This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer File: hFxYdS8zNkIv8O4XJkdFkeekHl8.cer (raw, json) Hash identifier: 8alzIfeI1qHySo7f38l2da1HMlUkMsS1CguJ1JJnPHk= Subject key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF060AD1932BC1D65F08D0DC96635C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34624 AS: 215547 IP: 31.170.192.0/19 IP: 46.253.16.0/20 IP: 86.105.240.0/24 IP: 86.107.191.0/24 IP: 89.33.16.0/24 IP: 89.35.2.0/23 IP: 89.35.174.0/23 IP: 89.40.134.0/23 IP: 89.191.64.0/19 IP: 93.115.33.0/24 IP: 185.91.24.0/22 IP: 193.238.60.0/22 IP: 2a00:1930::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:60:ad:19:32:bc:1d:65:f0:8d:0d:c9:66:35:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=845c58752f3336422ff0ee1726474591e7a41e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:ed:a2:14:5b:af:4e:e9:c1:c6:6f:d6:2b: 82:10:94:e5:03:2d:e9:30:57:82:01:d3:3b:81:84: 0f:cf:d3:59:1e:ad:44:d7:6f:af:7e:62:9b:6f:2f: 2c:44:9a:2c:d4:13:d7:e5:65:99:5b:af:29:44:d2: dc:9c:be:0a:e4:30:57:3a:ac:3f:12:2b:2f:b9:b4: 8a:1c:4d:08:fd:56:ac:75:ca:6a:51:4f:40:77:79: 5d:c7:79:b9:25:c6:e8:b6:5b:d5:e4:53:03:12:df: 63:b9:ae:3e:b2:b2:44:79:39:40:e9:cf:d4:d7:25: 96:c8:b7:6c:a6:e3:de:0f:5d:73:69:c1:88:8d:65: 59:0a:cd:c5:04:88:f3:88:47:33:9e:f3:8f:86:dd: 88:c4:e8:cd:8d:b6:a0:64:df:0c:8b:48:7b:a4:81: 31:0f:a3:39:40:ba:ea:67:dc:c4:66:2a:1b:93:35: 22:0f:1b:9c:bd:5b:02:9f:9c:d1:d5:21:5c:8d:8a: 9a:27:ef:a2:33:d6:eb:d0:ad:f1:37:cd:a3:e0:f0: 7c:e3:91:0d:1b:85:57:59:9a:10:a5:c6:ff:45:86: 0a:50:e6:cb:4d:b8:8c:61:35:02:2e:dc:1f:1b:38: c6:a5:57:38:d6:33:bb:d2:02:33:80:f9:82:39:c1: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.192.0/19 46.253.16.0/20 86.105.240.0/24 86.107.191.0/24 89.33.16.0/24 89.35.2.0/23 89.35.174.0/23 89.40.134.0/23 89.191.64.0/19 93.115.33.0/24 185.91.24.0/22 193.238.60.0/22 IPv6: 2a00:1930::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34624 215547 Signature Algorithm: sha256WithRSAEncryption 37:ce:8a:8c:77:5c:c2:3a:18:7f:9c:43:28:6a:aa:a1:b4:d7: 87:20:a3:5a:07:f6:ac:1d:99:de:42:70:13:b9:04:12:d3:46: ab:0b:c4:18:f7:fc:1d:3f:4c:e8:3f:a8:8f:3a:0f:4a:24:1f: 2d:20:29:5b:5b:b0:68:20:fd:96:bc:c9:d3:d7:45:79:2d:7b: 69:08:4b:a6:33:77:6c:82:ee:64:06:5a:8a:bb:55:9c:ae:db: 03:56:2f:35:23:35:8a:d5:d7:68:56:2e:b7:c3:4f:73:b1:9c: 8a:87:c3:08:00:23:aa:24:9f:a8:8e:8e:a3:28:d5:7b:02:af: a4:09:29:77:4f:33:b8:b4:bc:3d:0a:76:25:80:ed:fc:48:15: c8:41:dd:a0:f4:ae:84:5e:f6:74:00:05:6e:af:88:f3:c1:c0: 5b:e4:49:1b:b8:08:12:24:7d:28:e2:32:3d:97:8e:8b:53:5b: d1:bf:29:80:82:67:21:e2:11:69:42:c2:97:8e:bd:48:84:8b: 7b:a9:ba:bd:75:c6:ab:bf:a1:fa:2c:58:db:43:64:35:4d:5e: 58:90:49:eb:ba:c3:f7:3a:95:97:8f:21:f0:48:63:f1:d1:62: 6b:d6:21:08:25:8d:92:43:6b:0c:9c:74:91:d2:c6:58:43:9b: f1:41:65:3c -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISAZt/8GCtGTK8HWXwjQ3JZjXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDVjNTg3NTJmMzMzNjQyMmZmMGVlMTcyNjQ3NDU5MWU3YTQxZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7PtohRbr07pwcZv1iuCEJTlAy3p MFeCAdM7gYQPz9NZHq1E12+vfmKbby8sRJos1BPX5WWZW68pRNLcnL4K5DBXOqw/ EisvubSKHE0I/VasdcpqUU9Ad3ldx3m5JcbotlvV5FMDEt9jua4+srJEeTlA6c/U 1yWWyLdspuPeD11zacGIjWVZCs3FBIjziEcznvOPht2IxOjNjbagZN8Mi0h7pIEx D6M5QLrqZ9zEZiobkzUiDxucvVsCn5zR1SFcjYqaJ++iM9br0K3xN82j4PB845EN G4VXWZoQpcb/RYYKUObLTbiMYTUCLtwfGzjGpVc41jO70gIzgPmCOcENvwIDAQAB o4IC9jCCAvIwHQYDVR0OBBYEFIRcWHUvMzZCL/DuFyZHRZHnpB5fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzY0ZTNh Yi0yMjhjLTRhMjMtOTIxNi1mMTM0ZTUxY2MwNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNjRlM2Fi LTIyOGMtNGEyMy05MjE2LWYxMzRlNTFjYzA1Yi8xL2hGeFlkUzh6TmtJdjhPNFhK a2RGa2Vla0hsOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF BwEHAQH/BGEwXzBOBAIAATBIAwQFH6rAAwQELv0QAwQAVmnwAwQAVmu/AwQAWSEQ AwQBWSMCAwQBWSOuAwQBWSiGAwQFWb9AAwQAXXMhAwQCuVsYAwQCwe48MA0EAgAC MAcDBQIqABkwMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCHQAIDA0n7MA0GCSqG SIb3DQEBCwUAA4IBAQA3zoqMd1zCOhh/nEMoaqqhtNeHIKNaB/asHZneQnATuQQS 00arC8QY9/wdP0zoP6iPOg9KJB8tIClbW7BoIP2WvMnT10V5LXtpCEumM3dsgu5k BlqKu1WcrtsDVi81IzWK1ddoVi63w09zsZyKh8MIACOqJJ+ojo6jKNV7Aq+kCSl3 TzO4tLw9CnYlgO38SBXIQd2g9K6EXvZ0AAVur4jzwcBb5EkbuAgSJH0o4jI9l46L U1vRvymAgmch4hFpQsKXjr1IhIt7qbq9dcarv6H6LFjbQ2Q1TV5YkEnrusP3OpWX jyHwSGPx0WJr1iEIJY2SQ2sMnHSR0sZYQ5vxQWU8 -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:39 2026 by rpki-client