This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer (raw, json) Hash identifier: qT6KqV62fZGIO2+H/U9gyszi8v9QU4rCy9Ay8KGRiZw= Subject key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758F8FD04AA01D38C1A9345645AB57F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 83.143.16.0/21 IP: 195.140.140.0/22 IP: 195.242.191.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f8:fd:04:aa:01:d3:8c:1a:93:45:64:5a:b5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:58:df:1e:0c:a5:8e:c6:fa:ab:b4:35:c1:45: 05:d9:16:73:9e:49:cf:a9:fa:9c:55:c4:9b:18:ec: aa:23:26:fe:7f:af:08:b8:6a:c9:e6:5d:8f:80:76: fa:88:ca:c0:d4:25:ab:f1:02:d9:cf:30:06:07:0d: 2a:7d:d7:49:b8:8e:35:81:0a:e6:bb:4c:a4:7a:3a: ff:d3:c3:dd:b4:b4:a6:e3:ea:90:70:07:4c:99:05: b3:31:92:3e:ab:4e:0d:e7:55:51:7c:36:cb:01:f9: 04:ce:cc:84:ae:b3:05:6d:ba:87:71:55:ea:65:30: 7c:0e:c2:43:72:d5:97:bb:96:b6:44:d4:d2:e0:53: 14:69:39:7a:a4:eb:44:63:15:35:5d:37:e3:83:38: 2e:0f:8e:99:a0:75:28:25:06:22:d7:8f:1f:8b:f0: 2d:a7:a3:1b:a7:9d:36:f3:ff:0e:f6:7f:19:b7:3d: 59:94:a6:16:c9:61:37:63:f1:e7:49:5b:dc:20:14: 40:be:7e:57:d7:f2:3d:59:cc:96:84:4f:3f:13:7c: b3:35:7f:01:c2:fc:5f:5a:5c:04:82:15:4e:b8:db: 7f:4d:3d:f8:6f:d8:31:b1:a4:3c:74:49:a5:db:c3: ae:ca:c5:1a:0c:e2:2b:f3:75:c5:b2:32:00:9d:e7: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.16.0/21 195.140.140.0/22 195.242.191.0/24 Signature Algorithm: sha256WithRSAEncryption 07:0c:fd:81:23:b8:c1:12:8d:20:4b:19:2e:2f:6c:4f:91:f4: 7c:d3:e9:a2:b9:a6:a2:9d:c2:b5:2a:02:ef:98:da:b0:cd:96: aa:1a:cc:07:b7:fc:0d:26:3c:24:62:f1:18:a4:9e:6f:c4:71: fc:6c:3d:c0:7a:69:4d:55:b0:f3:32:fd:d2:1a:c3:15:f7:3e: 8c:2d:eb:46:34:45:aa:88:4b:66:51:5f:ce:cb:db:5f:03:48: 47:14:cb:eb:e7:07:25:57:7c:1b:75:d8:6b:cf:53:38:06:11: b1:53:95:ad:73:3b:62:c8:e9:19:18:51:99:dc:57:64:49:74: f0:75:3d:83:9e:ed:8b:1c:b2:ba:ac:3d:8f:24:a9:81:d1:54: 4f:92:7e:71:47:25:d2:ab:09:71:67:f5:95:50:08:59:38:6d: 25:da:d5:3c:d6:9d:2b:de:5a:b9:73:ad:5c:6d:9d:34:2f:b7: e8:d9:0a:86:89:f9:b4:03:f6:06:2f:e2:11:ba:8c:82:7e:3c: e1:a4:e4:a6:24:c6:61:de:63:1c:1a:b0:e4:f5:cb:5f:79:39: 72:46:ca:55:5a:7c:46:73:d4:98:ce:27:65:9d:e2:2f:8a:c2: bb:96:96:f6:91:25:0c:76:5a:fe:67:3d:6b:11:26:52:93:35: 24:a9:a4:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt3WPj9BKoB04wak0VkWrV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWZiODVhZGQwOWY0ODc2ZWE2YWFhODhkNGQ4OGM4MWNjYjZiMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ljfHgyljsb6q7Q1wUUF2RZznknP qfqcVcSbGOyqIyb+f68IuGrJ5l2PgHb6iMrA1CWr8QLZzzAGBw0qfddJuI41gQrm u0ykejr/08PdtLSm4+qQcAdMmQWzMZI+q04N51VRfDbLAfkEzsyErrMFbbqHcVXq ZTB8DsJDctWXu5a2RNTS4FMUaTl6pOtEYxU1XTfjgzguD46ZoHUoJQYi148fi/At p6Mbp5028/8O9n8Ztz1ZlKYWyWE3Y/HnSVvcIBRAvn5X1/I9WcyWhE8/E3yzNX8B wvxfWlwEghVOuNt/TT34b9gxsaQ8dEml28OuysUaDOIr83XFsjIAneeTZwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFIX7ha3Qn0h26mqqiNTYjIHMtrEKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2NlZWE5 MS0wYTJhLTRhNGUtOTE3Yi1jNjE2MWNlMzk1YWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvY2VlYTkx LTBhMmEtNGE0ZS05MTdiLWM2MTYxY2UzOTVhZi8xL2hmdUZyZENmU0hicWFxcUkx TmlNZ2N5MnNRby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDU48QAwQCw4yMAwQAw/K/MA0GCSqGSIb3DQEB CwUAA4IBAQAHDP2BI7jBEo0gSxkuL2xPkfR80+miuaaincK1KgLvmNqwzZaqGswH t/wNJjwkYvEYpJ5vxHH8bD3AemlNVbDzMv3SGsMV9z6MLetGNEWqiEtmUV/Oy9tf A0hHFMvr5wclV3wbddhrz1M4BhGxU5WtcztiyOkZGFGZ3FdkSXTwdT2Dnu2LHLK6 rD2PJKmB0VRPkn5xRyXSqwlxZ/WVUAhZOG0l2tU81p0r3lq5c61cbZ00L7fo2QqG ifm0A/YGL+IRuoyCfjzhpOSmJMZh3mMcGrDk9ctfeTlyRspVWnxGc9SYzidlneIv isK7lpb2kSUMdlr+Zz1rESZSkzUkqaQk -----END CERTIFICATE-----Generated at Sun Jan 25 20:06:23 2026 by rpki-client