This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer (raw, json) Hash identifier: ZTEgKszb7g6XFT/lPzEQ3u/HktB/ct9pfL88+OtpMxI= Subject key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2B74D7A4A24B8CA58BD105FD5B003 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.66.124.0/22 IP: 2a05:800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b7:4d:7a:4a:24:b8:ca:58:bd:10:5f:d5:b0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:0f:06:f6:b9:37:53:9d:ee:5e:83:6c:4a: f6:f1:51:f3:da:c0:e7:52:d6:1f:44:d5:e7:a8:60: 2a:58:ee:ba:49:9e:b7:e5:73:5c:02:44:19:56:e0: 76:da:7d:0f:8e:b9:31:5e:dc:4e:a9:7f:39:10:02: 5f:f8:e8:8a:a8:76:2c:ad:3f:d9:9b:7e:60:45:ae: b1:ca:db:f2:4e:a8:07:de:b6:bf:2e:47:94:22:f2: 44:19:b3:8f:fc:ed:a1:cc:e5:17:84:62:87:2d:19: 33:95:cd:6d:91:b4:af:58:06:83:1c:81:b7:b9:7b: 0b:d4:e0:42:0f:8c:ff:cd:27:2b:af:c6:a6:55:ef: 00:6e:1e:5d:d2:9e:42:57:57:8e:bc:3d:8b:1f:40: b1:62:ec:34:e1:15:41:28:ae:c2:5b:d3:31:81:6d: 98:5c:c1:07:43:88:57:19:c5:4e:b5:b7:11:68:e1: eb:18:67:e3:d3:4a:95:19:1b:00:f5:a9:5f:17:24: 57:e9:79:d2:a7:90:13:00:64:49:ea:cd:d6:16:3d: ba:2e:af:8e:bf:44:0b:c2:5a:ef:f6:3f:27:4c:33: 0d:ed:c7:30:f1:0c:ba:94:4d:26:55:62:0e:f5:4e: ab:bb:71:2c:91:7c:bf:e7:f2:f9:70:7b:8e:31:35: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.124.0/22 IPv6: 2a05:800::/29 Signature Algorithm: sha256WithRSAEncryption 3c:7e:4b:70:b5:dc:d8:36:8b:7b:f3:6c:dd:93:3e:47:a8:9c: 64:fb:7d:da:77:4d:a6:00:d0:3b:51:45:27:44:0c:50:bc:bd: 29:06:c6:db:d1:8b:f5:9a:d5:e9:fa:c6:0a:2b:6f:ed:9d:18: 4b:c9:87:8c:01:3d:7c:d9:82:cb:40:8e:fe:eb:ec:6f:17:8a: c8:66:73:11:a7:ec:cb:9f:49:ea:c5:27:55:99:30:a5:47:da: a3:07:a5:7e:2c:40:9c:76:80:74:83:1e:24:23:ab:37:29:db: 3d:a5:43:88:49:7b:2d:ae:19:dd:f4:cc:37:3a:64:c9:cf:57: 58:de:61:49:8c:d6:c9:77:ef:97:29:52:dd:71:e7:3d:f9:1d: 8d:29:1f:dc:fc:9e:84:8a:4b:f3:11:ca:6b:7f:90:8d:d8:03: 87:86:2e:80:a5:15:71:e1:65:20:90:97:1f:c3:08:a2:67:74: b8:dc:40:77:3d:2b:6a:cc:8a:9f:59:c8:a9:87:70:f2:a3:68: 45:6f:2c:fb:69:c1:69:3f:de:59:e1:3c:b8:69:88:33:41:50: 6c:08:2d:24:52:6c:9f:b9:da:02:2b:76:74:be:04:59:cf:0d: cf:49:18:99:9f:53:87:65:e4:f5:a0:d1:37:54:cc:31:5b:b0: 7f:d4:87:5f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4ordNekokuMpYvRBf1bADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjM1ODlmZWVjYmU0YzRhYjQ0NGQ5Mzg2NDQ1NGRiY2Q3Y2QwZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVcPBva5N1Od7l6DbEr28VHz2sDn UtYfRNXnqGAqWO66SZ635XNcAkQZVuB22n0PjrkxXtxOqX85EAJf+OiKqHYsrT/Z m35gRa6xytvyTqgH3ra/LkeUIvJEGbOP/O2hzOUXhGKHLRkzlc1tkbSvWAaDHIG3 uXsL1OBCD4z/zScrr8amVe8Abh5d0p5CV1eOvD2LH0CxYuw04RVBKK7CW9MxgW2Y XMEHQ4hXGcVOtbcRaOHrGGfj00qVGRsA9alfFyRX6XnSp5ATAGRJ6s3WFj26Lq+O v0QLwlrv9j8nTDMN7ccw8Qy6lE0mVWIO9U6ru3EskXy/5/L5cHuOMTWmGwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIY1if7svkxKtETZOGRFTbzXzQ3nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzUxNDBm Zi0wOTBlLTQzZGEtYjdjOC01OWU4MThjNmI3MWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvNTE0MGZm LTA5MGUtNDNkYS1iN2M4LTU5ZTgxOGM2YjcxYi8xL2hqV0pfdXktVEVxMFJOazRa RVZOdk5mTkRlYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUJ8MA0EAgACMAcDBQMqBQgAMA0GCSqGSIb3 DQEBCwUAA4IBAQA8fktwtdzYNot782zdkz5HqJxk+33ad02mANA7UUUnRAxQvL0p Bsbb0Yv1mtXp+sYKK2/tnRhLyYeMAT182YLLQI7+6+xvF4rIZnMRp+zLn0nqxSdV mTClR9qjB6V+LECcdoB0gx4kI6s3Kds9pUOISXstrhnd9Mw3OmTJz1dY3mFJjNbJ d++XKVLdcec9+R2NKR/c/J6EikvzEcprf5CN2AOHhi6ApRVx4WUgkJcfwwiiZ3S4 3EB3PStqzIqfWciph3Dyo2hFbyz7acFpP95Z4Ty4aYgzQVBsCC0kUmyfudoCK3Z0 vgRZzw3PSRiZn1OHZeT1oNE3VMwxW7B/1Idf -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:36 2026 by rpki-client