This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer File: HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer (raw, json) Hash identifier: e4t/GanA38rv+4cggCLXYsZaeCbRmwCbPiyxgy8S/SQ= Subject key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910695069D8C385002D29271B06773B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205394 AS: 206637 AS: 207827 IP: 46.226.72.0/21 IP: 139.28.100.0/22 IP: 185.176.124.0/22 IP: 185.180.172.0/22 IP: 185.201.164.0/22 IP: 2a00:5a00::/32 IP: 2a09:540::/29 IP: 2a0a:ab80::/32 IP: 2a0a:c840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:69:50:69:d8:c3:85:00:2d:29:27:1b:06:77:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:c0:5f:f4:df:9c:1b:97:9e:81:e7:21:b7: f0:fa:69:46:97:77:b9:14:03:89:08:6b:8c:7b:49: 79:be:7b:7e:ce:52:9a:5c:34:87:53:9f:97:eb:42: 05:30:7a:39:86:58:ee:83:5c:34:ca:85:6a:0c:74: ce:3c:85:b0:0b:28:08:4b:eb:a0:65:82:b9:8a:1d: 42:f6:90:9b:a6:42:14:5b:d0:24:8d:f5:3a:b1:d8: fe:1d:2b:f4:9a:41:30:d7:52:7a:30:b8:e1:b3:f1: e6:63:ef:ad:6c:e5:86:31:62:31:6c:c4:e5:1f:38: 83:d3:78:16:9d:34:7b:ac:b6:ad:b6:fb:e7:47:46: 04:4e:e1:15:54:79:b5:00:20:20:b4:53:49:e6:29: 77:6a:45:2e:d2:8d:5c:63:25:2d:e0:37:15:a8:9d: b1:e2:75:47:59:86:f5:93:d5:52:28:73:ef:4f:ec: b1:fb:10:a2:56:24:d6:c9:aa:e8:1c:70:d5:fd:4b: dc:dd:3c:4c:39:13:93:d0:b6:06:57:cc:f0:73:20: a7:ae:6a:24:90:33:39:ce:ff:b3:9a:22:52:19:32: e1:40:a4:f9:e0:8f:9e:0f:a6:7e:16:41:b7:66:b3: 0c:80:8f:25:99:d0:8a:76:3c:91:e7:3b:bd:d9:49: 00:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.72.0/21 139.28.100.0/22 185.176.124.0/22 185.180.172.0/22 185.201.164.0/22 IPv6: 2a00:5a00::/32 2a09:540::/29 2a0a:ab80::/32 2a0a:c840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205394 206637 207827 Signature Algorithm: sha256WithRSAEncryption 6f:c4:3f:43:ad:1f:2b:d0:da:07:3d:fc:b1:9a:5d:60:98:6c: 87:4d:b9:ed:c1:48:e7:6e:b9:0e:e5:cf:ae:6f:5c:8a:18:65: 67:23:63:6e:c1:4a:90:3f:77:b9:d5:a8:f7:fd:ca:ba:d7:ae: 83:56:5a:c5:3c:d5:8b:81:33:bc:61:b0:b2:c3:c2:a3:97:8a: 17:9f:f2:c8:ab:d0:4e:f8:91:eb:78:52:3b:b8:1c:23:db:31: 7d:cd:76:2d:2e:2d:21:71:51:6b:74:5c:e2:63:61:1a:af:9d: 15:da:d1:b1:e8:6e:2f:18:af:7e:b7:da:f7:09:db:d1:e6:51: 40:2e:a2:40:fe:1b:74:23:fe:0c:f3:d8:5b:44:26:0f:40:92: 81:45:e2:79:1f:a6:ae:d3:a1:3f:29:c4:c7:ef:18:a3:f0:50: d4:e0:16:d0:c9:71:68:37:dd:fc:0f:af:f2:ab:eb:db:f1:f3: 2e:9e:4f:74:16:1e:0f:01:1f:2d:a5:ef:26:38:b1:86:58:d6: 48:fd:79:66:16:66:9d:be:c8:16:ec:53:3c:d2:bc:6c:73:c2: ef:9c:f8:5a:85:6c:47:6b:14:a9:1f:be:19:d0:94:a8:87:1b: bd:2b:f6:0e:c2:25:d1:7b:45:cb:db:70:47:c7:bd:0f:75:0e: 2a:4e:9d:34 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISAZt5EGlQadjDhQAtKScbBnc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWU1ZWZiZjY1ODk3MTYwZDU1YTUyZGMzYTIyYzAxNzg3NmNkMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4/AX/TfnBuXnoHnIbfw+mlGl3e5 FAOJCGuMe0l5vnt+zlKaXDSHU5+X60IFMHo5hljug1w0yoVqDHTOPIWwCygIS+ug ZYK5ih1C9pCbpkIUW9AkjfU6sdj+HSv0mkEw11J6MLjhs/HmY++tbOWGMWIxbMTl HziD03gWnTR7rLattvvnR0YETuEVVHm1ACAgtFNJ5il3akUu0o1cYyUt4DcVqJ2x 4nVHWYb1k9VSKHPvT+yx+xCiViTWyaroHHDV/Uvc3TxMOROT0LYGV8zwcyCnrmok kDM5zv+zmiJSGTLhQKT54I+eD6Z+FkG3ZrMMgI8lmdCKdjyR5zu92UkA1QIDAQAB o4IC5jCCAuIwHQYDVR0OBBYEFB7l779liXFg1VpS3DoiwBeHbNBsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzMzMjQ3 Ny1jODNjLTRmODAtYjFiZS03YzBkYjdiYWUxMzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvMzMyNDc3 LWM4M2MtNGY4MC1iMWJlLTdjMGRiN2JhZTEzNS8xL0h1WHZ2MldKY1dEVldsTGNP aUxBRjRkczBHdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAkBAIAATAeAwQDLuJIAwQCixxkAwQCubB8AwQCubSsAwQCucmk MCIEAgACMBwDBQAqAFoAAwUDKgkFQAMFACoKq4ADBQMqCshAMCQGCCsGAQUFBwEI AQH/BBUwE6ARMA8CAwMiUgIDAyctAgMDK9MwDQYJKoZIhvcNAQELBQADggEBAG/E P0OtHyvQ2gc9/LGaXWCYbIdNue3BSOduuQ7lz65vXIoYZWcjY27BSpA/d7nVqPf9 yrrXroNWWsU81YuBM7xhsLLDwqOXihef8sir0E74ket4Uju4HCPbMX3Ndi0uLSFx UWt0XOJjYRqvnRXa0bHobi8Yr3632vcJ29HmUUAuokD+G3Qj/gzz2FtEJg9AkoFF 4nkfpq7ToT8pxMfvGKPwUNTgFtDJcWg33fwPr/Kr69vx8y6eT3QWHg8BHy2l7yY4 sYZY1kj9eWYWZp2+yBbsUzzSvGxzwu+c+FqFbEdrFKkfvhnQlKiHG70r9g7CJdF7 RcvbcEfHvQ91DipOnTQ= -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:08 2026 by rpki-client