This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer (raw, json) Hash identifier: hKReKD91I/JmqB5AxSIkH75PnubLj6tv4IS0bNKkwbw= Subject key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FDB2D88B8EA24B2566560AB6D822E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.229.21.0/24 IP: 193.160.9.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:db:2d:88:b8:ea:24:b2:56:65:60:ab:6d:82:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:e0:dc:c5:a5:be:85:8d:62:76:2b:f7:38: 53:a5:6c:ae:32:d7:51:3c:e9:20:fe:e0:36:eb:3a: 0a:d9:12:73:cf:bd:d5:bd:b0:9a:f3:b8:68:6e:87: 49:a7:c1:ca:ee:55:1e:a8:5e:ec:f4:c4:23:c7:f2: b0:04:73:9c:ba:48:70:10:77:32:d5:0f:fb:e2:4b: fc:0e:86:fc:13:b4:3c:6a:c5:c1:c0:c3:11:3e:06: 4d:fb:6b:50:ff:af:de:db:c7:be:be:6d:31:a6:e9: 21:fb:b3:34:45:ae:b6:4a:a0:1d:c0:13:e3:bb:14: 7d:87:6a:b5:ce:37:63:6d:fc:79:1e:d9:f7:31:21: c5:a7:ed:30:89:f2:0c:44:34:11:99:ca:e3:b0:c9: 5b:d8:e2:ea:b8:b5:b9:9d:37:38:1b:e6:46:36:78: b0:ee:d1:5b:ed:26:48:80:5e:2a:2a:13:6c:72:22: 59:6a:82:af:b1:62:cb:29:39:47:68:c4:5a:20:29: 35:bb:1c:80:27:a4:d8:60:9f:f0:52:44:4f:e8:5e: 5f:ea:e2:ca:06:da:65:de:c5:8c:3b:1d:20:e1:88: 35:c3:48:51:25:10:e9:3e:5d:f9:7a:d1:d4:69:be: ca:8b:85:86:1b:fc:a2:2e:57:88:11:a6:79:67:b1: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.21.0/24 193.160.9.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:8b:79:f2:7e:a7:cc:90:d2:de:4e:eb:f5:aa:1d:aa:5a:f2: 44:32:9f:05:2d:70:f9:dc:5f:87:44:3f:8a:ac:b8:2f:ca:7d: 7b:74:5c:85:12:9b:5a:31:2b:24:62:c4:18:3e:6d:fe:00:7b: 96:ec:1c:f3:3f:fd:2c:bb:fa:f3:0c:b3:3e:4c:41:d8:82:da: dd:94:2b:74:92:56:1c:bc:f2:51:68:66:cf:eb:0a:fa:40:ba: 02:47:53:ca:b8:37:ba:af:3f:e9:4d:46:43:d7:97:b0:af:f6: 8d:5a:d2:21:f6:92:82:b2:ec:80:f2:9f:71:a6:80:9c:13:33: 9a:46:9a:aa:f2:36:7f:64:f1:69:22:54:71:1c:f0:88:a6:15: e4:a6:6b:01:ea:60:d0:5f:ec:4f:3d:33:5b:a6:9a:c2:bd:de: fb:70:5b:cc:8f:9c:ec:ef:b0:de:eb:07:8d:33:3d:1e:93:f6: 8d:5b:b7:4c:a5:c2:ab:92:c0:9b:72:20:3b:c5:0b:6b:c5:8b: 98:5e:8e:11:71:bc:62:48:e3:59:49:48:21:6f:42:4a:51:2c: 81:90:18:79:7e:83:93:d6:26:51:17:51:df:3d:ba:f0:3e:fb: b8:a1:21:ca:14:e5:92:6c:97:cb:01:f8:31:b0:e7:92:98:01: 51:a8:32:3c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8f9stiLjqJLJWZWCrbYIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTA0ZWJmOWRiMTcxMGE0N2JhZTQ1MDhjZGFmODEzMWUxNjc0YTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gbg3MWlvoWNYnYr9zhTpWyuMtdR POkg/uA26zoK2RJzz73VvbCa87hobodJp8HK7lUeqF7s9MQjx/KwBHOcukhwEHcy 1Q/74kv8Dob8E7Q8asXBwMMRPgZN+2tQ/6/e28e+vm0xpukh+7M0Ra62SqAdwBPj uxR9h2q1zjdjbfx5Htn3MSHFp+0wifIMRDQRmcrjsMlb2OLquLW5nTc4G+ZGNniw 7tFb7SZIgF4qKhNsciJZaoKvsWLLKTlHaMRaICk1uxyAJ6TYYJ/wUkRP6F5f6uLK Btpl3sWMOx0g4Yg1w0hRJRDpPl35etHUab7Ki4WGG/yiLleIEaZ5Z7Fl2wIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFIUE6/nbFxCke65FCM2vgTHhZ0pUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzdlZmUw MS1lYzc0LTQwYWMtYTIzOC1hOWIxZGY0NGNlMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvN2VmZTAx LWVjNzQtNDBhYy1hMjM4LWE5YjFkZjQ0Y2UyZi8xL2hRVHItZHNYRUtSN3JrVUl6 YS1CTWVGblNsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW+UVAwQAwaAJMA0GCSqGSIb3DQEBCwUAA4IB AQB6i3nyfqfMkNLeTuv1qh2qWvJEMp8FLXD53F+HRD+KrLgvyn17dFyFEptaMSsk YsQYPm3+AHuW7BzzP/0su/rzDLM+TEHYgtrdlCt0klYcvPJRaGbP6wr6QLoCR1PK uDe6rz/pTUZD15ewr/aNWtIh9pKCsuyA8p9xpoCcEzOaRpqq8jZ/ZPFpIlRxHPCI phXkpmsB6mDQX+xPPTNbpprCvd77cFvMj5zs77De6weNMz0ek/aNW7dMpcKrksCb ciA7xQtrxYuYXo4RcbxiSONZSUghb0JKUSyBkBh5foOT1iZRF1HfPbrwPvu4oSHK FOWSbJfLAfgxsOeSmAFRqDI8 -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:19 2026 by rpki-client