This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer File: hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer (raw, json) Hash identifier: 0BF9tIPC/gc+zbrjWMw8tPrSRK/uT6oPt/C7QqSdHWA= Subject key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA691F161ECA3720AE5FC0363642AE2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.14.180.0 -- 31.14.182.255 IP: 37.156.69.0 -- 37.156.70.255 IP: 45.81.169.0 -- 45.81.171.255 IP: 84.247.44.0/23 IP: 85.204.109.0/24 IP: 86.105.24.0/24 IP: 86.105.232.0/24 IP: 86.107.186.0/23 IP: 89.32.171.0/24 IP: 89.32.240.0/21 IP: 89.33.17.0/24 IP: 89.33.30.0/24 IP: 89.33.65.0/24 IP: 89.35.34.0/24 IP: 89.35.76.0/24 IP: 89.35.88.0/24 IP: 89.35.91.0/24 IP: 89.35.163.0/24 IP: 89.35.248.0/24 IP: 89.37.40.0/24 IP: 89.46.40.0/23 IP: 89.47.176.0 -- 89.47.178.255 IP: 89.47.180.0 -- 89.47.182.255 IP: 91.132.40.0/22 IP: 93.113.72.0/21 IP: 176.223.144.0/20 IP: 178.239.16.0/22 IP: 185.160.74.0/23 IP: 188.211.172.0/22 IP: 188.212.112.0/22 IP: 188.212.157.0/24 IP: 188.213.86.0 -- 188.213.95.255 IP: 188.240.70.0/24 IP: 193.164.216.0/23 IP: 194.145.194.0/23 IP: 217.148.134.0/23 IP: 2a00:bba0::/32 IP: 2a07:bac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:91:f1:61:ec:a3:72:0a:e5:fc:03:63:64:2a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:4b:4c:db:47:95:39:c5:18:49:f6:46:da: df:66:9d:aa:c7:54:bb:82:97:ea:39:ae:11:ba:a0: f4:18:03:3d:f8:c3:67:d9:56:84:20:ce:b5:72:02: a2:0b:a8:5c:d3:23:37:3b:70:9a:5a:60:76:a2:ea: c3:fe:d0:e2:8d:a8:e3:0d:4d:22:03:32:77:9c:9f: 58:c2:ee:c3:40:d7:43:d8:b4:96:3b:a5:59:c9:d5: 11:b8:29:8a:c2:dd:1f:95:95:ab:a8:bb:b2:31:ef: 35:1d:44:9f:23:93:c7:81:37:dc:ed:f8:d3:29:7b: e0:88:b3:e8:de:f1:f4:39:d8:91:7a:51:e5:f8:f1: 51:f6:58:47:a8:6d:d0:94:a6:c0:c3:71:a1:25:31: 8e:ec:f0:e0:95:13:0a:ae:59:71:6f:76:a5:f9:9b: 1e:75:d3:5d:98:36:2e:ad:e0:40:dd:8e:9d:db:c0: 92:3f:27:5b:d8:f0:0e:40:c2:47:0d:8a:cc:df:c7: 47:2b:90:8f:d1:38:38:ff:91:61:40:14:c9:0f:ed: a6:6a:9f:ce:f4:7f:5b:0d:8f:d3:ec:a3:9d:69:68: d4:ff:06:e8:b9:a8:42:86:b6:9e:15:8a:ac:74:3b: 7b:71:65:07:60:38:c3:de:c5:88:ba:fc:46:94:75: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.180.0-31.14.182.255 37.156.69.0-37.156.70.255 45.81.169.0-45.81.171.255 84.247.44.0/23 85.204.109.0/24 86.105.24.0/24 86.105.232.0/24 86.107.186.0/23 89.32.171.0/24 89.32.240.0/21 89.33.17.0/24 89.33.30.0/24 89.33.65.0/24 89.35.34.0/24 89.35.76.0/24 89.35.88.0/24 89.35.91.0/24 89.35.163.0/24 89.35.248.0/24 89.37.40.0/24 89.46.40.0/23 89.47.176.0-89.47.178.255 89.47.180.0-89.47.182.255 91.132.40.0/22 93.113.72.0/21 176.223.144.0/20 178.239.16.0/22 185.160.74.0/23 188.211.172.0/22 188.212.112.0/22 188.212.157.0/24 188.213.86.0-188.213.95.255 188.240.70.0/24 193.164.216.0/23 