This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer File: hFwjee_tEAVs-GXVLDLh4euowUA.cer (raw, json) Hash identifier: wro2zO5uczqDTDdD6gum9Nz3Uv7dMEPhUMCYeMmzY9g= Subject key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF27C4595EB0E0C4CB3BE62360A6BE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20845 AS: 207070 AS: 209061 IP: 62.77.196.0/22 IP: 62.77.240.0/23 IP: 62.77.248.0/21 IP: 62.165.192.0/18 IP: 77.234.64.0/19 IP: 78.131.0.0/17 IP: 79.120.160.0/21 IP: 79.120.170.0 -- 79.120.175.255 IP: 79.120.248.0/23 IP: 79.120.252.0/22 IP: 80.95.64.0/19 IP: 81.0.82.0 -- 81.0.87.255 IP: 81.0.90.0 -- 81.0.95.255 IP: 81.0.98.0/23 IP: 81.0.108.0/23 IP: 81.0.122.0/23 IP: 81.0.126.0/23 IP: 81.17.176.0/20 IP: 82.131.128.0/19 IP: 82.131.182.0 -- 82.131.191.255 IP: 82.131.196.0 -- 82.131.198.255 IP: 82.131.200.0/21 IP: 82.131.216.0 -- 82.131.255.255 IP: 82.144.164.0/22 IP: 82.144.172.0 -- 82.144.177.255 IP: 82.144.188.0/23 IP: 84.21.180.0/22 IP: 84.236.0.0/17 IP: 85.66.0.0/15 IP: 85.238.64.0/19 IP: 87.97.0.0/18 IP: 87.97.80.0 -- 87.97.127.255 IP: 89.147.64.0/20 IP: 89.147.96.0/22 IP: 89.147.112.0/21 IP: 89.148.64.0/18 IP: 89.186.96.0/23 IP: 89.186.102.0/23 IP: 89.186.106.0 -- 89.186.115.255 IP: 89.186.118.0 -- 89.186.127.255 IP: 91.82.0.0/21 IP: 91.82.24.0 -- 91.82.39.255 IP: 91.82.56.0/23 IP: 91.82.60.0/23 IP: 91.82.64.0/21 IP: 91.82.82.0/23 IP: 91.82.130.0 -- 91.82.147.255 IP: 91.82.160.0 -- 91.82.173.255 IP: 91.82.176.0/21 IP: 91.82.188.0/22 IP: 91.82.210.0 -- 91.82.215.255 IP: 91.82.228.0 -- 91.82.235.255 IP: 91.82.240.0/22 IP: 91.82.250.0/23 IP: 91.83.0.0 -- 91.83.39.255 IP: 91.83.52.0/22 IP: 91.83.94.0/23 IP: 91.83.102.0/23 IP: 91.83.110.0/23 IP: 91.83.120.0/23 IP: 91.83.136.0 -- 91.83.145.255 IP: 91.83.154.0/23 IP: 91.83.180.0 -- 91.83.207.255 IP: 91.83.252.0/23 IP: 92.52.224.0/19 IP: 92.245.64.0/19 IP: 92.249.128.0/17 IP: 94.21.0.0/16 IP: 94.247.88.0/21 IP: 176.241.0.0/18 IP: 178.164.128.0/17 IP: 185.29.80.0/22 IP: 185.62.128.0/22 IP: 188.142.128.0/19 IP: 188.143.0.0/17 IP: 193.110.56.0/21 IP: 193.226.192.0/23 IP: 193.226.212.0/22 IP: 193.226.226.0/23 IP: 193.226.232.0/23 IP: 193.226.238.0 -- 193.226.241.255 IP: 193.226.244.0 -- 193.226.249.255 IP: 195.38.96.0/19 IP: 212.40.64.0/19 IP: 213.197.72.0 -- 213.197.95.255 IP: 217.197.176.0/20 IP: 2a01:368::/29 IP: 2a02:780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:7c:45:95:eb:0e:0c:4c:b3:be:62:36:0a:6b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:94:e6:dd:0f:89:42:02:ec:5d:11:50:f6: d1:e5:5e:97:57:5d:4e:3e:c6:cf:78:31:00:c0:ed: ce:19:78:2f:b3:28:ce:a9:1a:f8:f0:83:f0:6c:9d: 9e:8a:d3:8b:b7:98:07:9e:b6:0c:bf:12:eb:27:e2: 87:e5:40:64:63:f4:03:a3:a0:c8:1d:77:e6:30:a2: 5c:49:21:95:34:cf:1b:90:73:82:9c:07:94:25:7f: 