This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer (raw, json) Hash identifier: i3jl1pbIdG6edt7bfCI1zu4lTwDGmCXvI9dq0gCS1O0= Subject key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED64A17459C7458815BFE0D7AB5501 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.82.184.0/22 IP: 194.176.127.0/24 IP: 2a0e:7180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:64:a1:74:59:c7:45:88:15:bf:e0:d7:ab:55:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:a8:d4:55:44:b0:0d:a7:de:e2:c2:60:b0: 08:e6:95:10:d3:d4:8d:64:cf:41:9a:e3:80:02:6c: f2:ee:e6:e4:79:02:a3:b5:fe:82:bf:37:01:ef:87: d9:fe:1f:69:9d:f5:f8:30:3c:9b:86:56:0e:43:c4: 9e:d1:50:5f:6e:f2:db:f4:4d:5b:b1:ae:40:a5:33: ad:30:10:bd:bd:dd:f7:5a:ad:fd:d6:78:71:fa:b0: af:83:86:fd:32:aa:7e:61:72:4e:93:75:a4:f1:f0: b4:67:b3:83:94:94:48:e7:af:d4:3c:bc:95:eb:53: 2b:53:10:c5:87:b3:5a:8b:e1:e5:df:17:c4:52:2d: ae:62:bc:31:b4:97:55:ba:bd:32:3e:77:63:cc:21: 52:8a:8e:8c:ad:eb:6c:45:22:c1:d0:1a:ca:44:f9: fb:e7:ac:7c:c0:23:59:4c:b5:25:16:f6:cb:da:83: 4b:19:1a:db:c0:96:b5:ee:05:aa:3f:96:d4:7f:94: c2:8f:ac:53:a4:e7:62:03:d5:fa:ed:8a:e0:a2:00: 1c:dd:26:1e:df:f8:1c:69:bb:52:0a:af:04:68:e2: ef:f9:9f:38:89:62:19:2e:e6:3f:f6:70:22:45:09: b9:5d:19:d7:23:6e:9b:a2:8c:24:66:66:f0:98:ed: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.184.0/22 194.176.127.0/24 IPv6: 2a0e:7180::/29 Signature Algorithm: sha256WithRSAEncryption 35:57:3d:13:c0:5b:e2:a5:7b:24:76:ae:97:1b:75:ca:ee:60: 7c:e6:ed:df:6d:d7:2d:7b:03:2e:80:a2:13:fc:98:dc:8e:f5: 7f:36:23:0d:e4:ac:ce:08:f8:73:43:cd:bd:5f:50:02:d3:1f: 67:8c:31:f5:8f:63:67:92:54:38:9b:2d:b0:ac:5f:8e:65:11: 0e:bb:d0:26:53:96:dc:49:25:67:75:09:af:fa:38:fe:f4:55: e5:66:29:2b:d2:77:fb:1e:5e:97:6e:30:33:d5:a1:cc:63:d2: 2c:a1:2f:ac:4b:6d:a0:cd:73:85:b0:f3:44:28:19:7a:10:39: a4:06:8a:b9:35:ba:1e:42:9a:49:4b:2b:ec:6b:82:81:3f:fb: 7a:d3:80:66:43:73:22:3f:9a:4c:64:05:9b:1c:b4:ff:9f:af: 4a:b1:b8:38:13:ce:70:fe:94:ad:c5:ef:4b:50:ab:68:7a:a2: 96:87:f1:be:c2:85:5b:1f:2a:3b:cf:95:9a:6d:71:88:e3:cf: 9a:fb:0a:29:64:dd:8d:44:17:91:3d:cd:7b:f3:01:d6:41:3d: 63:40:27:37:2d:24:a3:c1:bd:bf:c8:95:25:85:7d:81:e3:2e: 0e:bd:ec:64:00:93:36:57:28:50:d7:82:cc:2c:ad:9b:ef:52: fc:76:98:2b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt57WShdFnHRYgVv+DXq1UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWQwNWUwMTdlMzMzZDE3YjNhZWI4YzVkNDk0M2JlOGRjNjdjMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Wo1FVEsA2n3uLCYLAI5pUQ09SN ZM9BmuOAAmzy7ubkeQKjtf6CvzcB74fZ/h9pnfX4MDybhlYOQ8Se0VBfbvLb9E1b sa5ApTOtMBC9vd33Wq391nhx+rCvg4b9Mqp+YXJOk3Wk8fC0Z7ODlJRI56/UPLyV 61MrUxDFh7Nai+Hl3xfEUi2uYrwxtJdVur0yPndjzCFSio6MretsRSLB0BrKRPn7 56x8wCNZTLUlFvbL2oNLGRrbwJa17gWqP5bUf5TCj6xTpOdiA9X67YrgogAc3SYe 3/gcabtSCq8EaOLv+Z84iWIZLuY/9nAiRQm5XRnXI26boowkZmbwmO2yCwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFIXQXgF+Mz0Xs664xdSUO+jcZ8CEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzA5NWFj OS1jM2ZhLTQ2NWQtODMxZC00N2M5NTAzMzZlMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMDk1YWM5 LWMzZmEtNDY1ZC04MzFkLTQ3Yzk1MDMzNmUyZi8xL2hkQmVBWDR6UFJlenJyakYx SlE3Nk54bndJUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLVK4AwQAwrB/MA0EAgACMAcDBQMqDnGAMA0G CSqGSIb3DQEBCwUAA4IBAQA1Vz0TwFvipXskdq6XG3XK7mB85u3fbdctewMugKIT /JjcjvV/NiMN5KzOCPhzQ829X1AC0x9njDH1j2NnklQ4my2wrF+OZREOu9AmU5bc SSVndQmv+jj+9FXlZikr0nf7Hl6XbjAz1aHMY9IsoS+sS22gzXOFsPNEKBl6EDmk Boq5NboeQppJSyvsa4KBP/t604BmQ3MiP5pMZAWbHLT/n69Ksbg4E85w/pStxe9L UKtoeqKWh/G+woVbHyo7z5WabXGI48+a+wopZN2NRBeRPc178wHWQT1jQCc3LSSj wb2/yJUlhX2B4y4OvexkAJM2VyhQ14LMLK2b71L8dpgr -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:31 2026 by rpki-client