194.145.194.0/23 217.148.134.0/23 IPv6: 2a00:bba0::/32 2a07:bac0::/29 Signature Algorithm: sha256WithRSAEncryption 51:f9:60:86:9e:ae:ec:e9:a9:b4:a1:e0:7a:af:21:10:7b:ca: 0f:bb:6b:95:05:7a:fd:89:64:f1:66:08:15:d5:34:32:2e:35: 2f:a4:0a:b8:c6:cd:38:c1:67:27:79:1e:64:9c:b2:c0:0d:d5: ef:2e:3d:53:cb:bb:1a:87:d4:c2:3e:9d:b6:08:65:f0:42:21: 86:94:8f:fe:47:b4:b9:36:1e:a6:05:5f:ba:8b:d0:2d:94:99: f7:20:c8:d6:6a:d0:83:d2:85:3f:4c:3c:a6:20:95:c7:2b:2d: 7d:7a:0d:6b:ba:54:03:7f:41:23:8d:1a:f4:3d:64:79:8e:48: 11:98:3c:2b:4d:a4:be:66:b4:29:4a:0f:ea:ca:0b:0d:f2:38: fd:b1:75:95:60:17:76:4e:52:bb:27:0b:66:f9:81:2e:f6:18: 04:49:5f:6a:16:72:12:aa:1d:8b:cd:53:1b:29:a1:0a:ab:14: 06:76:c7:ff:99:b8:08:b1:52:c4:56:4b:af:df:bb:90:21:45: bc:67:1f:1d:97:05:f8:2d:1d:24:55:ed:7b:4e:8b:91:e9:e0: da:02:e7:d7:c8:18:3c:ca:29:af:b7:84:1d:eb:dc:8d:22:3b: 03:8a:df:ae:3b:df:a2:cd:a9:f6:2e:5d:7f:c8:f4:bd:fa:ef: 2f:fa:3a:7f -----BEGIN CERTIFICATE----- MIIGmjCCBYKgAwIBAgISAZt+ppHxYeyjcgrl/ANjZCriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGJmYzQ1MWZjNGYyNDExYWRkZDAwYTlmYmIxNzM0NmFkNmU4OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRFLTNtHlTnFGEn2RtrfZp2qx1S7 gpfqOa4RuqD0GAM9+MNn2VaEIM61cgKiC6hc0yM3O3CaWmB2ourD/tDijajjDU0i AzJ3nJ9Ywu7DQNdD2LSWO6VZydURuCmKwt0flZWrqLuyMe81HUSfI5PHgTfc7fjT KXvgiLPo3vH0OdiRelHl+PFR9lhHqG3QlKbAw3GhJTGO7PDglRMKrllxb3al+Zse ddNdmDYureBA3Y6d28CSPydb2PAOQMJHDYrM38dHK5CP0Tg4/5FhQBTJD+2map/O 9H9bDY/T7KOdaWjU/wbouahChraeFYqsdDt7cWUHYDjD3sWIuvxGlHUJ/wIDAQAB o4IDpjCCA6IwHQYDVR0OBBYEFIS/xFH8TyQRrd0Aqfuxc0atbomWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2I3YmU2 NC04NmQ0LTQ0M2ItOTY4Ni1mNjYzMTc5Nzc5NjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvYjdiZTY0 LTg2ZDQtNDQzYi05Njg2LWY2NjMxNzk3Nzk2OC8xL2hMX0VVZnhQSkJHdDNRQ3At N0Z6UnExdWlaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBPwYIKwYB BQUHAQcBAf8EggEuMIIBKjCCARAEAgABMIIBCDAMAwQCHw60AwQAHw62MAwDBAAl nEUDBAAlnEYwDAMEAC1RqQMEAi1RqAMEAVT3LAMEAFXMbQMEAFZpGAMEAFZp6AME AVZrugMEAFkgqwMEA1kg8AMEAFkhEQMEAFkhHgMEAFkhQQMEAFkjIgMEAFkjTAME AFkjWAMEAFkjWwMEAFkjowMEAFkj+AMEAFklKAMEAVkuKDAMAwQEWS+wAwQAWS+y MAwDBAJZL7QDBABZL7YDBAJbhCgDBANdcUgDBASw35ADBAKy7xADBAG5oEoDBAK8 06wDBAK81HADBAC81J0wDAMEAbzVVgMEBbzVQAMEALzwRgMEAcGk2AMEAcKRwgME AdmUhjAUBAIAAjAOAwUAKgC7oAMFAyoHusAwDQYJKoZIhvcNAQELBQADggEBAFH5 YIaeruzpqbSh4HqvIRB7yg+7a5UFev2JZPFmCBXVNDIuNS+kCrjGzTjBZyd5HmSc ssAN1e8uPVPLuxqH1MI+nbYIZfBCIYaUj/5HtLk2HqYFX7qL0C2UmfcgyNZq0IPS hT9MPKYglccrLX16DWu6VAN/QSONGvQ9ZHmOSBGYPCtNpL5mtClKD+rKCw3yOP2x dZVgF3ZOUrsnC2b5gS72GARJX2oWchKqHYvNUxspoQqrFAZ2x/+ZuAixUsRWS6/f u5AhRbxnHx2XBfgtHSRV7XtOi5Hp4NoC59fIGDzKKa+3hB3r3I0iOwOK364736LN qfYuXX/I9L367y/6On8= -----END CERTIFICATE-----Generated at Mon Jan 26 05:52:11 2026 by rpki-client