This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer File: hJICE8sjC_5REhzl-03s4oAYvtA.cer (raw, json) Hash identifier: 1jYknI0hTgpY8mo4DOTGi5RY2Q8mW8O0A4+gXPMkFBw= Subject key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C702287D299B2DE375F986EB600AE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207051 IP: 185.140.68.0/22 IP: 2a0d:bd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:02:28:7d:29:9b:2d:e3:75:f9:86:eb:60:0a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84920213cb230bfe51121ce5fb4dece28018bed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:ad:c6:fa:f3:c5:ff:7c:87:f0:dc:bb:d3: f0:0e:3d:b9:08:45:dc:f1:96:da:17:03:3b:6e:fa: 12:bb:c4:6b:10:5c:00:5f:d1:a9:41:19:bd:f1:20: 98:1e:39:65:71:d6:e1:6f:0b:79:6a:5a:d0:83:d2: a4:81:e4:4c:21:3f:04:37:c6:0d:c0:a9:26:73:b1: dd:6b:2a:ba:7f:8a:6e:5b:da:bf:50:48:82:ee:ca: df:63:42:c9:b4:dd:3c:a4:8e:73:de:fe:f6:e8:93: 41:bc:f5:e9:ed:6f:24:31:02:b0:51:85:8f:86:39: 91:b9:d9:6f:a4:d6:08:96:7a:4d:83:6a:42:3f:bf: 8e:af:46:d2:7b:b6:09:54:6a:56:e4:9e:ff:59:86: 60:ca:99:24:e8:41:66:26:46:c8:5a:65:97:69:84: 45:89:cc:d7:52:65:c0:cd:a8:de:04:3f:ad:e8:5d: 63:3d:79:27:b1:ee:bc:29:4a:8a:6a:a5:d9:ba:02: ad:2d:29:df:ae:31:81:23:5b:f4:10:af:eb:84:98: c6:4e:f3:a9:e6:e6:05:21:16:c6:52:91:bd:a3:0e: fa:e1:bd:b8:c6:99:da:a2:b7:e7:eb:23:7a:1d:30: c1:5c:ba:10:f1:48:ad:6e:30:15:1c:8b:95:8f:ac: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.68.0/22 IPv6: 2a0d:bd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207051 Signature Algorithm: sha256WithRSAEncryption 84:10:85:06:7f:ae:3b:2e:cf:12:82:95:38:08:db:2f:bd:d2: 61:66:bc:3a:f7:04:15:04:8d:9a:15:39:7d:db:74:a9:6b:65: af:68:06:bf:b2:fd:0b:a3:01:ff:fa:87:e0:ed:a4:77:07:00: fe:18:fa:eb:d4:e0:2e:cb:b0:c7:b3:5b:0e:4e:87:ce:be:d1: 50:91:38:64:ff:d1:33:1e:86:cf:71:e8:40:a0:84:d1:e8:ec: 17:93:31:ae:51:9a:78:de:b9:db:1e:c0:25:aa:4b:ac:b1:1a: 4b:ee:dd:67:44:62:4d:8e:9a:4c:cb:23:33:9d:09:43:5d:63: 1a:5d:fa:e7:f9:0f:2d:05:c4:e3:c5:ed:f0:7f:50:ed:38:78: ee:c0:02:88:a1:4a:97:ca:70:e0:b5:2d:85:b1:a9:e1:fa:99: d9:37:14:3c:38:bf:95:ff:99:65:9a:d5:45:15:a6:97:69:6b: 6e:e3:bb:2d:ab:41:28:0e:e5:3e:09:e1:aa:97:d0:9c:24:25: 70:d7:56:c8:94:7d:35:66:8f:26:fd:84:cb:57:23:68:af:74: b0:cc:92:d7:2a:85:7d:10:20:ad:8c:e0:5d:b0:ee:b3:6d:4f: 87:e1:1c:58:40:18:02:82:aa:49:16:70:13:16:e8:b0:31:59: 33:ba:60:3e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xwIofSmbLeN1+YbrYArpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDkyMDIxM2NiMjMwYmZlNTExMjFjZTVmYjRkZWNlMjgwMThiZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUKtxvrzxf98h/Dcu9PwDj25CEXc 8ZbaFwM7bvoSu8RrEFwAX9GpQRm98SCYHjllcdbhbwt5alrQg9KkgeRMIT8EN8YN wKkmc7Hdayq6f4puW9q/UEiC7srfY0LJtN08pI5z3v726JNBvPXp7W8kMQKwUYWP hjmRudlvpNYIlnpNg2pCP7+Or0bSe7YJVGpW5J7/WYZgypkk6EFmJkbIWmWXaYRF iczXUmXAzajeBD+t6F1jPXknse68KUqKaqXZugKtLSnfrjGBI1v0EK/rhJjGTvOp 5uYFIRbGUpG9ow764b24xpnaorfn6yN6HTDBXLoQ8UitbjAVHIuVj6wzqwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFISSAhPLIwv+URIc5ftN7OKAGL7QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyL2E4YTA5 Yy0wZjg0LTRhODktOGExNi1iMDRiNGQwNDNmOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvYThhMDlj LTBmODQtNGE4OS04YTE2LWIwNGI0ZDA0M2Y5Zi8xL2hKSUNFOHNqQ181UkVoemwt MDNzNG9BWXZ0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYxEMA0EAgACMAcDBQMqDb0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMoyzANBgkqhkiG9w0BAQsFAAOCAQEAhBCFBn+uOy7P EoKVOAjbL73SYWa8OvcEFQSNmhU5fdt0qWtlr2gGv7L9C6MB//qH4O2kdwcA/hj6 69TgLsuwx7NbDk6Hzr7RUJE4ZP/RMx6Gz3HoQKCE0ejsF5MxrlGaeN652x7AJapL rLEaS+7dZ0RiTY6aTMsjM50JQ11jGl365/kPLQXE48Xt8H9Q7Th47sACiKFKl8pw 4LUthbGp4fqZ2TcUPDi/lf+ZZZrVRRWml2lrbuO7LatBKA7lPgnhqpfQnCQlcNdW yJR9NWaPJv2Ey1cjaK90sMyS1yqFfRAgrYzgXbDus21Ph+EcWEAYAoKqSRZwExbo sDFZM7pgPg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:49 2026 by rpki-client