This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer File: Hx4uqu8HAVlawnVNASEhfnuR1zk.cer (raw, json) Hash identifier: slur1NlPUQ9WxVsakrKEomouk+bYUoWT2iufpnwkeGI= Subject key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B63E2C06336BCDD605B46570C6279 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214099 IP: 89.18.52.0 -- 89.18.63.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:63:e2:c0:63:36:bc:dd:60:5b:46:57:0c:62:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:e3:5a:56:e6:9f:77:61:c7:d8:a9:16:59: f2:ee:07:b8:ad:19:a7:35:dc:10:49:2a:21:ec:40: 34:3d:19:07:58:0a:64:ab:fc:1a:2a:25:22:86:a7: 30:0e:2e:c8:8e:1b:f4:d6:09:a6:f0:cc:44:63:0e: cd:36:20:ad:c8:c4:07:2d:f3:6f:9c:87:4c:dd:77: 0a:a5:92:4f:f9:8b:ac:fd:13:8f:4b:e8:92:29:69: ec:b4:70:77:50:ed:54:bf:a5:ab:24:66:f8:22:b4: 67:09:07:99:00:ab:b3:c7:f6:58:c0:12:a6:89:6d: 3e:b6:00:42:f2:92:02:80:24:6c:56:e5:e1:11:2c: 30:88:dd:c2:cd:ef:82:49:2c:86:a7:7a:ac:bd:7b: 7e:31:99:3c:0f:38:cb:17:73:2c:80:56:9e:22:3f: 1d:ec:17:3f:97:45:4a:a3:a5:f7:62:79:42:68:a5: 81:7c:a2:8f:d7:24:ca:d5:4e:bd:34:c5:84:47:4d: b7:dc:bd:5b:33:df:b2:d3:36:39:08:a9:45:82:c2: 86:b4:0e:9e:cf:fa:e5:1f:30:c1:c7:d5:e7:ed:48: d5:14:db:b0:8b:b0:36:b9:fa:d3:be:8b:9e:64:c6: c8:ae:05:0e:53:69:84:fa:eb:6f:85:5c:f8:e0:91: 05:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.18.52.0-89.18.63.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214099 Signature Algorithm: sha256WithRSAEncryption 26:c3:4d:80:1b:bc:d2:10:d3:65:1a:82:9c:ec:6a:ee:40:8d: b3:e9:e1:84:10:56:51:fd:3c:df:b9:59:b3:4c:ce:a7:af:19: de:95:2a:d9:1e:50:13:70:c4:f6:ab:08:70:66:c5:a7:a1:b7: 54:c2:88:cd:6c:fa:65:c1:1d:0a:6c:fd:0d:ca:4c:38:35:7b: d4:0c:75:01:e8:ed:2c:45:14:00:4c:84:ac:3d:54:9c:98:96: de:df:fa:1f:89:77:5e:c9:79:68:92:b5:07:84:67:58:0a:3f: 51:4f:fc:ab:02:f3:23:6f:db:0e:c8:7f:14:6b:72:63:35:2f: 53:06:50:e3:33:78:29:53:7d:26:12:8a:08:4c:a8:3e:f0:ba: 14:33:0a:13:fe:63:87:a0:d8:76:7d:61:23:69:4b:90:c8:46: 76:3b:54:3f:d3:57:40:9f:ec:d7:67:73:f5:c4:1a:46:0f:8a: c2:9a:e4:09:c3:3b:c2:0f:59:db:4a:2a:94:15:21:d0:12:31: 24:e6:85:d9:5b:b4:45:07:57:b3:30:66:aa:ab:15:8f:85:95: 5c:0a:c7:69:97:5d:ad:31:b2:7b:15:24:0e:0c:6f:3f:35:3f: ee:45:a0:72:0d:8c:84:42:a8:a4:cc:0b:d9:66:de:a1:ae:7b: ee:6f:63:9f -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt6W2PiwGM2vN1gW0ZXDGJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjFlMmVhYWVmMDcwMTU5NWFjMjc1NGQwMTIxMjE3ZTdiOTFkNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPvjWlbmn3dhx9ipFlny7ge4rRmn NdwQSSoh7EA0PRkHWApkq/waKiUihqcwDi7Ijhv01gmm8MxEYw7NNiCtyMQHLfNv nIdM3XcKpZJP+Yus/ROPS+iSKWnstHB3UO1Uv6WrJGb4IrRnCQeZAKuzx/ZYwBKm iW0+tgBC8pICgCRsVuXhESwwiN3Cze+CSSyGp3qsvXt+MZk8DzjLF3MsgFaeIj8d 7Bc/l0VKo6X3YnlCaKWBfKKP1yTK1U69NMWER0233L1bM9+y0zY5CKlFgsKGtA6e z/rlHzDBx9Xn7UjVFNuwi7A2ufrTvoueZMbIrgUOU2mE+utvhVz44JEFHQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFB8eLqrvBwFZWsJ1TQEhIX57kdc5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzRkNmZm ZC0xZmFjLTQ5N2YtODEwYy0yYjM0Yjg0MzNiYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNGQ2ZmZk LTFmYWMtNDk3Zi04MTBjLTJiMzRiODQzM2JiNS8xL0h4NHVxdThIQVZsYXduVk5B U0VoZm51UjF6ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAJZEjQDBAZZEgAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDA0RTMA0GCSqGSIb3DQEBCwUAA4IBAQAmw02AG7zSENNlGoKc7Gru QI2z6eGEEFZR/TzfuVmzTM6nrxnelSrZHlATcMT2qwhwZsWnobdUwojNbPplwR0K bP0Nykw4NXvUDHUB6O0sRRQATISsPVScmJbe3/ofiXdeyXlokrUHhGdYCj9RT/yr AvMjb9sOyH8Ua3JjNS9TBlDjM3gpU30mEooITKg+8LoUMwoT/mOHoNh2fWEjaUuQ yEZ2O1Q/01dAn+zXZ3P1xBpGD4rCmuQJwzvCD1nbSiqUFSHQEjEk5oXZW7RFB1ez MGaqqxWPhZVcCsdpl12tMbJ7FSQODG8/NT/uRaByDYyEQqikzAvZZt6hrnvub2Of -----END CERTIFICATE-----Generated at Sun Jan 25 20:56:22 2026 by rpki-client