This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer (raw, json) Hash identifier: xlt6DtEeWUBKTTk0HFrE0BSoNI8SKo6uBYLg0K3LRe4= Subject key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33DDF34D0C74965B912AAEC0888DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29491 IP: 91.193.164.0/22 IP: 94.45.128.0/19 IP: 185.12.8.0/22 IP: 194.187.108.0/22 IP: 195.137.202.0/23 IP: 195.191.214.0/23 IP: 2a03:5dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:df:34:d0:c7:49:65:b9:12:aa:ec:08:88:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:be:87:7d:c5:75:e8:68:7e:e6:c7:7d:07: 5e:2a:20:11:9e:08:71:d7:1a:4f:db:a8:64:77:36: 6c:a0:fa:f7:c8:c9:5f:dd:e3:fd:fa:83:d5:f7:aa: d5:c7:df:cc:5b:0f:d7:fc:17:cc:ff:1b:d2:97:46: 0f:e6:db:f5:85:fb:d8:c4:6c:98:5f:4f:97:8e:1c: f5:f1:b5:a2:e3:c7:d1:6b:45:ad:5a:41:b5:97:45: 57:e1:13:f9:9e:51:d6:8a:fc:e7:90:cc:e3:0a:ca: 1b:38:86:4c:b7:79:d1:fe:2b:b9:44:34:d8:31:bb: 24:17:b2:14:b7:f3:64:a7:9f:cc:0f:7b:a7:a7:24: ab:5a:7e:ea:66:47:f1:4e:51:4a:a4:f5:5c:f1:7f: 7b:c6:15:6a:df:7c:b2:27:3c:43:da:a8:85:d7:b6: da:bd:b2:4e:cc:6b:7f:be:d3:25:ff:9a:92:01:1d: 7b:43:d9:37:d4:a4:b6:a3:32:40:28:7c:69:bc:f7: 8c:ff:39:aa:3b:fa:35:a8:80:c1:b6:cf:6d:0a:76: a9:69:e6:71:f6:ee:a1:4a:a8:eb:1d:57:de:f4:38: 9b:c4:ff:4d:b7:76:7a:9b:56:5e:dd:d7:2a:7e:e6: e3:2d:93:d8:09:38:ae:22:9e:2b:64:45:45:3e:82: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.164.0/22 94.45.128.0/19 185.12.8.0/22 194.187.108.0/22 195.137.202.0/23 195.191.214.0/23 IPv6: 2a03:5dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29491 Signature Algorithm: sha256WithRSAEncryption 67:38:bf:64:6c:f7:a8:bb:4e:37:2e:33:6d:e5:25:5e:fc:76: e9:90:f6:0e:4d:b2:28:b4:50:bf:f2:19:5f:1e:ee:45:96:f9: 81:21:d1:ac:bb:36:7a:37:9a:95:2c:50:cb:7e:88:c3:ec:6f: 56:24:90:a1:e9:97:e0:29:64:96:74:f7:4d:9c:ee:4e:45:e5: 59:a4:ba:2b:25:b8:92:74:20:e9:0a:4d:fc:a5:c7:b6:35:8e: 41:a1:ee:bc:a4:ff:5f:04:4a:5f:59:85:7e:8a:fa:bd:10:ae: b6:60:e7:43:85:40:16:ab:62:8a:c6:c8:2b:4b:7a:46:d8:e1: f4:ba:7e:ea:8a:61:a4:df:4c:c3:ea:0d:4f:35:3f:3e:cc:7f: e0:b4:95:0b:bc:38:60:dd:95:bb:26:6c:dc:18:eb:4d:6b:49: e2:c2:3d:de:4e:80:68:a8:b4:79:56:c6:80:d2:ed:18:1e:17: 7c:be:a3:e6:83:21:a4:a6:97:a1:fd:3a:da:f0:5c:5d:76:43: ef:78:b1:80:05:57:3d:21:c2:e6:0b:72:ec:61:cd:a3:ae:cd: 2d:75:44:0d:c0:e8:55:07:0a:ea:09:1c:50:d2:db:77:d0:21: ad:7c:24:53:57:ec:6e:15:a4:df:44:f3:a7:d2:6f:79:bd:ea: b9:74:23:e6 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt4oz3fNNDHSWW5EqrsCIjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTE0ZWIxZWVmNjZjMmQzNDlmM2Y3ZDdiYWZhNjhlNDlmYmZlYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2a+h33FdehofubHfQdeKiARnghx 1xpP26hkdzZsoPr3yMlf3eP9+oPV96rVx9/MWw/X/BfM/xvSl0YP5tv1hfvYxGyY X0+Xjhz18bWi48fRa0WtWkG1l0VX4RP5nlHWivznkMzjCsobOIZMt3nR/iu5RDTY MbskF7IUt/Nkp5/MD3unpySrWn7qZkfxTlFKpPVc8X97xhVq33yyJzxD2qiF17ba vbJOzGt/vtMl/5qSAR17Q9k31KS2ozJAKHxpvPeM/zmqO/o1qIDBts9tCnapaeZx 9u6hSqjrHVfe9DibxP9Nt3Z6m1Ze3dcqfubjLZPYCTiuIp4rZEVFPoJuPQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFB4U6x7vZsLTSfP317r6aOSfv+ycMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzMzM2Fi MS1hZjliLTQzNGMtOGQxMy05Y2E5OGY0OTUwY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMzMzYWIx LWFmOWItNDM0Yy04ZDEzLTljYTk4ZjQ5NTBjZi8xL0hoVHJIdTltd3ROSjhfZlh1 dnBvNUotXzdKdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQCW8GkAwQFXi2AAwQCuQwIAwQCwrtsAwQBw4nK AwQBw7/WMA0EAgACMAcDBQMqA13AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnMz MA0GCSqGSIb3DQEBCwUAA4IBAQBnOL9kbPeou043LjNt5SVe/HbpkPYOTbIotFC/ 8hlfHu5FlvmBIdGsuzZ6N5qVLFDLfojD7G9WJJCh6ZfgKWSWdPdNnO5OReVZpLor JbiSdCDpCk38pce2NY5Boe68pP9fBEpfWYV+ivq9EK62YOdDhUAWq2KKxsgrS3pG 2OH0un7qimGk30zD6g1PNT8+zH/gtJULvDhg3ZW7JmzcGOtNa0niwj3eToBoqLR5 VsaA0u0YHhd8vqPmgyGkppeh/Tra8FxddkPveLGABVc9IcLmC3LsYc2jrs0tdUQN wOhVBwrqCRxQ0tt30CGtfCRTV+xuFaTfRPOn0m95veq5dCPm -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:47 2026 by rpki-client