05:19:92:18:48:04:66:8b:50:f0:15:1a:b8:56:26: 19:9a:c2:8e:b2:57:e9:15:77:3f:14:c6:0c:39:73: 35:e9:e1:40:a9:b6:77:46:6f:6e:23:e6:00:da:12: 7a:28:34:18:54:16:ec:06:24:78:61:f2:09:56:ef: d9:0f:6c:02:7c:66:07:ba:a1:bd:8f:4b:87:cd:f6: 54:bc:3d:63:fb:8e:f6:aa:da:44:91:00:5d:02:12: b0:c7:a0:12:7b:a7:50:68:f6:0d:5f:e2:f9:f1:9b: a1:4e:38:8c:fd:33:5c:a5:95:f8:08:aa:ac:1c:32: 58:ad:6e:9c:4b:56:09:fd:32:55:a0:ba:09:a5:58: 4d:35:aa:7c:9b:f2:4f:42:1e:22:a8:d0:94:91:81: ec:e0:92:72:15:57:0e:92:1c:dc:84:05:c0:31:b6: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.196.0/22 62.77.240.0/23 62.77.248.0/21 62.165.192.0/18 77.234.64.0/19 78.131.0.0/17 79.120.160.0/21 79.120.170.0-79.120.175.255 79.120.248.0/23 79.120.252.0/22 80.95.64.0/19 81.0.82.0-81.0.87.255 81.0.90.0-81.0.95.255 81.0.98.0/23 81.0.108.0/23 81.0.122.0/23 81.0.126.0/23 81.17.176.0/20 82.131.128.0/19 82.131.182.0-82.131.191.255 82.131.196.0-82.131.198.255 82.131.200.0/21 82.131.216.0-82.131.255.255 82.144.164.0/22 82.144.172.0-82.144.177.255 82.144.188.0/23 84.21.180.0/22 84.236.0.0/17 85.66.0.0/15 85.238.64.0/19 87.97.0.0/18 87.97.80.0-87.97.127.255 89.147.64.0/20 89.147.96.0/22 89.147.112.0/21 89.148.64.0/18 89.186.96.0/23 89.186.102.0/23 89.186.106.0-89.186.115.255 89.186.118.0-89.186.127.255 91.82.0.0/21 91.82.24.0-91.82.39.255 91.82.56.0/23 91.82.60.0/23 91.82.64.0/21 91.82.82.0/23 91.82.130.0-91.82.147.255 91.82.160.0-91.82.173.255 91.82.176.0/21 91.82.188.0/22 91.82.210.0-91.82.215.255 91.82.228.0-91.82.235.255 91.82.240.0/22 91.82.250.0/23 91.83.0.0-91.83.39.255 91.83.52.0/22 91.83.94.0/23 91.83.102.0/23 91.83.110.0/23 91.83.120.0/23 91.83.136.0-91.83.145.255 91.83.154.0/23 91.83.180.0-91.83.207.255 91.83.252.0/23 92.52.224.0/19 92.245.64.0/19 92.249.128.0/17 94.21.0.0/16 94.247.88.0/21 176.241.0.0/18 178.164.128.0/17 185.29.80.0/22 185.62.128.0/22 188.142.128.0/19 188.143.0.0/17 193.110.56.0/21 193.226.192.0/23 193.226.212.0/22 193.226.226.0/23 193.226.232.0/23 193.226.238.0-193.226.241.255 193.226.244.0-193.226.249.255 195.38.96.0/19 212.40.64.0/19 213.197.72.0-213.197.95.255 217.197.176.0/20 IPv6: 2a01:368::/29 2a02:780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20845 207070 209061 Signature Algorithm: sha256WithRSAEncryption 62:b9:db:ec:40:3e:21:84:81:f1:89:79:9b:0a:9c:5e:da:a7: 10:68:30:11:17:bb:90:ac:31:84:5c:65:3e:eb:7b:cc:df:df: 3b:18:34:dd:7f:87:e4:f4:bc:a8:60:e2:24:e7:62:af:03:78: 3d:fd:1b:c2:75:32:0e:96:05:ae:b0:11:1e:04:92:8a:d3:fa: 97:a9:0d:1a:03:83:7f:ce:80:39:c4:b3:3e:31:63:89:1f:c8: 30:eb:31:69:93:05:cc:30:5f:68:9c:49:81:17:d4:44:78:eb: 5e:0d:0a:dc:70:8a:6d:d1:c6:f5:09:b3:40:bf:51:a8:60:f6: b3:a9:89:18:57:fc:31:79:b0:f1:1b:21:1d:61:7e:eb:af:0c: 05:98:48:11:41:a1:12:75:ca:6e:76:4b:fa:b1:79:ca:4f:8d: