This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer (raw, json) Hash identifier: SOUKby9briiOGTg4XRrodoJIOKsCdaeRW//aS9yqCMg= Subject key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154262A969430C244817B3583154B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39364 IP: 185.225.80.0/22 IP: 2a0c:d080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:42:62:a9:69:43:0c:24:48:17:b3:58:31:54:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dde7463ed8498020dd392322459d2cf40f226b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:01:ab:ab:cf:c6:8b:f0:7b:37:ff:38:8a: 98:8c:cd:98:32:e2:82:66:ea:c7:d4:74:23:37:9c: 77:d0:37:81:d4:d7:6a:b2:50:f2:bb:fd:12:ec:d0: f4:2c:93:65:f4:75:e3:09:1f:1f:22:0f:d3:47:f8: c7:22:47:62:be:e2:e3:05:af:32:a6:53:16:c8:6e: 93:0c:f4:4e:1c:59:a6:66:15:fe:39:0f:3a:85:39: b1:3f:2a:c2:f3:26:c1:a0:bb:88:f8:82:14:71:84: 09:6e:8e:3c:ba:d9:b2:c9:c3:e2:ac:4d:16:30:3b: b0:63:83:ab:2b:a4:72:1c:d9:53:80:75:f2:7f:a6: 37:2c:9f:7b:3f:96:b9:77:5a:ff:96:80:8d:0f:82: 86:cb:a7:8b:11:72:f8:e9:58:c0:b8:28:4b:d5:c6: 1d:2d:c5:66:ed:53:19:71:c1:fd:07:45:71:2e:9b: e3:46:40:f4:f7:fa:c6:db:9c:ea:ad:f4:57:88:28: e5:02:5f:7d:c5:6f:77:7b:05:1c:c2:1e:18:a6:23: 49:fc:af:87:75:82:7d:a0:34:3b:b2:2e:9e:7b:6b: 3d:5b:87:93:bd:ca:ce:8a:92:4a:58:78:9a:97:0e: a2:f8:30:9d:02:76:ce:ea:7e:32:58:bc:08:08:9a: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.80.0/22 IPv6: 2a0c:d080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39364 Signature Algorithm: sha256WithRSAEncryption 38:d8:8f:ec:40:ca:f1:c1:43:02:a9:06:aa:0f:ea:68:88:89: 68:5c:d0:fd:3f:a0:ed:33:04:d3:a4:ee:f0:80:30:e4:a6:ce: 8e:b2:4b:85:b7:6f:5d:16:a1:95:bb:44:39:c0:e7:3d:40:3a: be:08:84:77:fe:86:f5:94:ed:bb:f8:5b:69:ca:af:1c:73:c6: 7f:61:32:02:d8:6f:d6:b0:06:e1:cd:6c:f2:9d:84:b5:b9:93: f2:67:dc:91:d5:07:78:97:0c:60:b1:fa:85:c7:63:58:dc:94: de:4d:b9:09:21:4b:10:c9:2a:c8:f3:3d:4a:3a:aa:f0:4d:d3: 56:02:10:5b:bd:4d:53:b1:e8:b0:54:48:f7:33:e5:70:8a:d3: 99:ed:d5:84:85:59:8c:d1:f9:89:ca:51:2b:90:ab:2c:24:5d: 97:d0:9b:06:ee:55:3a:8e:7f:1e:da:e4:14:e2:3c:71:ac:c3: ba:72:2c:7b:74:83:87:47:5e:8f:97:43:04:15:b9:4a:b0:53: 19:ab:d2:b8:66:d8:28:e8:ee:94:00:8e:6b:d2:10:32:41:f1: d3:bc:d9:20:34:18:df:f2:8f:af:41:a3:2e:fe:34:8d:77:1d: 42:5f:9e:7d:93:4c:ae:b1:e3:2c:5f:ad:79:b1:ef:55:ae:5c: fb:3c:ad:08 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FUJiqWlDDCRIF7NYMVSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGRlNzQ2M2VkODQ5ODAyMGRkMzkyMzIyNDU5ZDJjZjQwZjIyNmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrUBq6vPxovwezf/OIqYjM2YMuKC ZurH1HQjN5x30DeB1NdqslDyu/0S7ND0LJNl9HXjCR8fIg/TR/jHIkdivuLjBa8y plMWyG6TDPROHFmmZhX+OQ86hTmxPyrC8ybBoLuI+IIUcYQJbo48utmyycPirE0W MDuwY4OrK6RyHNlTgHXyf6Y3LJ97P5a5d1r/loCND4KGy6eLEXL46VjAuChL1cYd LcVm7VMZccH9B0VxLpvjRkD09/rG25zqrfRXiCjlAl99xW93ewUcwh4YpiNJ/K+H dYJ9oDQ7si6ee2s9W4eTvcrOipJKWHialw6i+DCdAnbO6n4yWLwICJrlVQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB3edGPthJgCDdOSMiRZ0s9A8iayMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzU1Mjgz YS0wOWEwLTRkYTgtYTk2OC00M2M3ZjAyN2M2ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNTUyODNh LTA5YTAtNGRhOC1hOTY4LTQzYzdmMDI3YzZlNC8xL0hkNTBZLTJFbUFJTjA1SXlK Rm5TejBEeUpySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueFQMA0EAgACMAcDBQAqDNCAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCZxDANBgkqhkiG9w0BAQsFAAOCAQEAONiP7EDK8cFD AqkGqg/qaIiJaFzQ/T+g7TME06Tu8IAw5KbOjrJLhbdvXRahlbtEOcDnPUA6vgiE d/6G9ZTtu/hbacqvHHPGf2EyAthv1rAG4c1s8p2EtbmT8mfckdUHeJcMYLH6hcdj WNyU3k25CSFLEMkqyPM9Sjqq8E3TVgIQW71NU7HosFRI9zPlcIrTme3VhIVZjNH5 icpRK5CrLCRdl9CbBu5VOo5/HtrkFOI8cazDunIse3SDh0dej5dDBBW5SrBTGavS uGbYKOjulACOa9IQMkHx07zZIDQY3/KPr0GjLv40jXcdQl+efZNMrrHjLF+tebHv Va5c+zytCA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:36 2026 by rpki-client