This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer File: HkogILgtApTpCi1rLA8o0Rc7ZGU.cer (raw, json) Hash identifier: cRAN0FzXzeDvZi23X8MgosIBLg0FS4FW9LtpWD502ks= Subject key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1A1B81A98BFF303929A97FE956CC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44453 IP: 5.132.128.0/18 IP: 5.198.144.0/20 IP: 128.204.128.0/19 IP: 185.2.156.0/22 IP: 2a03:3180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a1:b8:1a:98:bf:f3:03:92:9a:97:fe:95:6c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:00:19:b1:14:ea:d8:e8:7e:f2:bb:f6:ad: e3:a1:04:7e:31:c2:41:3f:b6:7e:58:56:2f:79:6b: 1e:d1:15:33:f1:91:c4:a4:aa:50:d6:41:c8:e6:5b: ec:b6:99:a6:a8:b5:a6:10:ec:8b:1a:4d:8f:ab:04: 4c:8f:e6:29:5f:31:83:1d:e0:16:a1:e1:82:dc:ac: 41:1f:f2:91:62:84:a5:5d:9e:34:ed:72:6b:5e:dc: a9:4c:62:0e:55:12:78:e7:13:b5:d6:00:8d:c2:d7: 24:8f:56:79:1a:95:ff:b6:70:bb:80:9d:a8:1a:b3: 1c:e4:56:87:68:da:b4:cf:82:ac:29:e0:c4:89:d4: 66:bb:d8:44:55:9a:5c:b2:e6:d5:30:d9:b5:22:db: b6:73:3d:66:72:ba:98:05:90:60:e3:cc:8e:ae:c5: 00:e2:18:bd:0c:a6:87:ae:c4:58:cf:61:2f:c9:1a: 1a:a1:8a:99:81:97:6c:98:b9:a0:84:d3:cb:46:38: 07:e2:9d:94:0f:d3:4c:67:47:be:3d:bb:17:ef:1e: 31:fd:c7:31:8e:3c:64:08:fb:df:4c:0d:fc:90:0e: df:6c:d5:93:d2:07:5f:72:dd:6c:85:4d:ea:4a:19: 86:47:ce:26:55:93:a3:22:d9:33:10:1f:24:88:5f: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.132.128.0/18 5.198.144.0/20 128.204.128.0/19 185.2.156.0/22 IPv6: 2a03:3180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44453 Signature Algorithm: sha256WithRSAEncryption 33:4c:b6:17:9d:18:91:d5:df:d3:4d:3d:73:32:3b:b2:63:92: 0e:7e:3e:97:8e:f4:58:02:05:3e:3d:eb:fc:0c:6d:9f:8a:0f: 47:aa:a9:df:d5:40:fb:ec:06:bb:39:af:64:c0:ee:1e:5c:64: 55:48:28:c1:75:3a:80:ec:c1:6c:32:62:13:11:b0:e0:16:0e: 64:9b:cc:fc:f8:0c:0b:8f:76:89:80:62:53:30:91:0f:5a:86: 59:70:6b:3e:71:98:b6:4f:5b:2c:95:e3:cc:29:3c:1b:29:52: b1:d6:00:3e:ee:94:c7:94:02:3c:9d:10:d9:e3:a0:48:c6:a6: eb:25:df:93:40:16:32:bf:ca:ff:3f:b6:e3:24:3d:d1:a8:1e: 78:86:d7:55:e9:4f:35:a1:62:95:fd:22:49:f4:8d:2f:4d:9a: 34:8d:72:54:4a:a0:9d:3d:85:4d:4f:48:e9:35:7b:7c:5e:8b: 0d:0c:ac:a5:3b:b5:e2:6e:94:e5:db:73:22:7b:c3:df:0f:c3: f6:65:5b:60:7e:52:04:5f:e4:04:83:ff:d3:89:cd:3d:17:95: c4:45:5e:bf:4f:e2:2a:08:75:44:b5:35:8a:8a:19:95:6c:8d: a2:b2:6d:e8:1b:83:fa:e0:99:84:cd:12:5c:9e:95:f6:19:4f: 99:53:84:cf -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/8aG4Gpi/8wOSmpf+lWzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTRhMjAyMGI4MmQwMjk0ZTkwYTJkNmIyYzBmMjhkMTE3M2I2NDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMIAGbEU6tjofvK79q3joQR+McJB P7Z+WFYveWse0RUz8ZHEpKpQ1kHI5lvstpmmqLWmEOyLGk2PqwRMj+YpXzGDHeAW oeGC3KxBH/KRYoSlXZ407XJrXtypTGIOVRJ45xO11gCNwtckj1Z5GpX/tnC7gJ2o GrMc5FaHaNq0z4KsKeDEidRmu9hEVZpcsubVMNm1Itu2cz1mcrqYBZBg48yOrsUA 4hi9DKaHrsRYz2EvyRoaoYqZgZdsmLmghNPLRjgH4p2UD9NMZ0e+PbsX7x4x/ccx jjxkCPvfTA38kA7fbNWT0gdfct1shU3qShmGR84mVZOjItkzEB8kiF9WdwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFB5KICC4LQKU6QotaywPKNEXO2RlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzRjNDhi Yi0zNjZjLTQxZjUtOWIyZC01MzA0NDBjNGZhMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNGM0OGJi LTM2NmMtNDFmNS05YjJkLTUzMDQ0MGM0ZmEyOS8xL0hrb2dJTGd0QXBUcENpMXJM QThvMFJjN1pHVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQGBYSAAwQEBcaQAwQFgMyAAwQCuQKcMA0EAgAC MAcDBQAqAzGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCtpTANBgkqhkiG9w0B AQsFAAOCAQEAM0y2F50YkdXf0009czI7smOSDn4+l470WAIFPj3r/Axtn4oPR6qp 39VA++wGuzmvZMDuHlxkVUgowXU6gOzBbDJiExGw4BYOZJvM/PgMC492iYBiUzCR D1qGWXBrPnGYtk9bLJXjzCk8GylSsdYAPu6Ux5QCPJ0Q2eOgSMam6yXfk0AWMr/K /z+24yQ90ageeIbXVelPNaFilf0iSfSNL02aNI1yVEqgnT2FTU9I6TV7fF6LDQys pTu14m6U5dtzInvD3w/D9mVbYH5SBF/kBIP/04nNPReVxEVev0/iKgh1RLU1iooZ lWyNorJt6BuD+uCZhM0SXJ6V9hlPmVOEzw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:39 2026 by rpki-client