This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer File: HVS-eciStTVr8be80TE5fywjrcA.cer (raw, json) Hash identifier: FeUyT+FL9uE7Yin1PMmo5tso+RYl8ueyIEjC7AovDVk= Subject key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B4D4EC1BFC5F2D3598C2CC722740F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.248.164.0/22 IP: 2a0d:ed80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4d:4e:c1:bf:c5:f2:d3:59:8c:2c:c7:22:74:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:41:0e:d8:06:be:ec:fe:44:82:71:d8:f6:66: 83:97:b5:13:36:94:a2:f8:de:d7:8f:de:a8:32:09: e6:4a:13:71:1e:bf:13:44:2a:8c:c8:48:69:7b:33: 13:fe:9e:43:c2:f3:3c:01:b0:29:fc:fb:9e:19:72: 74:42:84:6d:b1:d1:e1:76:f6:7d:12:76:2b:48:65: 67:ac:f4:76:64:03:cd:78:12:d8:6e:0f:cf:b4:14: a5:8f:d2:6f:d4:bc:80:ee:40:75:f0:68:13:60:ca: 1f:b6:93:65:e8:ff:6b:16:81:23:1e:aa:e5:32:b4: d0:e2:75:4d:c4:19:60:3f:6d:a9:46:71:41:33:55: 9e:f2:4e:4c:1e:47:83:00:81:63:6d:22:95:98:5d: 7e:8a:5f:80:f0:83:a4:6d:1a:da:ec:ec:31:41:85: 14:e8:d5:c7:21:d0:e0:17:b1:16:0d:3b:5b:6b:be: c9:ff:d8:50:45:81:bc:51:62:6d:f5:88:1d:3d:28: ca:96:2c:4f:18:26:56:99:94:9f:02:6c:cf:b7:df: d8:94:50:5e:54:09:f2:31:1c:1c:95:32:9f:76:8c: 21:b3:8d:1a:c8:25:4f:16:ea:f1:10:65:1f:33:57: 97:8f:0b:46:fe:51:b1:4b:95:5e:e0:6b:0e:6e:5d: a7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.164.0/22 IPv6: 2a0d:ed80::/32 Signature Algorithm: sha256WithRSAEncryption 61:80:ba:18:ba:2a:25:b1:0a:b7:c6:59:bf:96:e3:e5:4d:16: cc:21:34:b9:3d:32:de:b5:87:a5:94:ce:23:c3:3e:4a:2c:8f: 0d:cb:96:2f:de:c8:17:2f:c7:82:66:c2:19:af:c7:a0:7c:38: a1:23:8c:86:15:3f:38:68:88:b2:3a:ac:e2:87:80:bc:33:b9: 3f:32:27:af:86:eb:13:8b:f3:9c:af:58:09:fc:9c:2a:89:43: cb:55:be:de:ba:95:44:a9:b7:7f:69:c1:31:18:f7:c4:21:5d: 14:e2:77:ac:23:77:9d:5b:b4:6a:5c:ae:8b:85:1e:b7:26:6c: 2e:1f:f8:1f:ef:c3:f7:71:c6:57:82:5c:65:c3:65:c8:ca:6e: 6b:a9:fc:8e:d5:a4:eb:58:c8:77:47:c6:ac:f9:e3:0a:56:1b: 5e:6b:97:2c:1a:a6:ee:65:4e:02:3c:b2:b5:5f:18:e2:fc:70: 11:03:e6:94:c2:90:2e:e3:f3:92:da:d3:ff:b9:9c:88:66:9a: af:87:eb:4e:d7:66:41:7a:87:a1:22:2f:30:82:2a:23:b9:09: b5:e2:1d:d6:6f:79:6f:70:95:ff:d6:25:9c:cf:46:d1:b8:b1: d2:3e:70:e1:23:b7:d0:56:d7:01:e7:eb:c1:73:2a:9a:a5:91: be:bd:3a:79 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W01Owb/F8tNZjCzHInQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDU0YmU3OWM4OTJiNTM1NmJmMWI3YmNkMTMxMzk3ZjJjMjNhZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UEO2Aa+7P5EgnHY9maDl7UTNpSi +N7Xj96oMgnmShNxHr8TRCqMyEhpezMT/p5DwvM8AbAp/PueGXJ0QoRtsdHhdvZ9 EnYrSGVnrPR2ZAPNeBLYbg/PtBSlj9Jv1LyA7kB18GgTYMoftpNl6P9rFoEjHqrl MrTQ4nVNxBlgP22pRnFBM1We8k5MHkeDAIFjbSKVmF1+il+A8IOkbRra7OwxQYUU 6NXHIdDgF7EWDTtba77J/9hQRYG8UWJt9YgdPSjKlixPGCZWmZSfAmzPt9/YlFBe VAnyMRwclTKfdowhs40ayCVPFurxEGUfM1eXjwtG/lGxS5Ve4GsObl2npwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFB1UvnnIkrU1a/G3vNExOX8sI63AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzY3NzY5 Yi04NWE1LTRhMGEtODg5Yi04MDJiNjM3NmY3NDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNjc3Njli LTg1YTUtNGEwYS04ODliLTgwMmI2Mzc2Zjc0My8xL0hWUy1lY2lTdFRWcjhiZTgw VEU1Znl3anJjQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufikMA0EAgACMAcDBQAqDe2AMA0GCSqGSIb3 DQEBCwUAA4IBAQBhgLoYuiolsQq3xlm/luPlTRbMITS5PTLetYellM4jwz5KLI8N y5Yv3sgXL8eCZsIZr8egfDihI4yGFT84aIiyOqzih4C8M7k/MievhusTi/Ocr1gJ /JwqiUPLVb7eupVEqbd/acExGPfEIV0U4nesI3edW7RqXK6LhR63JmwuH/gf78P3 ccZXglxlw2XIym5rqfyO1aTrWMh3R8as+eMKVhtea5csGqbuZU4CPLK1Xxji/HAR A+aUwpAu4/OS2tP/uZyIZpqvh+tO12ZBeoehIi8wgiojuQm14h3Wb3lvcJX/1iWc z0bRuLHSPnDhI7fQVtcB5+vBcyqapZG+vTp5 -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:41 2026 by rpki-client