd:7b:7f: 68:20:21:ba:81:fe:89:5e:d3:68:39:fb:3c:05:7e:c9:f4:03: b2:64:1f:fe:5e:87:a4:14:9d:0b:53:bd:3b:02:bd:4f:c4:74: 8e:5b:69:17 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4ox5MtJiW9xqFtcyeq05FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFlMzU0MzYyY2I5MjI0YzAxNmRhYzk0NGUzZDlkNDk5MDliMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVmaavStRywkE8oo9znI94cJMKqn Ffc5oQ/TJiOFXqzmHf7TBvgV5kMuJZAQc0qnc8bRr/8Zg3kbirpgNZWcuuZ75hTj pudapmWOMMCH6txRhpNRcmdgkv4ZRiGjzkxuSUtURzYXtha8OGWP0mmw0VwPolBb DaWB1sSkLycoX+jIUIF8zJYWd+i2WLNF2XoBGPV2pmb1oDNnqKxGfNcMgqCQZLDF SQR+nhPyRGj50ujRaX63ME/njKxdAutZwKXpHaiqa9xlETgAS1t1BhmgbT11nGwP 6+lpIBbhy8HExaJELiqxHEtgVfcrKrPvu6FsKHe5YGxvX8xvEDe0sFVvzwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFB0eNUNiy5IkwBbayUTj2dSZCbF/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzI4MmIx OS02OGI5LTRlZjMtYWQzOS02ZWM4YzgxZmRjM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvMjgyYjE5 LTY4YjktNGVmMy1hZDM5LTZlYzhjODFmZGMzZi8xL0hSNDFRMkxMa2lUQUZ0ckpS T1BaMUprSnNYOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuX0gMA0EAgACMAcDBQMqBreAMA0GCSqGSIb3 DQEBCwUAA4IBAQA6syJwVFWGnpVfkpQlZ6vAL7FBGMPZhR6Vmzlxgi5zF+2AWNx9 D4w6FwYvvHUfzCVydFaGzPG1Dt9sKlyqtedQarmC1Cc6cq8lHF6sb3BgwNbB8WK3 9gqEZ0TWvDBXt7NxhPlqXWnB9B0Gq4om7ZKYhwnPTJzGo7zujTS1m58vYkm2aLM3 0LwFJdBg+NTJgh+7h7UodXAGVQYctyfhuGymfhWu2nmW2P6wjZO+Sk6KSdzhb5cP kMM1lnWE4jgIyhgvGYDAVvvemunN5juk9moXWPJe7T3de39oICG6gf6JXtNoOfs8 BX7J9AOyZB/+XoekFJ0LU707Ar1PxHSOW2kX -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:14 2026 by rpki-client