This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer (raw, json) Hash identifier: wWY40/dmCKUvHeDyxc/CRlewAiqYu6z0vU2oE/CFVgg= Subject key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3C06269D533AEF3EEB386C8AE4D73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.57.248.0/22 IP: 5.183.240.0/22 IP: 45.11.240.0/22 IP: 45.14.80.0/22 IP: 45.80.96.0/22 IP: 45.85.128.0/22 IP: 45.86.24.0/22 IP: 45.90.204.0/22 IP: 45.129.220.0/22 IP: 45.158.192.0/22 IP: 92.119.24.0/22 IP: 171.22.60.0/22 IP: 185.45.92.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c0:62:69:d5:33:ae:f3:ee:b3:86:c8:ae:4d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:13:72:1d:ba:db:21:bb:3c:a4:d8:0d:3c: 3f:54:0f:93:93:a1:a9:5d:fc:d6:d6:11:bf:d1:20: 61:54:fb:55:ee:38:f6:0f:6b:32:b2:bb:6b:7e:d1: dd:40:f6:69:28:fb:69:fc:10:97:78:4e:a9:d4:2b: 13:85:24:24:26:75:ed:5c:73:09:ea:a8:b5:95:7d: 3a:69:e3:6e:bf:f7:34:69:c4:e8:75:7c:cb:8e:d0: 8b:88:6f:f1:30:2e:b7:f2:8c:02:79:6f:30:53:b6: 10:e4:13:f0:0b:ad:25:55:60:18:51:de:de:b4:f6: c1:00:c8:5f:81:57:3a:20:ea:16:5a:ef:11:34:e7: 43:f1:99:e9:b2:c0:b1:4a:6d:24:36:61:52:0f:6f: c1:c5:e8:42:30:0c:d0:1f:46:e4:fc:7d:1f:01:9f: 90:bd:05:0c:6e:55:6f:63:cb:32:d2:0b:e2:2b:1c: 78:bc:34:f9:4c:e8:f1:bd:e5:ac:67:a5:4a:b1:9a: c9:36:6f:c3:a4:07:8e:88:6a:ca:b4:47:1b:b1:3e: e1:bf:1a:9e:5c:f9:4c:38:0d:3b:27:6f:fc:54:5a: 86:5b:a1:d3:7f:3a:d1:36:47:08:43:04:4a:27:52: 59:c8:a9:1e:1c:2b:1d:65:01:4c:8b:c2:31:c6:8f: 0a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.248.0/22 5.183.240.0/22 45.11.240.0/22 45.14.80.0/22 45.80.96.0/22 45.85.128.0/22 45.86.24.0/22 45.90.204.0/22 45.129.220.0/22 45.158.192.0/22 92.119.24.0/22 171.22.60.0/22 185.45.92.0/22 Signature Algorithm: sha256WithRSAEncryption 17:8d:12:a0:4f:e8:64:05:52:6a:a7:34:31:78:9e:4a:7e:77: 5c:dc:cb:6d:47:94:a2:50:d8:ef:8a:ac:98:b3:62:26:fb:f9: 18:84:6a:48:cb:39:91:4f:5b:37:17:85:8b:92:78:09:90:30: a4:9b:8d:fd:2b:d5:f5:27:b9:3b:d3:44:f6:21:4f:24:53:ba: fa:a3:24:a6:79:00:11:1c:27:69:f2:7c:81:83:3f:e5:c4:52: 27:6b:a1:b0:38:6d:85:80:60:d2:87:f3:dc:86:88:9f:80:92: fd:7d:ff:2b:ff:38:f5:b4:b3:45:b7:63:79:f5:fa:06:32:9a: 3a:1e:c3:fc:ec:c7:3a:a6:34:fa:39:6b:1b:86:03:db:29:b3: b8:fa:e1:a7:0a:df:0e:38:1f:04:d8:54:86:a0:1d:2e:1f:f8: e4:38:12:2c:c9:c2:df:d0:25:1f:5a:1d:a4:8e:36:3b:4a:aa: 24:eb:41:06:8f:95:77:b5:f1:22:7d:5b:db:70:72:47:9c:73: ec:4d:49:2f:a1:41:7b:e2:5d:8a:24:dc:99:6e:c9:24:30:c2: b9:f5:cb:2a:14:56:3d:65:79:95:e2:83:eb:07:52:82:a5:ad: b7:e5:20:67:fb:48:2d:e5:4a:43:76:db:03:33:4a:e7:a8:53: e7:db:02:33 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt7o8BiadUzrvPus4bIrk1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTMzZWY0NjExNmZkOWQyMWJmYjUzM2U0NGJkZTUxNzg5MGMyNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqMTch262yG7PKTYDTw/VA+Tk6Gp XfzW1hG/0SBhVPtV7jj2D2sysrtrftHdQPZpKPtp/BCXeE6p1CsThSQkJnXtXHMJ 6qi1lX06aeNuv/c0acTodXzLjtCLiG/xMC638owCeW8wU7YQ5BPwC60lVWAYUd7e tPbBAMhfgVc6IOoWWu8RNOdD8ZnpssCxSm0kNmFSD2/BxehCMAzQH0bk/H0fAZ+Q vQUMblVvY8sy0gviKxx4vDT5TOjxveWsZ6VKsZrJNm/DpAeOiGrKtEcbsT7hvxqe XPlMOA07J2/8VFqGW6HTfzrRNkcIQwRKJ1JZyKkeHCsdZQFMi8Ixxo8KxQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFIUz70YRb9nSG/tTPkS95ReJDCTcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2UwNDcy YS0zYWRmLTQzY2QtYmYzMC03MzkyM2RhZWYxMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvZTA0NzJh LTNhZGYtNDNjZC1iZjMwLTczOTIzZGFlZjExNC8xL2hUUHZSaEZ2MmRJYi0xTS1S TDNsRjRrTUpOdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUF BwEHAQH/BFgwVjBUBAIAATBOAwQCAjn4AwQCBbfwAwQCLQvwAwQCLQ5QAwQCLVBg AwQCLVWAAwQCLVYYAwQCLVrMAwQCLYHcAwQCLZ7AAwQCXHcYAwQCqxY8AwQCuS1c MA0GCSqGSIb3DQEBCwUAA4IBAQAXjRKgT+hkBVJqpzQxeJ5Kfndc3MttR5SiUNjv iqyYs2Im+/kYhGpIyzmRT1s3F4WLkngJkDCkm439K9X1J7k700T2IU8kU7r6oySm eQARHCdp8nyBgz/lxFIna6GwOG2FgGDSh/PchoifgJL9ff8r/zj1tLNFt2N59foG Mpo6HsP87Mc6pjT6OWsbhgPbKbO4+uGnCt8OOB8E2FSGoB0uH/jkOBIsycLf0CUf Wh2kjjY7Sqok60EGj5V3tfEifVvbcHJHnHPsTUkvoUF74l2KJNyZbskkMMK59csq FFY9ZXmV4oPrB1KCpa235SBn+0gt5UpDdtsDM0rnqFPn2wIz -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:33 2026 by rpki-client