This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer (raw, json) Hash identifier: 5TG+VfwV+rSoCjWizqsShCpo6Lo26QXGb8F7I+ahGJg= Subject key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AFC47E8B61DD22CD7F2AB361E3E32 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8995 IP: 2001:678:394::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fc:47:e8:b6:1d:d2:2c:d7:f2:ab:36:1e:3e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c9:53:e7:bb:19:93:cc:4f:47:0a:60:a5:3e: ca:48:94:f4:b0:3f:64:43:38:6e:b7:20:97:a9:1f: 50:a7:2c:cd:7f:94:97:27:b2:1d:60:3f:5d:7e:fe: ea:9a:67:40:aa:0c:ae:b2:3a:a8:7f:32:a2:e5:f8: 14:5d:75:91:59:6e:7f:98:9b:aa:8a:ad:49:23:55: 96:09:64:4d:47:98:ae:84:d2:15:5e:01:06:b2:cd: 00:59:eb:81:b7:cd:20:2f:96:33:66:9d:8c:40:a8: c2:fe:a6:b7:c5:bb:a5:62:44:d1:50:1b:88:6d:f9: 1c:18:ff:65:fd:a3:2d:3a:c5:52:61:ae:76:a5:86: f6:b6:e4:38:85:79:36:f3:fc:7f:56:7b:64:e9:33: d2:55:da:19:29:e4:34:2d:d6:39:bb:a2:6b:d0:b4: ca:c1:4a:c3:13:95:01:7d:74:e7:6f:76:e2:f8:fe: 4a:50:4c:8a:85:7a:5b:45:06:c6:3b:e3:2f:15:49: 2f:da:15:da:63:0c:40:3a:b5:1d:99:49:59:17:cc: 9c:35:22:de:02:06:d1:6c:f0:c2:d5:67:e8:37:79: 38:d9:94:9f:9d:60:1f:a8:56:62:b5:10:c0:e0:b6: 4c:ae:0d:6f:f9:d3:af:af:bb:95:07:cc:d8:48:94: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:394::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8995 Signature Algorithm: sha256WithRSAEncryption 9e:be:fa:1b:c1:87:64:9f:53:4c:c8:03:92:86:50:e8:f9:c7: dc:29:a3:a7:fd:5d:33:b2:9f:83:12:f8:9c:ab:2b:50:d2:60: a9:79:5b:37:db:86:1b:15:d1:df:6b:c3:9c:42:f6:c1:fc:ff: 05:4f:ec:d8:d9:9b:11:d8:0b:55:f9:3e:9f:d7:35:7f:56:3c: cd:a5:85:bb:fc:1a:20:2f:84:af:88:11:a3:83:92:4b:9e:63: 34:24:ed:b5:d8:1d:b6:28:d8:c5:67:26:45:e6:30:6d:b9:fc: 3e:2b:a9:31:1a:ec:57:7f:31:d9:b7:cb:30:1a:72:0b:36:45: e3:94:51:68:67:11:2c:52:63:5e:6e:37:58:1e:ee:1d:02:bd: 00:1f:94:df:b9:1a:dd:bf:d0:33:8b:1c:0e:3d:09:bc:f8:76: ea:af:db:de:3a:b3:a4:6f:3f:af:59:30:c0:76:61:3f:f3:8e: b0:0a:39:0a:6c:52:ef:d1:69:6e:e2:37:aa:87:55:05:d5:61: c3:28:64:16:d5:a4:5d:69:77:d9:33:ab:6c:69:dd:4d:17:57: fe:bd:73:f1:16:b6:e2:fe:99:df:89:85:25:f3:d1:b7:04:1b: 0e:63:e9:3e:c3:cb:31:c4:76:45:90:23:1e:32:cb:0c:64:f8: 6c:77:32:ae -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt6WvxH6LYd0izX8qs2Hj4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2YxZTA5ZjBlNmVkODkxYWQxN2Q2Y2U0YTNjNzMyOGQ3NTliNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8lT57sZk8xPRwpgpT7KSJT0sD9k QzhutyCXqR9QpyzNf5SXJ7IdYD9dfv7qmmdAqgyusjqofzKi5fgUXXWRWW5/mJuq iq1JI1WWCWRNR5iuhNIVXgEGss0AWeuBt80gL5YzZp2MQKjC/qa3xbulYkTRUBuI bfkcGP9l/aMtOsVSYa52pYb2tuQ4hXk28/x/Vntk6TPSVdoZKeQ0LdY5u6Jr0LTK wUrDE5UBfXTnb3bi+P5KUEyKhXpbRQbGO+MvFUkv2hXaYwxAOrUdmUlZF8ycNSLe AgbRbPDC1WfoN3k42ZSfnWAfqFZitRDA4LZMrg1v+dOvr7uVB8zYSJR5IwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFCPx4J8ObtiRrRfWzko8cyjXWbTIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzk1NWVk MS04YjQwLTQxODUtODRhOS0yZGRjZjU2YTc2M2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvOTU1ZWQx LThiNDAtNDE4NS04NGE5LTJkZGNmNTZhNzYzZS8xL0lfSGdudzV1MkpHdEY5Yk9T anh6S05kWnRNZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAOUMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAiMjMA0GCSqGSIb3DQEBCwUAA4IBAQCevvobwYdkn1NMyAOShlDo+cfcKaOn /V0zsp+DEvicqytQ0mCpeVs324YbFdHfa8OcQvbB/P8FT+zY2ZsR2AtV+T6f1zV/ VjzNpYW7/BogL4SviBGjg5JLnmM0JO212B22KNjFZyZF5jBtufw+K6kxGuxXfzHZ t8swGnILNkXjlFFoZxEsUmNebjdYHu4dAr0AH5TfuRrdv9AzixwOPQm8+Hbqr9ve OrOkbz+vWTDAdmE/846wCjkKbFLv0Wlu4jeqh1UF1WHDKGQW1aRdaXfZM6tsad1N F1f+vXPxFrbi/pnfiYUl89G3BBsOY+k+w8sxxHZFkCMeMssMZPhsdzKu -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:09 2026 by rpki-client