This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer File: HkwyCG4emEUFaRsB9Zhd96NrJK4.cer (raw, json) Hash identifier: wqbvZ5NmSUnjYIoGsCeN1nv455Zm+tZjlbs099IAOiI= Subject key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA45E40D7D8ED008A788BE1AB2422D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48586 AS: 57277 IP: 185.1.76.0/24 IP: 2001:678:74c::/48 IP: 2001:7f8:a7::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:45:e4:0d:7d:8e:d0:08:a7:88:be:1a:b2:42:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e4c32086e1e984505691b01f5985df7a36b24ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:c5:82:c8:00:9d:a4:24:e8:9e:4c:f7:12: 5b:95:c4:55:2c:e4:44:00:b4:12:94:de:06:b2:07: 17:fd:7f:b3:21:ef:bb:3e:4f:ea:49:d8:4b:bc:63: 7c:80:61:d2:18:53:bb:65:6b:87:77:80:b8:1f:78: 51:7d:88:78:57:bb:d3:4d:df:6f:c0:e5:12:f9:7c: 2e:9a:26:61:a3:ad:2c:44:1a:2e:96:4b:93:ca:52: 43:b5:8a:d7:6b:19:3d:d6:7d:90:a8:04:4b:ca:83: cf:87:46:d6:46:47:d6:98:b5:30:aa:5c:e4:c5:1f: 38:1c:2c:ce:15:98:20:97:52:7d:d6:43:e1:47:7f: 16:3c:c8:a1:b9:80:22:b0:5f:a0:d1:cb:1a:85:5d: 56:d0:7c:66:09:2e:b6:80:95:64:a1:3b:16:6f:a4: f3:53:f3:cd:38:61:bd:56:87:d6:2c:33:b5:78:3d: a1:6a:f7:54:2e:f4:69:e8:c4:a8:58:88:bd:b9:91: bd:a5:80:a9:83:f5:e1:42:fe:da:a1:1f:f6:6d:3e: 65:26:7b:5a:70:e5:99:52:bb:fa:5d:db:b0:9b:ba: b7:e5:2d:3d:1d:af:ae:77:4c:b9:64:f1:85:f3:27: df:3d:12:46:b8:a4:07:93:9e:9d:84:27:54:03:36: f3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.76.0/24 IPv6: 2001:678:74c::/48 2001:7f8:a7::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48586 57277 Signature Algorithm: sha256WithRSAEncryption a5:66:ec:5b:c5:63:f8:27:cd:ae:15:55:05:21:74:71:89:e3: 26:1f:ac:36:71:c6:3c:bc:da:f3:59:d9:ee:c3:cb:8b:78:87: ee:9e:8d:3f:30:22:3e:88:2b:5b:4c:c9:fe:85:1b:d1:23:3e: 44:47:88:df:ff:d3:f1:16:a7:59:07:ad:76:cf:9c:4b:dd:25: 6d:bc:87:66:29:75:a1:cc:7a:9b:21:86:eb:78:bf:70:8f:4b: b7:9f:ea:82:b3:ea:e0:d9:9d:87:fe:bb:9e:ee:ce:e1:ed:50: 15:b6:31:4a:a7:77:a1:1f:13:e6:df:0c:91:86:cb:ae:16:75: 80:ae:a0:9a:73:9c:84:7b:8b:93:ed:57:cb:67:9b:14:22:a2: c1:86:3e:9f:aa:a3:ac:3a:4f:4a:df:65:87:79:0e:54:ca:08: eb:37:0a:cd:32:aa:23:dd:d2:56:f6:d4:d1:47:61:c6:fd:e3: e7:f8:c9:27:02:27:6c:a4:e6:b8:91:2e:03:cf:d5:03:77:f5: 8e:f4:f1:7b:e2:b7:58:5b:c8:b2:6a:ca:c5:05:b7:b1:06:9b: 31:55:d9:05:3d:ad:b5:e8:40:19:b0:0c:05:93:9f:1c:45:d6: d3:1d:b4:01:36:4b:b1:ea:d6:16:71:1e:da:48:19:32:17:57: f8:3e:ab:fd -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt9ykXkDX2O0AiniL4askItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTRjMzIwODZlMWU5ODQ1MDU2OTFiMDFmNTk4NWRmN2EzNmIyNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA293FgsgAnaQk6J5M9xJblcRVLORE ALQSlN4GsgcX/X+zIe+7Pk/qSdhLvGN8gGHSGFO7ZWuHd4C4H3hRfYh4V7vTTd9v wOUS+XwumiZho60sRBoulkuTylJDtYrXaxk91n2QqARLyoPPh0bWRkfWmLUwqlzk xR84HCzOFZggl1J91kPhR38WPMihuYAisF+g0csahV1W0HxmCS62gJVkoTsWb6Tz U/PNOGG9VofWLDO1eD2havdULvRp6MSoWIi9uZG9pYCpg/XhQv7aoR/2bT5lJnta cOWZUrv6Xduwm7q35S09Ha+ud0y5ZPGF8yffPRJGuKQHk56dhCdUAzbzQQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFB5MMghuHphFBWkbAfWYXfejaySuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2Q0ODA5 MC0yZGJmLTRiODQtODU5Ni05OGNlMTQ2ZjE4MjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvZDQ4MDkw LTJkYmYtNGI4NC04NTk2LTk4Y2UxNDZmMTgyNC8xL0hrd3lDRzRlbUVVRmFSc0I5 WmhkOTZOckpLNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAMBAIAATAGAwQAuQFMMBgEAgACMBIDBwAgAQZ4B0wDBwAgAQf4 AKcwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAL3KAgMA370wDQYJKoZIhvcNAQEL BQADggEBAKVm7FvFY/gnza4VVQUhdHGJ4yYfrDZxxjy82vNZ2e7Dy4t4h+6ejT8w Ij6IK1tMyf6FG9EjPkRHiN//0/EWp1kHrXbPnEvdJW28h2YpdaHMepshhut4v3CP S7ef6oKz6uDZnYf+u57uzuHtUBW2MUqnd6EfE+bfDJGGy64WdYCuoJpznIR7i5Pt V8tnmxQiosGGPp+qo6w6T0rfZYd5DlTKCOs3Cs0yqiPd0lb21NFHYcb94+f4yScC J2yk5riRLgPP1QN39Y708Xvit1hbyLJqysUFt7EGmzFV2QU9rbXoQBmwDAWTnxxF 1tMdtAE2S7Hq1hZxHtpIGTIXV/g+q/0= -----END CERTIFICATE-----Generated at Mon Jan 26 08:23:42 2026 by rpki-client