This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer File: haqtxWj2ySj9dk1CHULHHPV5GVQ.cer (raw, json) Hash identifier: GJ6Opv/pkU5Mj9I2EUX3jY1fKW1a3dnXyLaFI3Q1anU= Subject key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C3CC31E39ED800CADC7C3AAB0D54 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44092 AS: 201352 AS: 207554 IP: 31.25.32.0/21 IP: 45.145.200.0/22 IP: 77.242.128.0/20 IP: 85.208.200.0/22 IP: 89.37.70.0/23 IP: 178.23.8.0/21 IP: 178.210.232.0/21 IP: 185.56.156.0/22 IP: 185.71.244.0/22 IP: 185.171.232.0/22 IP: 185.178.252.0/22 IP: 185.191.104.0/22 IP: 185.215.144.0/22 IP: 185.219.116.0/22 IP: 185.236.48.0/23 IP: 185.248.227.0/24 IP: 185.255.29.0/24 IP: 188.191.56.0/22 IP: 212.28.168.0/21 IP: 217.28.64.0/22 IP: 2a02:53e0::/32 IP: 2a05:3680::/29 IP: 2a0b:7b80::/29 IP: 2a0f:de80::/29 IP: 2a13:56c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c3:cc:31:e3:9e:d8:00:ca:dc:7c:3a:ab:0d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85aaadc568f6c928fd764d421d42c71cf5791954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:b3:cc:06:8a:a4:1b:ae:cc:b4:ff:1f:ff: 2a:03:03:05:f4:f5:38:a3:cd:05:12:18:1b:03:f8: c4:ad:9a:97:c4:a5:f6:cc:75:b1:42:65:75:62:db: 9a:9f:56:17:64:8f:ef:90:03:80:8d:b5:d9:c9:6a: c9:03:22:7b:05:05:ef:b0:c0:15:af:f3:1b:77:78: bc:f4:e1:d7:7f:25:9d:8a:c5:65:42:a5:2c:26:7d: 40:14:2e:4d:f6:28:d7:46:7f:34:73:c1:7f:ce:f3: a0:c1:9d:bc:1e:1c:1d:58:15:b5:79:d3:27:77:7b: 7a:5e:6e:c5:97:7b:1b:29:3f:35:72:fe:92:95:b0: f4:95:76:08:73:11:05:93:1e:6f:ad:6f:cd:51:af: 8b:6e:07:88:42:08:50:08:3d:53:62:f9:39:e8:ca: 09:ee:1c:67:78:9a:39:f8:3c:a6:b6:0e:3a:4b:e1: 1a:d7:f0:f0:92:49:05:00:55:82:6f:e3:60:7a:98: 22:67:d8:e8:3e:63:6e:42:f8:b6:1a:03:ff:99:a2: 2e:3c:17:5c:03:4a:31:df:ef:d1:3d:96:7b:7c:fe: 77:b1:16:b8:50:09:a9:06:16:4a:18:d8:39:9b:e4: e8:f3:ea:f8:fe:c8:61:dc:9a:96:08:f0:27:33:99: 85:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.32.0/21 45.145.200.0/22 77.242.128.0/20 85.208.200.0/22 89.37.70.0/23 178.23.8.0/21 178.210.232.0/21 185.56.156.0/22 185.71.244.0/22 185.171.232.0/22 185.178.252.0/22 185.191.104.0/22 185.215.144.0/22 185.219.116.0/22 185.236.48.0/23 185.248.227.0/24 185.255.29.0/24 188.191.56.0/22 212.28.168.0/21 217.28.64.0/22 IPv6: 2a02:53e0::/32 2a05:3680::/29 2a0b:7b80::/29 2a0f:de80::/29 2a13:56c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44092 201352 207554 Signature Algorithm: sha256WithRSAEncryption 49:74:8a:26:df:06:58:c7:40:b0:27:01:85:4e:21:2c:34:cb: