This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer (raw, json) Hash identifier: pm+pnOlTSn2zJHBWfq0uJewDHUhjh6Yy7JtN8wwahKs= Subject key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA6B0C9471AA06813C872568B5F866128 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 13:53:15 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208959 IP: 45.86.221.0/24 IP: 46.232.210.0/23 IP: 85.155.120.0/22 IP: 185.207.164.0/22 IP: 216.163.184.0/22 IP: 2a11:b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:b0:c9:47:1a:a0:68:13:c8:72:56:8b:5f:86:61:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 13:53:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1e514098a5a9736cda4303e0495e94652390aa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:5b:28:61:1f:73:61:a0:f9:e4:a3:83:9a: 75:e5:02:fa:9b:21:e1:2e:46:41:b0:f6:52:25:66: 46:02:f9:20:e8:1e:26:54:bc:5f:0d:11:8f:01:67: c4:8c:83:7d:de:a3:aa:18:8e:4d:37:18:fa:4f:f7: 71:da:73:ff:1f:5a:fb:5d:ca:f0:2b:55:a3:ec:40: 17:bb:8a:1b:29:3b:8d:16:d8:d6:4e:b4:49:fd:bb: 82:68:b0:61:94:2b:65:e8:7b:f4:32:9d:f6:47:5b: 27:6e:a2:5f:7a:c6:e6:a4:d1:b4:5a:dd:12:b8:b9: 72:87:51:0a:80:24:e0:7c:42:bf:fe:96:d3:91:40: 90:f4:49:15:bc:db:73:71:4a:92:11:35:32:6d:79: 6f:a1:f8:44:bf:67:7c:37:ea:2e:ea:87:1c:90:12: 57:27:06:c7:d8:90:cb:77:25:7c:df:a2:b1:a5:98: 83:99:15:56:ac:ee:00:0c:49:12:91:b8:5c:7b:a2: 3e:cd:9d:f7:23:91:af:85:74:c8:2a:c5:16:ce:13: 35:a9:23:8f:cf:dd:33:55:d4:d1:ae:c6:a0:4b:bf: e9:59:3c:12:4d:92:e6:8e:ea:56:cc:a8:35:9d:20: 0b:12:fb:57:93:4e:57:43:14:c1:77:f0:b8:70:1e: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.221.0/24 46.232.210.0/23 85.155.120.0/22 185.207.164.0/22 216.163.184.0/22 IPv6: 2a11:b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208959 Signature Algorithm: sha256WithRSAEncryption 7e:1c:33:45:f9:11:a8:2f:68:9b:3d:58:1c:66:54:1c:b8:30: 38:fd:c0:d9:d4:01:d1:17:4a:26:b6:e9:2d:af:42:8d:ad:d6: 3b:70:12:f9:4d:4f:75:cd:7b:88:b6:57:b8:0d:81:bb:6b:55: de:57:9a:07:8f:a3:20:4a:00:a3:e5:ec:d9:a7:2e:e7:50:67: 5c:b6:f4:d4:89:28:5b:bf:40:ed:61:3a:eb:81:22:67:f3:4f: 5c:ed:ff:c4:a3:02:e5:21:64:20:95:a2:17:42:e3:47:73:36: 60:d9:93:e2:0a:d3:d6:e3:82:5d:77:e7:a3:e7:05:92:16:a5: 7b:22:b2:d9:6a:0e:15:f6:0c:6e:b5:d5:da:af:84:dd:13:36: 77:bc:5b:67:7c:79:a7:3f:6a:89:80:82:16:53:bf:c1:6f:2a: ce:6d:f0:39:c5:db:66:7a:8b:5c:72:b6:a7:51:74:fd:a0:0e: eb:a5:9a:1c:34:ec:80:68:6f:62:41:63:05:da:13:61:cf:4c: e6:9a:37:50:50:b5:aa:49:68:04:d5:5f:c2:64:75:db:db:cc: 91:6c:de:0f:b9:5b:79:53:79:3e:48:fe:0a:2d:09:21:ff:72: 35:19:52:a8:c2:28:8b:2c:05:67:6c:36:da:02:0e:ab:24:5e: 65:df:19:74 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZqmsMlHGqBoE8hyVotfhmEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMTM1MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTUxNDA5OGE1YTk3MzZjZGE0MzAzZTA0OTVlOTQ2NTIzOTBhYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno1bKGEfc2Gg+eSjg5p15QL6myHh LkZBsPZSJWZGAvkg6B4mVLxfDRGPAWfEjIN93qOqGI5NNxj6T/dx2nP/H1r7Xcrw K1Wj7EAXu4obKTuNFtjWTrRJ/buCaLBhlCtl6Hv0Mp32R1snbqJfesbmpNG0Wt0S uLlyh1EKgCTgfEK//pbTkUCQ9EkVvNtzcUqSETUybXlvofhEv2d8N+ou6occkBJX JwbH2JDLdyV836KxpZiDmRVWrO4ADEkSkbhce6I+zZ33I5GvhXTIKsUWzhM1qSOP z90zVdTRrsagS7/pWTwSTZLmjupWzKg1nSALEvtXk05XQxTBd/C4cB4EJwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFB5RQJilqXNs2kMD4ElelGUjkKqRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzM1ZGZj Yi1kOTJkLTQ4ZmUtOWRhZC04NTQzODE2ODZjN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMzVkZmNi LWQ5MmQtNDhmZS05ZGFkLTg1NDM4MTY4NmM3Yi8xL0hsRkFtS1dwYzJ6YVF3UGdT VjZVWlNPUXFwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQALVbdAwQBLujSAwQCVZt4AwQCuc+kAwQC2KO4 MA0EAgACMAcDBQMqEQsAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwPzANBgkq hkiG9w0BAQsFAAOCAQEAfhwzRfkRqC9omz1YHGZUHLgwOP3A2dQB0RdKJrbpLa9C ja3WO3AS+U1Pdc17iLZXuA2Bu2tV3leaB4+jIEoAo+Xs2acu51BnXLb01IkoW79A 7WE664EiZ/NPXO3/xKMC5SFkIJWiF0LjR3M2YNmT4grT1uOCXXfno+cFkhaleyKy 2WoOFfYMbrXV2q+E3RM2d7xbZ3x5pz9qiYCCFlO/wW8qzm3wOcXbZnqLXHK2p1F0 /aAO66WaHDTsgGhvYkFjBdoTYc9M5po3UFC1qkloBNVfwmR129vMkWzeD7lbeVN5 Pkj+Ci0JIf9yNRlSqMIoiywFZ2w22gIOqyReZd8ZdA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:14 2025 by rpki-client