This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer File: hMFxArbpLikuyKyvZZ48KQqNC2g.cer (raw, json) Hash identifier: rdOdkKDBUL180e4E+K+1qwnP8N9GRvPeWhD1WLpEmHI= Subject key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A915FCFCBE509EDC6EBAFC6EB76CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212752 IP: 45.90.80.0/22 IP: 91.240.165.0/24 IP: 2a10:b480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:91:5f:cf:cb:e5:09:ed:c6:eb:af:c6:eb:76:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:92:50:d6:9a:bf:08:e5:35:72:60:68:c9: f4:00:f7:2d:f0:08:bf:c8:0b:a3:20:6a:69:d5:be: 71:ff:80:ea:3f:42:3b:ba:17:1a:0a:a8:10:a9:f0: db:ce:a6:9e:7e:41:b0:c8:95:6a:f4:0b:fb:9e:88: 5a:a7:92:1a:42:02:da:11:8d:25:2e:39:a0:0e:4e: 3c:ef:08:a2:03:66:f5:31:0f:72:e2:1e:51:3e:1f: bb:e5:2a:b3:19:e4:2a:7f:8f:c1:58:8f:2c:24:41: 01:da:a5:18:ad:8a:50:38:82:9f:25:6a:3c:a6:26: f7:e9:a4:0c:5f:9c:50:43:9d:ca:06:5a:e2:67:d2: fc:85:91:30:57:22:8b:f0:0a:a2:db:1a:42:97:70: 97:47:b4:28:6d:cb:7e:7c:1e:43:bb:f2:c7:28:81: ec:06:9a:62:60:69:05:92:c3:83:19:39:ad:4d:20: 36:16:4c:19:d4:41:75:57:ac:22:eb:0c:1d:2f:80: b9:73:77:55:61:2a:17:c0:0d:28:a9:f7:f5:f1:46: 31:23:59:46:68:7f:c8:60:f2:a3:b6:97:f0:f6:9d: 60:dc:83:1b:fd:6f:a2:40:ed:8c:4f:6e:8f:e9:a6: ab:42:80:ff:d9:86:f7:05:10:5a:38:12:90:3c:cb: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.80.0/22 91.240.165.0/24 IPv6: 2a10:b480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212752 Signature Algorithm: sha256WithRSAEncryption 47:56:a2:32:04:41:f7:32:ee:6f:57:4f:70:6d:34:6d:c0:cc: 32:5c:4d:8a:ac:9c:83:aa:f5:e9:fd:8a:7e:3d:fc:ed:60:16: 44:00:5b:c6:68:03:8f:39:dd:4b:8a:fb:4e:0e:9c:f5:7f:35: cb:74:07:db:f8:84:94:25:1b:56:c7:1a:3a:96:f0:9a:d4:9e: a6:bc:1b:77:98:d6:50:d9:14:67:90:56:38:e8:76:80:6c:d5: 45:1a:59:d3:5b:77:ca:26:b0:b2:ec:8b:85:9a:5f:1c:a9:7a: a7:a8:a0:f8:35:e1:d3:b2:97:d4:fb:dd:98:aa:16:4c:49:f1: 9c:33:7d:4b:c2:de:6a:f6:34:b9:00:ed:5a:65:fb:21:92:45: d7:50:1d:c1:ae:24:56:2a:00:c0:fd:4a:f7:b3:c3:dc:44:a9: 8c:04:cb:8d:34:c8:27:f6:f8:fb:2a:76:e3:48:fc:40:4b:b4: 4b:fb:87:b9:cf:39:c0:ec:f9:91:ea:90:3a:c0:0d:a3:69:f1: ba:95:9c:a5:ee:92:6a:6d:96:51:e7:cb:c7:cc:b2:3d:8a:00: 63:16:50:e8:95:66:1b:6d:0f:78:83:dd:aa:ef:5d:90:3a:92: 47:8a:9b:40:68:69:c0:59:77:35:b3:98:5e:65:d4:c7:59:1d: 1a:07:63:3f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6WpFfz8vlCe3G66/G63bPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGMxNzEwMmI2ZTkyZTI5MmVjOGFjYWY2NTllM2MyOTBhOGQwYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D+SUNaavwjlNXJgaMn0APct8Ai/ yAujIGpp1b5x/4DqP0I7uhcaCqgQqfDbzqaefkGwyJVq9Av7nohap5IaQgLaEY0l LjmgDk487wiiA2b1MQ9y4h5RPh+75SqzGeQqf4/BWI8sJEEB2qUYrYpQOIKfJWo8 pib36aQMX5xQQ53KBlriZ9L8hZEwVyKL8Aqi2xpCl3CXR7Qobct+fB5Du/LHKIHs BppiYGkFksODGTmtTSA2FkwZ1EF1V6wi6wwdL4C5c3dVYSoXwA0oqff18UYxI1lG aH/IYPKjtpfw9p1g3IMb/W+iQO2MT26P6aarQoD/2Yb3BRBaOBKQPMtBHwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFITBcQK26S4pLsisr2WePCkKjQtoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzZkNTY5 ZC1jNDRiLTRjMzQtYTE1OS1kNTgzZjlhNjZlM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvNmQ1Njlk LWM0NGItNGMzNC1hMTU5LWQ1ODNmOWE2NmUzYi8xL2hNRnhBcmJwTGlrdXlLeXZa WjQ4S1FxTkMyZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLVpQAwQAW/ClMA0EAgACMAcDBQMqELSAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/EDANBgkqhkiG9w0BAQsFAAOCAQEAR1ai MgRB9zLub1dPcG00bcDMMlxNiqycg6r16f2Kfj387WAWRABbxmgDjzndS4r7Tg6c 9X81y3QH2/iElCUbVscaOpbwmtSeprwbd5jWUNkUZ5BWOOh2gGzVRRpZ01t3yiaw suyLhZpfHKl6p6ig+DXh07KX1PvdmKoWTEnxnDN9S8LeavY0uQDtWmX7IZJF11Ad wa4kVioAwP1K97PD3ESpjATLjTTIJ/b4+yp240j8QEu0S/uHuc85wOz5keqQOsAN o2nxupWcpe6Sam2WUefLx8yyPYoAYxZQ6JVmG20PeIPdqu9dkDqSR4qbQGhpwFl3 NbOYXmXUx1kdGgdjPw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:04:45 2026 by rpki-client