This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer File: H_LPGmIwzWLLPKihvB1KS7QzfB0.cer (raw, json) Hash identifier: iQ+8U5g+0Tfe1UZ0gBGgFQpN8cMqBYbEGnIAD6Opd2s= Subject key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDFB569757EAE8453A6EB7F027918E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41045 IP: 185.198.20.0/22 IP: 195.246.112.0/24 IP: 2a13:bf80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fb:56:97:57:ea:e8:45:3a:6e:b7:f0:27:91:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:01:fe:c0:92:07:da:06:c2:b0:e5:4f:8e: 63:14:6d:42:18:6e:ba:48:90:f9:6e:75:61:18:a0: 2d:7e:90:49:a1:69:71:41:ed:d3:1c:e4:3a:3e:41: 62:eb:ae:77:f2:89:65:4c:ff:b5:62:e4:1c:54:32: 8f:86:fa:e7:d4:cc:f6:f7:4d:5d:ba:f1:8b:6e:cb: 39:d1:5e:59:77:37:19:81:ab:7b:59:27:c1:ed:87: 83:1e:9f:94:39:4b:69:52:5f:2c:f7:de:d7:5d:58: a4:c2:0e:2a:d3:64:3f:c5:66:3d:36:f8:d6:8c:ed: ba:94:1e:f1:06:17:3a:b2:20:6c:9c:bd:75:74:05: 9b:57:bc:50:2f:b3:d7:e6:91:1c:45:36:4c:70:22: 25:32:9e:23:0a:05:a4:01:8d:03:d3:4e:d3:09:b4: 95:bb:14:67:f9:14:cb:1f:f5:c7:75:e6:c8:4b:e2: db:04:93:b8:47:9f:80:f8:60:d7:0c:ad:64:80:ed: e9:8d:85:b9:04:f6:eb:53:c5:42:a6:1c:4c:05:db: fb:06:9c:18:6e:35:30:be:ea:75:4e:91:62:62:37: 9c:50:ec:19:ed:d1:98:d5:7c:29:98:06:9b:e9:44: 06:4d:0e:17:18:0f:66:17:50:0b:41:47:75:44:b4: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.20.0/22 195.246.112.0/24 IPv6: 2a13:bf80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41045 Signature Algorithm: sha256WithRSAEncryption 2c:09:03:72:f4:5a:8f:32:59:2c:21:07:06:39:ff:44:a6:17: 28:da:38:1d:5b:2b:f4:18:ec:26:a5:43:19:44:54:a1:ee:b8: ed:4d:98:f0:9b:09:3a:5d:d8:d3:2b:48:47:1c:46:21:70:a6: b1:b2:8b:e0:46:5f:84:9b:95:67:1d:e8:a9:93:cb:74:13:7f: e4:1c:cb:3e:a2:e1:d6:73:8d:99:42:63:10:59:cc:cd:69:67: 34:3d:f0:3d:79:b8:4b:0d:10:c6:4d:1b:e4:c5:f7:b0:fc:40: 19:d3:b4:2f:6e:4e:de:09:c6:00:07:23:12:79:cc:19:52:7b: ba:b8:85:ac:68:41:bb:ef:81:12:49:f6:b5:56:5b:8f:80:9d: fc:8f:1d:9f:7d:1d:38:2c:23:7f:83:63:0a:47:c9:98:cc:f8: 07:50:e5:1f:30:b7:1a:ea:de:c1:27:76:aa:a9:18:52:4d:30: e8:9b:6d:65:d0:04:34:3f:6d:c1:40:d3:36:23:26:75:3a:b4: 83:20:02:dc:7c:40:16:15:1b:fd:c3:39:26:c7:27:d3:76:6e: 6c:e1:49:0c:5d:66:e2:df:67:1f:2c:6a:ca:d4:2f:02:c3:78: 10:fe:93:67:2b:dc:87:20:62:91:85:60:f8:91:45:d4:5c:7f: c1:68:a5:ce -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87ftWl1fq6EU6brfwJ5GOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmYyY2YxYTYyMzBjZDYyY2IzY2E4YTFiYzFkNGE0YmI0MzM3YzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEIB/sCSB9oGwrDlT45jFG1CGG66 SJD5bnVhGKAtfpBJoWlxQe3THOQ6PkFi66538ollTP+1YuQcVDKPhvrn1Mz2901d uvGLbss50V5ZdzcZgat7WSfB7YeDHp+UOUtpUl8s997XXVikwg4q02Q/xWY9NvjW jO26lB7xBhc6siBsnL11dAWbV7xQL7PX5pEcRTZMcCIlMp4jCgWkAY0D007TCbSV uxRn+RTLH/XHdebIS+LbBJO4R5+A+GDXDK1kgO3pjYW5BPbrU8VCphxMBdv7BpwY bjUwvup1TpFiYjecUOwZ7dGY1XwpmAab6UQGTQ4XGA9mF1ALQUd1RLRPWwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFB/yzxpiMM1iyzyoobwdSku0M3wdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzZhNDhh Ny0wYzAxLTRhY2EtYjQzMS02Y2VkY2YyMzQ5NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvNmE0OGE3 LTBjMDEtNGFjYS1iNDMxLTZjZWRjZjIzNDk3NS8xL0hfTFBHbUl3eldMTFBLaWh2 QjFLUzdRemZCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCucYUAwQAw/ZwMA0EAgACMAcDBQMqE7+AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCgVTANBgkqhkiG9w0BAQsFAAOCAQEALAkD cvRajzJZLCEHBjn/RKYXKNo4HVsr9BjsJqVDGURUoe647U2Y8JsJOl3Y0ytIRxxG IXCmsbKL4EZfhJuVZx3oqZPLdBN/5BzLPqLh1nONmUJjEFnMzWlnND3wPXm4Sw0Q xk0b5MX3sPxAGdO0L25O3gnGAAcjEnnMGVJ7uriFrGhBu++BEkn2tVZbj4Cd/I8d n30dOCwjf4NjCkfJmMz4B1DlHzC3GurewSd2qqkYUk0w6JttZdAEND9twUDTNiMm dTq0gyAC3HxAFhUb/cM5Jscn03ZubOFJDF1m4t9nHyxqytQvAsN4EP6TZyvchyBi kYVg+JFF1Fx/wWilzg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:54 2026 by rpki-client