cf:a8:90:95:6a:14:7b:19:ae:38:48:fd:17:b6:60:5e:15:dc: 8b:e1:0f:de:dc:93:66:fa:bf:9a:b8:38:c6:23:24:d3:e3:48: 06:4b:7d:8c:06:fd:84:10:da:1e:d7:7f:36:5f:1d:7f:c8:e2: f6:e1:ea:76:d4:03:81:a0:33:13:31:5b:8a:78:2b:81:d1:44: 68:89:7d:b0:7c:a1:60:0d:0a:ab:d3:6a:1e:5d:07:7b:6b:23: 0f:d3:b9:84:c2:d6:5f:9e:53:4d:ac:b2:c5:15:9f:fc:95:4c: 11:f9:a4:57:15:d4:20:71:e4:48:5a:3c:22:36:a1:97:e0:2d: ee:1a:3d:0d:74:83:4e:c3:c2:c2:ed:92:3a:f9:d3:a3:c7:db: 12:e0:de:a0:36:55:44:22:bc:54:82:0e:87:07:78:95:c8:5c: 34:e7:e9:b0:ee:4e:c7:76:ed:cd:de:c7:6e:a3:19:71:23:35: 69:29:b7:d4:68:10:3a:99:d3:01:24:e9:59:f6:9b:38:f8:85: 19:07:51:15:f2:32:2a:1e:4c:67:ae:09:98:dc:af:b2:41:c5: 16:1e:af:df:51:01:68:c9:b0:93:f3:01:ca:6f:77:c8:7d:46: 5c:8b:51:b1 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISAZt3WMPMMeOe2ADK3Hw6qw1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWFhYWRjNTY4ZjZjOTI4ZmQ3NjRkNDIxZDQyYzcxY2Y1NzkxOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26qzzAaKpBuuzLT/H/8qAwMF9PU4 o80FEhgbA/jErZqXxKX2zHWxQmV1Ytuan1YXZI/vkAOAjbXZyWrJAyJ7BQXvsMAV r/Mbd3i89OHXfyWdisVlQqUsJn1AFC5N9ijXRn80c8F/zvOgwZ28HhwdWBW1edMn d3t6Xm7Fl3sbKT81cv6SlbD0lXYIcxEFkx5vrW/NUa+LbgeIQghQCD1TYvk56MoJ 7hxneJo5+Dymtg46S+Ea1/DwkkkFAFWCb+NgepgiZ9joPmNuQvi2GgP/maIuPBdc A0ox3+/RPZZ7fP53sRa4UAmpBhZKGNg5m+To8+r4/shh3JqWCPAnM5mF5QIDAQAB o4IDSjCCA0YwHQYDVR0OBBYEFIWqrcVo9sko/XZNQh1Cxxz1eRlUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzBlYmRk NC0yNjE3LTRkMzEtYThjMy00NWVhMzhkYTIyMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvMGViZGQ0 LTI2MTctNGQzMS1hOGMzLTQ1ZWEzOGRhMjIxOC8xL2hhcXR4V2oyeVNqOWRrMUNI VUxISFBWNUdWUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG+BggrBgEF BQcBBwEB/wSBrjCBqzB+BAIAATB4AwQDHxkgAwQCLZHIAwQETfKAAwQCVdDIAwQB WSVGAwQDshcIAwQDstLoAwQCuTicAwQCuUf0AwQCuavoAwQCubL8AwQCub9oAwQC udeQAwQCudt0AwQBuewwAwQAufjjAwQAuf8dAwQCvL84AwQD1ByoAwQC2RxAMCkE AgACMCMDBQAqAlPgAwUDKgU2gAMFAyoLe4ADBQMqD96AAwUDKhNWwDAkBggrBgEF BQcBCAEB/wQVMBOgETAPAgMArDwCAwMSiAIDAyrCMA0GCSqGSIb3DQEBCwUAA4IB AQBJdIom3wZYx0CwJwGFTiEsNMvPqJCVahR7Ga44SP0XtmBeFdyL4Q/e3JNm+r+a uDjGIyTT40gGS32MBv2EENoe1382Xx1/yOL24ep21AOBoDMTMVuKeCuB0URoiX2w fKFgDQqr02oeXQd7ayMP07mEwtZfnlNNrLLFFZ/8lUwR+aRXFdQgceRIWjwiNqGX 4C3uGj0NdINOw8LC7ZI6+dOjx9sS4N6gNlVEIrxUgg6HB3iVyFw05+mw7k7Hdu3N 3sduoxlxIzVpKbfUaBA6mdMBJOlZ9ps4+IUZB1EV8jIqHkxnrgmY3K+yQcUWHq/f UQFoybCT8wHKb3fIfUZci1Gx -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:26 2026 by rpki-client