ce:ae:31:88:04:d9:85:c7:f8:c0:32:68:95:54:6c:90:ab:ef: 95:0c:45:91:fe:a9:67:a7:66:68:26:31:e2:9d:ca:bc:0d:1e: 3e:10:7c:8f:9a:2d:46:89:d8:f0:d3:06:cb:b6:60:de:eb:c3: fa:3f:52:be:97:27:1f:93:c4:2c:91:5c:e2:9f:41:fe:b6:d7: 04:34:40:54:d1:2f:42:aa:00:bd:f4:98:3a:c5:0a:78:3a:e5: e1:cb:9c:a0 -----BEGIN CERTIFICATE----- MIIIXzCCB0egAwIBAgISAZt/8nxFlesODEyzvmI2CmvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDVjMjM3OWVmZWQxMDA1NmNmODY1ZDUyYzMyZTFlMWViYThjMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHqU5t0PiUIC7F0RUPbR5V6XV11O PsbPeDEAwO3OGXgvsyjOqRr48IPwbJ2eitOLt5gHnrYMvxLrJ+KH5UBkY/QDo6DI HXfmMKJcSSGVNM8bkHOCnAeUJX8FGZIYSARmi1DwFRq4ViYZmsKOslfpFXc/FMYM OXM16eFAqbZ3Rm9uI+YA2hJ6KDQYVBbsBiR4YfIJVu/ZD2wCfGYHuqG9j0uHzfZU vD1j+472qtpEkQBdAhKwx6ASe6dQaPYNX+L58ZuhTjiM/TNcpZX4CKqsHDJYrW6c S1YJ/TJVoLoJpVhNNap8m/JPQh4iqNCUkYHs4JJyFVcOkhzchAXAMbYaCwIDAQAB o4IFazCCBWcwHQYDVR0OBBYEFIRcI3nv7RAFbPhl1Swy4eHrqMFAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzYwZThm YS1lYzVjLTQ1OTQtOWVjNC1iZTdhMWEwMDFjY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvNjBlOGZh LWVjNWMtNDU5NC05ZWM0LWJlN2ExYTAwMWNjZi8xL2hGd2plZV90RUFWcy1HWFZM RExoNGV1b3dVQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIC3wYIKwYB BQUHAQcBAf8EggLOMIICyjCCArAEAgABMIICqAMEAj5NxAMEAT5N8AMEAz5N+AME Bj6lwAMEBU3qQAMEB06DAAMEA094oDAMAwQBT3iqAwQET3igAwQBT3j4AwQCT3j8 AwQFUF9AMAwDBAFRAFIDBANRAFAwDAMEAVEAWgMEBVEAQAMEAVEAYgMEAVEAbAME AVEAegMEAVEAfgMEBFERsAMEBVKDgDAMAwQBUoO2AwQGUoOAMAwDBAJSg8QDBABS g8YDBANSg8gwCwMEA1KD2AMDAlKAAwQCUpCkMAwDBAJSkKwDBAFSkLADBAFSkLwD BAJUFbQDBAdU7AADAwFVQgMEBVXuQAMEBldhADAMAwQEV2FQAwQHV2EAAwQEWZNA AwQCWZNgAwQDWZNwAwQGWZRAAwQBWbpgAwQBWbpmMAwDBAFZumoDBAJZunAwDAME AVm6dgMEB1m6AAMEA1tSADAMAwQDW1IYAwQDW1IgAwQBW1I4AwQBW1I8AwQDW1JA AwQBW1JSMAwDBAFbUoIDBAJbUpAwDAMEBVtSoAMEAVtSrAMEA1tSsAMEAltSvDAM AwQBW1LSAwQDW1LQMAwDBAJbUuQDBAJbUugDBAJbUvADBAFbUvowCwMDAFtTAwQD W1MgAwQCW1M0AwQBW1NeAwQBW1NmAwQBW1NuAwQBW1N4MAwDBANbU4gDBAFbU5AD BAFbU5owDAMEAltTtAMEBFtTwAMEAVtT/AMEBVw04AMEBVz1QAMEB1z5gAMDAF4V AwQDXvdYAwQGsPEAAwQHsqSAAwQCuR1QAwQCuT6AAwQFvI6AAwQHvI8AAwQDwW44 AwQBweLAAwQCweLUAwQBweLiAwQBweLoMAwDBAHB4u4DBAHB4vAwDAMEAsHi9AME AcHi+AMEBcMmYAMEBdQoQDAMAwQD1cVIAwQF1cVAAwQE2cWwMBQEAgACMA4DBQMq AQNoAwUDKgIHgDAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgJRbQIDAyjeAgMDMKUw DQYJKoZIhvcNAQELBQADggEBAGK52+xAPiGEgfGJeZsKnF7apxBoMBEXu5CsMYRc ZT7re8zf3zsYNN1/h+T0vKhg4iTnYq8DeD39G8J1Mg6WBa6wER4EkorT+pepDRoD g3/OgDnEsz4xY4kfyDDrMWmTBcwwX2icSYEX1ER4614NCtxwim3RxvUJs0C/Uahg 9rOpiRhX/DF5sPEbIR1hfuuvDAWYSBFBoRJ1ym52S/qxecpPjc6uMYgE2YXH+MAy aJVUbJCr75UMRZH+qWenZmgmMeKdyrwNHj4QfI+aLUaJ2PDTBsu2YN7rw/o/Ur6X Jx+TxCyRXOKfQf621wQ0QFTRL0KqAL30mDrFCng65eHLnKA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:32 2026 by rpki-client