This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer File: hAfwBj7przHYfP5lubwZPrQsiWk.cer (raw, json) Hash identifier: LCq3Oz1ZLXy5QyKauass7B/ZJSTALkxTkjKlIwzngns= Subject key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8040F078236A76038DCC4C3739373A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.223.210.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:40:f0:78:23:6a:76:03:8d:cc:4c:37:39:37:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d5:cf:69:33:99:9e:65:8f:c2:2c:a1:b3:60: fb:6c:ef:9d:5f:9b:b9:53:0f:a5:9f:14:bb:0d:3a: 74:01:c4:9c:38:1a:a8:a1:a6:b2:73:af:94:ec:4e: 68:d7:f0:42:07:ad:ad:96:cf:9b:75:e7:9d:ed:a0: aa:46:d0:f0:0e:c9:4f:10:9b:3f:9b:ac:ec:e2:31: c1:c0:2d:dd:cd:89:39:4c:84:4e:ed:35:aa:3a:67: 38:c1:68:26:f9:a9:11:d4:22:f6:66:bc:de:62:91: e5:20:f9:00:e2:d9:c9:5d:1b:71:96:9b:48:28:1b: 8b:b1:62:ca:19:89:01:81:52:01:e7:f6:86:41:9c: bc:82:ba:c9:c7:a4:d0:d0:ef:64:a4:d7:13:0c:59: a9:01:dc:f6:a0:dd:6c:e0:0e:16:d5:c9:c9:73:99: eb:97:d9:39:8c:fa:40:8f:5a:da:f5:b1:a7:9c:11: c1:54:4d:e1:be:c2:4a:9a:78:87:2b:92:6f:69:e1: 09:d0:9a:4b:5b:c9:6d:86:63:16:84:43:13:88:08: dc:d1:f3:20:55:9e:e3:91:cd:48:46:03:07:ce:e1: 43:40:67:59:ee:ba:82:34:bb:d9:8b:35:51:1a:57: 97:78:7a:79:25:1f:0a:5d:bc:ea:d9:f8:95:11:5b: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.210.0/24 Signature Algorithm: sha256WithRSAEncryption 21:11:26:d4:be:98:67:b3:8c:90:bf:ee:9b:65:d2:50:87:6b: 38:45:89:56:b3:38:b8:c4:e4:26:a4:a2:b9:40:a5:99:66:1c: 6c:ef:61:b0:ed:70:20:f0:34:81:4c:8e:5f:b7:03:d3:35:b5: b1:d9:26:d4:ef:37:dc:02:af:f0:80:f8:25:81:62:ee:80:2b: a2:4a:f3:10:49:9f:46:57:04:74:85:eb:2e:f5:d5:64:c3:4d: 4d:6c:af:bc:db:af:94:15:70:43:d6:fa:ed:85:87:2a:a7:a3: 5c:08:0d:51:e6:48:ba:7b:73:4c:c9:15:50:67:0a:ed:33:fb: c3:b2:23:7b:96:59:67:bf:96:50:a2:84:3a:56:7f:79:af:b1: 56:30:1e:5e:a9:f4:c5:be:25:74:fc:fe:3a:63:98:2e:30:3c: 0f:18:27:d1:83:49:e8:a4:47:ec:60:b1:d8:e8:eb:13:eb:9e: 7a:e3:b3:e3:09:f0:2a:bc:e0:9b:ab:db:6c:d4:2c:8e:93:47: 48:2e:48:88:a7:cc:39:63:c2:09:82:df:41:b8:c9:36:e4:7d: cc:03:54:fb:b3:5f:b5:91:d2:4c:a5:5a:7e:7b:31:37:d4:7d: 50:68:29:b8:31:c2:87:5d:89:ca:b5:a9:a2:ae:e3:d6:61:87: ae:fc:f8:b1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gEDweCNqdgONzEw3OTc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDA3ZjAwNjNlZTlhZjMxZDg3Y2ZlNjViOWJjMTkzZWI0MmM4OTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9XPaTOZnmWPwiyhs2D7bO+dX5u5 Uw+lnxS7DTp0AcScOBqooaayc6+U7E5o1/BCB62tls+bdeed7aCqRtDwDslPEJs/ m6zs4jHBwC3dzYk5TIRO7TWqOmc4wWgm+akR1CL2ZrzeYpHlIPkA4tnJXRtxlptI KBuLsWLKGYkBgVIB5/aGQZy8grrJx6TQ0O9kpNcTDFmpAdz2oN1s4A4W1cnJc5nr l9k5jPpAj1ra9bGnnBHBVE3hvsJKmniHK5JvaeEJ0JpLW8lthmMWhEMTiAjc0fMg VZ7jkc1IRgMHzuFDQGdZ7rqCNLvZizVRGleXeHp5JR8KXbzq2fiVEVtefwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzY1N2M1 OS1lM2I5LTQwNGYtYWZhYi1lMWVmY2YyZWQwYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNjU3YzU5 LWUzYjktNDA0Zi1hZmFiLWUxZWZjZjJlZDBhNy8xL2hBZndCajdwcnpIWWZQNWx1 YndaUHJRc2lXay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9/SMA0GCSqGSIb3DQEBCwUAA4IBAQAhESbU vphns4yQv+6bZdJQh2s4RYlWszi4xOQmpKK5QKWZZhxs72Gw7XAg8DSBTI5ftwPT NbWx2SbU7zfcAq/wgPglgWLugCuiSvMQSZ9GVwR0hesu9dVkw01NbK+826+UFXBD 1vrthYcqp6NcCA1R5ki6e3NMyRVQZwrtM/vDsiN7lllnv5ZQooQ6Vn95r7FWMB5e qfTFviV0/P46Y5guMDwPGCfRg0nopEfsYLHY6OsT655647PjCfAqvOCbq9ts1CyO k0dILkiIp8w5Y8IJgt9BuMk25H3MA1T7s1+1kdJMpVp+ezE31H1QaCm4McKHXYnK tamiruPWYYeu/Pix -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:22 2026 by rpki-client