This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer File: HqsBKTydvRqdatyGGCtSDNF2wAc.cer (raw, json) Hash identifier: g9JRhs2rqqo/J8HwZvPNM6381gBgc3XLuxnMBCes4eg= Subject key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791006E8798ED59808A3F891D80D0F2F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196945 IP: 91.217.155.0/24 IP: 185.106.16.0/22 IP: 2a06:3ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:06:e8:79:8e:d5:98:08:a3:f8:91:d8:0d:0f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:64:68:4d:8b:02:92:4c:05:7f:d1:64:b2:67: 09:82:fd:e8:94:a5:55:a4:dd:bb:28:f7:f1:7a:b7: 99:93:69:07:38:1e:bd:56:ce:32:1a:11:8b:af:1f: fa:43:25:69:dd:38:44:d4:98:ed:fa:6c:12:41:85: 66:2f:10:d2:3d:ba:db:69:50:8b:dc:17:a5:7f:bf: 3c:e9:d3:87:a2:10:25:4f:9b:b9:b9:0a:4a:d8:0f: 5a:0c:37:c0:72:c1:85:71:a1:83:0a:4f:de:64:c7: 80:4c:83:fa:de:9c:b5:7f:b1:7f:2f:aa:ca:69:04: 3b:ba:d5:ff:ee:d2:73:12:de:ed:21:d9:a3:90:db: 20:e1:66:fd:8c:b8:d8:e6:bb:36:b2:21:1b:c2:b7: 6d:77:e2:d6:83:c5:1f:f4:a8:57:bc:42:80:77:93: fc:d3:03:e7:8c:8e:41:c4:51:af:26:e8:ef:84:95: 36:26:87:94:4e:ab:4e:f0:99:62:d6:c7:c5:2f:27: a0:37:8a:f2:65:98:77:49:97:96:80:a0:e2:7a:e3: 21:fa:67:69:e1:92:4f:2d:7e:83:0e:e5:93:6d:69: 88:0f:c5:ba:cf:8c:cb:de:26:d7:37:3b:fb:17:8f: ab:98:b6:07:d1:be:02:b9:9e:7b:4b:ca:d8:06:fa: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.155.0/24 185.106.16.0/22 IPv6: 2a06:3ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196945 Signature Algorithm: sha256WithRSAEncryption 3c:7d:eb:b2:0d:6e:3c:7b:57:20:65:32:7f:27:9a:8c:f7:b2: 40:c5:a1:5d:27:7b:c0:44:ba:3a:ce:9b:f1:4a:d3:b5:8e:c2: 64:dc:ff:15:3d:ea:1a:1a:67:b4:c6:ae:cb:0e:f0:4b:48:75: 9b:c8:a0:03:d4:0a:73:4b:d7:02:65:8e:fd:9a:e6:89:85:42: f3:ab:e8:51:89:23:50:f0:cc:3e:2a:bd:ed:ea:90:a2:1b:f8: 56:23:ed:aa:1a:b5:a7:6b:76:4b:68:89:10:0c:57:b3:09:7c: 40:77:b3:b7:83:87:0d:aa:15:29:7f:83:b2:0f:52:44:c3:14: ea:ad:4e:4a:78:42:25:8b:d3:c6:8c:14:0c:8b:c8:38:00:fa: 65:0d:85:2f:18:7b:4c:bb:02:f2:7f:fa:81:da:62:f5:0d:72: 1c:dc:37:7d:af:07:8f:0e:98:c2:3d:a8:46:57:11:18:71:8a: 29:f4:14:ea:6e:6a:39:e2:1e:7f:80:eb:f4:11:e8:9b:bb:1b: e9:f6:20:84:95:37:26:41:6a:5b:3d:4a:89:25:cf:e0:29:cf: b8:c4:f8:75:2b:93:d7:c2:d7:fc:09:71:6d:00:a8:f4:75:92: 3c:88:94:74:58:e6:7b:6e:4e:89:19:9c:50:aa:23:da:ae:59: ec:3e:6c:fb -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EAboeY7VmAij+JHYDQ8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWFiMDEyOTNjOWRiZDFhOWQ2YWRjODYxODJiNTIwY2QxNzZjMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GRoTYsCkkwFf9FksmcJgv3olKVV pN27KPfxereZk2kHOB69Vs4yGhGLrx/6QyVp3ThE1Jjt+mwSQYVmLxDSPbrbaVCL 3Belf7886dOHohAlT5u5uQpK2A9aDDfAcsGFcaGDCk/eZMeATIP63py1f7F/L6rK aQQ7utX/7tJzEt7tIdmjkNsg4Wb9jLjY5rs2siEbwrdtd+LWg8Uf9KhXvEKAd5P8 0wPnjI5BxFGvJujvhJU2JoeUTqtO8Jli1sfFLyegN4ryZZh3SZeWgKDieuMh+mdp 4ZJPLX6DDuWTbWmID8W6z4zL3ibXNzv7F4+rmLYH0b4CuZ57S8rYBvoC/wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFB6rASk8nb0anWrchhgrUgzRdsAHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2MwMGMx My03OTFhLTRlMTUtYmFmNy1lMDNhYzU4OWEwM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYzAwYzEz LTc5MWEtNGUxNS1iYWY3LWUwM2FjNTg5YTAzZi8xL0hxc0JLVHlkdlJxZGF0eUdH Q3RTRE5GMndBYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9mbAwQCuWoQMA0EAgACMAcDBQMqBjrAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMBUTANBgkqhkiG9w0BAQsFAAOCAQEAPH3r sg1uPHtXIGUyfyeajPeyQMWhXSd7wES6Os6b8UrTtY7CZNz/FT3qGhpntMauyw7w S0h1m8igA9QKc0vXAmWO/ZrmiYVC86voUYkjUPDMPiq97eqQohv4ViPtqhq1p2t2 S2iJEAxXswl8QHezt4OHDaoVKX+Dsg9SRMMU6q1OSnhCJYvTxowUDIvIOAD6ZQ2F Lxh7TLsC8n/6gdpi9Q1yHNw3fa8Hjw6Ywj2oRlcRGHGKKfQU6m5qOeIef4Dr9BHo m7sb6fYghJU3JkFqWz1KiSXP4CnPuMT4dSuT18LX/AlxbQCo9HWSPIiUdFjme25O iRmcUKoj2q5Z7D5s+w== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:26 2026 by rpki-client