This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer File: HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer (raw, json) Hash identifier: 0iDVU+UCgrfkx9TdxRi7ZkpRNULlSAZhNodUnxm9kTE= Subject key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E7F979DCC44E7193685D190DAC2B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50201 IP: 109.232.88.0/21 IP: 2a0b:93c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7f:97:9d:cc:44:e7:19:36:85:d1:90:da:c2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:0c:54:03:79:93:d3:c8:78:e0:cf:86:f6: 10:9e:4e:c1:2f:46:67:74:15:5e:47:28:58:63:4d: 72:a3:bc:c3:b6:97:c1:56:9a:34:ff:aa:4f:c6:83: ea:cf:b8:f7:eb:51:a9:d3:89:4b:22:c4:26:4c:10: 0f:70:13:d7:f0:24:4c:ef:a8:da:b2:0c:dd:65:76: 0f:1d:66:90:a2:b1:27:2a:c1:9f:9c:ef:0c:1a:d4: 0b:64:ec:04:f1:11:ea:d4:1e:b0:ca:cd:05:0e:a6: 4d:52:01:07:40:93:2d:28:7d:ad:73:b8:9f:86:53: 2a:7b:54:ce:77:f2:0f:b4:3c:5e:19:06:e7:15:35: 41:1d:6b:9d:36:3e:5a:91:87:9f:a5:68:30:38:bb: a3:25:3f:2b:58:ac:08:e2:7b:73:ef:fb:4e:a2:52: a7:51:0f:b7:d0:df:d4:75:d4:21:5f:87:ba:49:68: 45:af:9b:5f:78:cc:3f:74:8a:bb:91:e8:e8:3c:e2: b1:fa:c1:b4:94:d4:4a:d1:1f:97:63:0f:42:7d:ab: d0:c3:3b:cb:87:6d:5b:6e:60:b6:aa:d5:17:56:97: 04:cb:1e:c7:5a:41:83:43:80:35:37:80:ad:9e:bd: c5:5c:b4:89:9c:0f:f6:ed:c0:5b:28:83:68:68:74: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.232.88.0/21 IPv6: 2a0b:93c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50201 Signature Algorithm: sha256WithRSAEncryption 48:15:09:12:ec:f3:35:a9:2e:be:dc:98:19:1a:0b:d7:76:ea: 0b:0f:74:bb:72:ce:ac:e7:ab:96:2a:75:af:c9:c8:0c:b1:19: 76:24:a2:8d:b5:c2:16:f3:5b:c8:e4:28:5b:eb:ef:3c:07:32: 9a:bb:6d:87:84:6e:82:76:bd:14:17:af:0b:87:2e:ca:21:bf: dc:e8:14:d3:03:03:44:2f:d6:30:e3:d5:bd:cb:e2:d3:b2:f6: 28:ae:89:00:fa:25:cf:2f:92:b8:54:73:fe:56:8a:ae:50:86: c6:81:03:46:27:7e:31:f0:9a:9a:63:2f:ba:86:35:7b:f9:d5: 64:cb:e3:fc:f1:3f:23:b6:24:4f:bc:85:08:28:06:a8:d3:e6: 03:93:b5:2e:17:ab:9f:0f:a9:67:97:90:ab:c6:5b:00:5e:3a: e3:ed:f8:69:57:27:57:a6:bf:63:7f:aa:3c:98:ce:b4:53:c2: fd:2f:56:01:c4:19:bf:59:44:ce:f2:2f:36:82:c6:83:42:3c: 30:46:2f:a2:2b:9c:54:00:31:b5:fc:3c:7b:bd:c8:ac:2d:82: 16:1c:ef:85:6b:2f:e6:83:da:f1:0d:a7:16:ac:55:da:af:34: 2c:86:0b:ab:3a:63:90:7d:3a:51:df:be:16:88:41:b8:4c:d1: be:26:8e:ef -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fn+XncxE5xk2hdGQ2sK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTlhMmYwODNmNDcxZGZiOTUwN2I0Yzk3M2NiNWMzYWNkNDk3NTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFAMVAN5k9PIeODPhvYQnk7BL0Zn dBVeRyhYY01yo7zDtpfBVpo0/6pPxoPqz7j361Gp04lLIsQmTBAPcBPX8CRM76ja sgzdZXYPHWaQorEnKsGfnO8MGtQLZOwE8RHq1B6wys0FDqZNUgEHQJMtKH2tc7if hlMqe1TOd/IPtDxeGQbnFTVBHWudNj5akYefpWgwOLujJT8rWKwI4ntz7/tOolKn UQ+30N/UddQhX4e6SWhFr5tfeMw/dIq7kejoPOKx+sG0lNRK0R+XYw9CfavQwzvL h21bbmC2qtUXVpcEyx7HWkGDQ4A1N4Ctnr3FXLSJnA/27cBbKINoaHRT3wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB6aLwg/Rx37lQe0yXPLXDrNSXWdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzYyNzdh Ny0yOTBmLTQ5OTQtYjI4Ni0yNWQ2ZTg2MTNkYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNjI3N2E3 LTI5MGYtNDk5NC1iMjg2LTI1ZDZlODYxM2RjNC8xL0hwb3ZDRDlISGZ1VkI3VEpj OHRjT3MxSmRaMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDbehYMA0EAgACMAcDBQMqC5PAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDEGTANBgkqhkiG9w0BAQsFAAOCAQEASBUJEuzzNaku vtyYGRoL13bqCw90u3LOrOerlip1r8nIDLEZdiSijbXCFvNbyOQoW+vvPAcymrtt h4Rugna9FBevC4cuyiG/3OgU0wMDRC/WMOPVvcvi07L2KK6JAPolzy+SuFRz/laK rlCGxoEDRid+MfCammMvuoY1e/nVZMvj/PE/I7YkT7yFCCgGqNPmA5O1Lhernw+p Z5eQq8ZbAF464+34aVcnV6a/Y3+qPJjOtFPC/S9WAcQZv1lEzvIvNoLGg0I8MEYv oiucVAAxtfw8e73IrC2CFhzvhWsv5oPa8Q2nFqxV2q80LIYLqzpjkH06Ud++FohB uEzRviaO7w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:26 2026 by rpki-client