This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer File: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer (raw, json) Hash identifier: q5+KiLpx8FeoNMIFddRkwLsF6SeHtAtQj2Vve9oIJT4= Subject key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14DA2B216ADA1C5CAA87F19B7F9B22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.41.8.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:da:2b:21:6a:da:1c:5c:aa:87:f1:9b:7f:9b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d43453955846773b5256e4279a03d5a3b2b5963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:58:c4:21:ae:48:7b:54:b2:86:21:d7:77: 0a:72:0b:39:37:28:b3:56:5b:79:16:0c:26:20:be: 78:15:5f:9f:93:ce:27:b5:49:56:b6:81:6d:a8:a0: 5d:e6:6f:c2:e8:62:28:2f:39:b5:5d:0d:0a:d8:29: 40:2c:e1:73:f2:e6:14:de:03:c6:48:13:30:9c:df: 0c:11:fc:0e:17:63:d6:40:4c:f2:d6:e7:33:77:a6: 81:35:8c:d9:b2:f9:87:6e:76:f6:fe:79:3a:d4:75: 36:86:62:ef:14:f2:fa:1f:1b:48:26:71:90:83:1e: 67:42:4c:cd:ec:e6:e1:42:18:70:c1:81:10:38:e2: 71:27:97:9a:ae:45:5d:f6:a1:e8:7a:65:99:15:36: 78:86:cb:c8:87:e6:40:1f:ef:92:fd:e7:11:68:53: fb:6b:27:59:c9:d4:5f:68:7b:02:a0:5b:86:8f:58: c2:17:28:21:4c:e7:20:d7:a4:7e:81:6f:60:bb:1d: be:25:05:f1:7a:b9:b6:0c:1f:ca:90:2a:06:42:a3: a5:ae:cb:d3:fc:b4:ae:6a:54:e6:3c:18:71:ee:6e: 0e:72:51:98:06:36:7a:5b:c4:a8:f3:ad:c4:05:cf: fa:cb:78:4f:20:28:a0:d2:30:15:e0:41:77:fd:34: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.8.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:a6:a5:15:b4:4c:72:6e:1a:be:3d:90:64:8e:1f:ce:bf:81: 15:0b:06:de:1e:56:b5:71:76:38:eb:5e:84:22:52:8c:1a:05: 50:73:fa:d3:bf:3f:3f:4e:c8:59:7c:06:84:76:2a:c2:b8:dd: ed:3d:d8:60:8a:64:c6:d7:a9:c2:57:cf:fe:8d:ac:38:c4:b3: c2:74:61:00:77:ed:1b:f6:b1:97:77:2e:dc:61:0a:ac:4f:2b: ef:1c:c4:48:ba:d3:71:e6:58:7d:84:6a:ec:52:e8:15:4c:4a: cc:4f:ab:ea:f1:e1:8b:b5:6b:6c:3f:e6:5a:b6:21:41:98:48: 87:9a:41:c8:1a:68:02:cc:36:5e:80:af:69:e9:2c:9f:c7:a2: 59:81:58:d3:a3:5d:8e:4d:3f:36:3a:d1:fc:e4:bc:f4:a8:0d: 61:78:40:94:7e:b9:ef:b9:19:dc:a8:e6:53:71:1f:e8:98:89: e3:50:69:81:04:de:d7:56:a4:12:1d:89:0f:06:5b:22:c7:bf: 65:5b:86:c1:1f:ef:58:33:68:71:0f:c2:71:90:3f:da:52:ed: d3:98:ff:c7:d6:71:33:06:b4:a9:c4:c8:3f:de:49:e7:f0:0b: 7e:7b:81:4c:6e:f6:1c:ff:0e:4c:b5:aa:0b:e7:4a:43:82:3c: af:38:16:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FNorIWraHFyqh/Gbf5siMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDQzNDUzOTU1ODQ2NzczYjUyNTZlNDI3OWEwM2Q1YTNiMmI1OTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4NYxCGuSHtUsoYh13cKcgs5Nyiz Vlt5FgwmIL54FV+fk84ntUlWtoFtqKBd5m/C6GIoLzm1XQ0K2ClALOFz8uYU3gPG SBMwnN8MEfwOF2PWQEzy1uczd6aBNYzZsvmHbnb2/nk61HU2hmLvFPL6HxtIJnGQ gx5nQkzN7ObhQhhwwYEQOOJxJ5earkVd9qHoemWZFTZ4hsvIh+ZAH++S/ecRaFP7 aydZydRfaHsCoFuGj1jCFyghTOcg16R+gW9gux2+JQXxerm2DB/KkCoGQqOlrsvT /LSualTmPBhx7m4OclGYBjZ6W8So863EBc/6y3hPICig0jAV4EF3/TT5LwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFB1DRTlVhGdztSVuQnmgPVo7K1ljMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzU5MTRh Zi0zYWI4LTQxODItYThhYi1jMmM5OGQyYjZhNjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvNTkxNGFm LTNhYjgtNDE4Mi1hOGFiLWMyYzk4ZDJiNmE2NS8xL0hVTkZPVldFWjNPMUpXNUNl YUE5V2pzcldXTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwSkIMA0GCSqGSIb3DQEBCwUAA4IBAQCcpqUV tExybhq+PZBkjh/Ov4EVCwbeHla1cXY4616EIlKMGgVQc/rTvz8/TshZfAaEdirC uN3tPdhgimTG16nCV8/+jaw4xLPCdGEAd+0b9rGXdy7cYQqsTyvvHMRIutNx5lh9 hGrsUugVTErMT6vq8eGLtWtsP+ZatiFBmEiHmkHIGmgCzDZegK9p6Syfx6JZgVjT o12OTT82OtH85Lz0qA1heECUfrnvuRncqOZTcR/omInjUGmBBN7XVqQSHYkPBlsi x79lW4bBH+9YM2hxD8JxkD/aUu3TmP/H1nEzBrSpxMg/3knn8At+e4FMbvYc/w5M taoL50pDgjyvOBZd -----END CERTIFICATE-----Generated at Mon Jan 26 04:45:04 2026 by rpki-client