This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer File: hVBZemBkyIKuKvP6V1nxP4vR3fw.cer (raw, json) Hash identifier: X/mA7d5xQuzoiu8jITH6SDJmEC1Gxb6o/NhJlRXbFII= Subject key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D12931E2B5654136225E6AF12FA48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200533 IP: 2001:67c:21bc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:12:93:1e:2b:56:54:13:62:25:e6:af:12:fa:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:33:bf:87:5c:fa:69:82:72:1e:fb:1d:de: 6f:57:d9:c9:6b:36:a4:44:ad:db:e0:9a:9c:9a:a9: 00:97:4e:96:e6:1a:aa:21:b3:bd:9a:bf:2f:41:4f: 49:81:be:a4:48:58:0f:ad:03:f0:3e:83:f0:f2:de: e4:e5:8c:f1:7e:89:7d:f3:c0:eb:10:ba:7d:c3:91: 90:cb:d9:24:89:cf:da:ee:5b:91:ec:b5:f5:75:e3: 47:6c:cb:e0:cc:71:60:f5:5a:f9:36:ad:d7:08:bf: 02:3c:cd:74:29:55:ba:4e:27:5b:c3:d8:d1:9f:9c: 7c:9d:6b:3e:87:c7:eb:b0:61:2c:ad:24:6a:c4:38: 22:17:a0:78:7e:e4:eb:6e:e3:d1:3c:f2:b6:07:91: 36:0b:b7:3d:07:da:b6:01:3e:7f:c4:bc:3c:1f:8a: 5a:15:f9:3c:e5:db:04:14:42:8b:75:03:e5:70:2e: 83:a5:91:f9:18:20:ff:93:4e:65:40:34:49:1d:af: f8:9f:46:13:b8:bb:3f:12:df:32:d4:87:f4:43:f1: 61:e7:9d:8a:7d:d1:aa:6a:f7:0e:8d:60:16:f7:34: ab:01:bf:1d:6d:9a:9c:4c:ab:20:9a:1e:be:01:ab: 06:bb:68:e8:4f:61:c0:78:81:46:67:07:c7:e1:55: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:21bc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200533 Signature Algorithm: sha256WithRSAEncryption 52:90:0d:3c:f3:c2:32:97:c4:4c:a1:81:9c:d9:22:f0:a9:22: 0a:a6:52:46:8c:37:4d:3d:d1:84:d9:b2:38:eb:8d:cd:8d:8a: da:5d:f3:e4:2b:25:3e:d5:cc:81:cc:d6:cb:e8:ba:d6:8a:c0: d7:f5:57:6e:88:5b:54:8d:69:64:78:39:1d:34:a0:0e:e6:07: 14:ac:60:4b:6b:9c:64:27:cd:77:d5:e2:27:ef:72:2e:2d:49: 16:8c:5c:a4:be:26:7c:be:bc:1f:ef:a8:1c:84:79:25:f5:18: 75:f7:41:60:74:29:f9:27:8a:24:a0:da:28:b1:3f:35:a5:4c: 91:22:69:ff:63:c0:9f:f1:e5:bf:e7:64:e1:ad:87:52:5d:2c: 08:7f:07:32:68:1b:3e:73:b1:0a:fc:8e:2c:b2:b5:b9:20:94: c1:8a:7e:bc:71:f8:f1:17:d3:22:4a:e0:68:7e:a8:88:d1:d5: d1:84:3f:a8:2d:20:86:54:a9:75:bd:95:13:f3:c0:a4:71:14: a8:87:7a:68:d6:1f:07:92:a2:85:97:c7:67:1b:e5:ea:6b:9a: 4d:90:f3:25:16:ce:aa:c8:4c:6c:ea:29:03:8a:08:2b:ed:dd: cb:51:ef:5c:da:87:05:16:35:2d:95:e4:1f:49:a7:48:53:05: 1d:db:2e:07 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9XRKTHitWVBNiJeavEvpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTUwNTk3YTYwNjRjODgyYWUyYWYzZmE1NzU5ZjEzZjhiZDFkZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ0zv4dc+mmCch77Hd5vV9nJazak RK3b4JqcmqkAl06W5hqqIbO9mr8vQU9Jgb6kSFgPrQPwPoPw8t7k5Yzxfol988Dr ELp9w5GQy9kkic/a7luR7LX1deNHbMvgzHFg9Vr5Nq3XCL8CPM10KVW6Tidbw9jR n5x8nWs+h8frsGEsrSRqxDgiF6B4fuTrbuPRPPK2B5E2C7c9B9q2AT5/xLw8H4pa Ffk85dsEFEKLdQPlcC6DpZH5GCD/k05lQDRJHa/4n0YTuLs/Et8y1If0Q/Fh552K fdGqavcOjWAW9zSrAb8dbZqcTKsgmh6+AasGu2joT2HAeIFGZwfH4VXq9QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFIVQWXpgZMiCrirz+ldZ8T+L0d38MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzFjNzJj NS0yOTlhLTRmNzAtODEyYy0yNWM1ZjA1YWViNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvMWM3MmM1 LTI5OWEtNGY3MC04MTJjLTI1YzVmMDVhZWI1Zi8xL2hWQlplbUJreUlLdUt2UDZW MW54UDR2UjNmdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCG8MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMPVTANBgkqhkiG9w0BAQsFAAOCAQEAUpANPPPCMpfETKGBnNki8KkiCqZS Row3TT3RhNmyOOuNzY2K2l3z5CslPtXMgczWy+i61orA1/VXbohbVI1pZHg5HTSg DuYHFKxgS2ucZCfNd9XiJ+9yLi1JFoxcpL4mfL68H++oHIR5JfUYdfdBYHQp+SeK JKDaKLE/NaVMkSJp/2PAn/Hlv+dk4a2HUl0sCH8HMmgbPnOxCvyOLLK1uSCUwYp+ vHH48RfTIkrgaH6oiNHV0YQ/qC0ghlSpdb2VE/PApHEUqId6aNYfB5KihZfHZxvl 6muaTZDzJRbOqshMbOopA4oIK+3dy1HvXNqHBRY1LZXkH0mnSFMFHdsuBw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:09 2026 by rpki-client