This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer File: hfTuFPbTinzwcSed_3s5FwLjcTU.cer (raw, json) Hash identifier: 8c4OIyrBdt651wa9/ikyRkzqon/Y3/aZMiiAMsLhiPY= Subject key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB5074680F294410CAE54342460914 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.146.224.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:50:74:68:0f:29:44:10:ca:e5:43:42:46:09:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8a:01:17:2a:01:02:89:aa:b6:85:9a:9b:13: f6:9e:7c:41:1e:12:c8:87:ea:a9:20:a8:8c:18:3b: 67:65:97:ae:d4:69:31:e0:e7:25:53:44:fc:38:6d: fe:26:e0:39:6e:e4:e5:aa:e3:63:05:fa:f2:e0:cf: 35:45:67:d7:e3:5d:85:80:44:4e:ac:c9:23:64:f9: de:51:f6:67:b5:bb:8d:22:7a:82:06:80:c8:e7:35: 2c:62:d1:e8:e9:f1:a2:3a:fa:16:7a:b0:2a:16:a2: 31:99:2d:86:cc:0a:af:09:f4:1b:4d:81:80:5a:e3: 9f:fa:59:c4:85:55:13:8c:c5:51:3e:cf:a3:20:b9: ed:08:cb:42:0b:6b:62:a3:15:6b:8c:b0:e4:1c:9a: 4e:f9:1a:48:2e:99:59:2d:96:a7:28:8a:75:6b:20: de:0b:ad:81:6f:f0:00:d9:d4:fe:71:37:c4:5b:c7: 40:af:c5:35:8b:c8:e9:39:d6:b6:ad:a1:99:ef:4f: 1b:b9:16:07:06:54:a2:52:ab:09:bf:33:7e:da:7a: 2b:3b:38:e1:c6:d2:78:75:2b:98:75:fb:55:8a:d8: 96:16:9e:72:ae:21:84:3b:21:72:06:49:9a:7c:75: 2c:67:f8:96:15:92:fc:f2:38:0d:68:be:14:c9:20: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.224.0/22 Signature Algorithm: sha256WithRSAEncryption 73:ec:6b:39:91:4e:91:02:df:f0:82:c7:4a:6e:f8:86:49:5e: de:c6:ab:7f:5f:b8:3f:78:32:2b:c5:19:5f:81:31:ef:ac:89: 0f:0f:fa:52:1f:9b:60:f1:0c:42:83:ff:98:ab:1e:e3:3d:ff: 53:55:79:a0:aa:1e:29:5e:69:4c:d6:15:4c:a1:28:bb:77:bb: ad:7a:c5:09:09:f4:dd:8d:36:71:18:ff:7f:82:98:a6:54:a9: 87:11:78:0e:93:6e:96:84:b9:bc:9e:63:5c:bb:bc:e5:5a:8e: f0:77:0d:71:e1:e2:ab:f0:7b:42:e7:7b:c0:eb:83:a6:06:66: c3:7e:8e:67:16:94:8c:19:de:10:d9:6a:f9:38:05:30:7c:05: 56:00:cf:be:32:f0:3f:d9:86:1f:8f:b8:56:11:a3:97:b9:b3: 53:93:a9:af:72:bb:cb:16:a5:a6:31:1f:e9:1e:dc:87:35:3c: 47:d6:a8:de:2a:f2:91:8d:be:2e:f7:35:0f:85:da:95:9a:ae: 2d:81:6b:1a:99:28:cf:d6:8c:7a:4a:8d:17:a1:26:32:f8:99: 30:44:5d:30:2e:a7:a2:ba:25:63:8f:0b:5b:e5:ff:a0:28:9c: ef:51:bd:11:ae:87:87:75:64:a4:65:71:bf:af:db:18:ed:58: cb:da:ae:7a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9y1B0aA8pRBDK5UNCRgkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWY0ZWUxNGY2ZDM4YTdjZjA3MTI3OWRmZjdiMzkxNzAyZTM3MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYoBFyoBAomqtoWamxP2nnxBHhLI h+qpIKiMGDtnZZeu1Gkx4OclU0T8OG3+JuA5buTlquNjBfry4M81RWfX412FgERO rMkjZPneUfZntbuNInqCBoDI5zUsYtHo6fGiOvoWerAqFqIxmS2GzAqvCfQbTYGA WuOf+lnEhVUTjMVRPs+jILntCMtCC2tioxVrjLDkHJpO+RpILplZLZanKIp1ayDe C62Bb/AA2dT+cTfEW8dAr8U1i8jpOda2raGZ708buRYHBlSiUqsJvzN+2norOzjh xtJ4dSuYdftVitiWFp5yriGEOyFyBkmafHUsZ/iWFZL88jgNaL4UySC75QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIX07hT204p88HEnnf97ORcC43E1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzRkZjM5 YS03ODNjLTRkN2QtYjFiZS1iZmQ5NWE5YTZlNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvNGRmMzlh LTc4M2MtNGQ3ZC1iMWJlLWJmZDk1YTlhNmU2NC8xL2hmVHVGUGJUaW56d2NTZWRf M3M1RndMamNUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZLgMA0GCSqGSIb3DQEBCwUAA4IBAQBz7Gs5 kU6RAt/wgsdKbviGSV7exqt/X7g/eDIrxRlfgTHvrIkPD/pSH5tg8QxCg/+Yqx7j Pf9TVXmgqh4pXmlM1hVMoSi7d7utesUJCfTdjTZxGP9/gpimVKmHEXgOk26WhLm8 nmNcu7zlWo7wdw1x4eKr8HtC53vA64OmBmbDfo5nFpSMGd4Q2Wr5OAUwfAVWAM++ MvA/2YYfj7hWEaOXubNTk6mvcrvLFqWmMR/pHtyHNTxH1qjeKvKRjb4u9zUPhdqV mq4tgWsamSjP1ox6So0XoSYy+JkwRF0wLqeiuiVjjwtb5f+gKJzvUb0RroeHdWSk ZXG/r9sY7VjL2q56 -----END CERTIFICATE-----Generated at Mon Jan 26 11:41:53 2026 by rpki-client