This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer File: hpwOc330guiapnJs3YqZWKp0ER4.cer (raw, json) Hash identifier: 7m4HOk9vZmQoRwHSoTD1i5FF5xZdBx84H0Ljn9Y61w4= Subject key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775926538F6C52DB078409A07E4F08A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.135.217.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:53:8f:6c:52:db:07:84:09:a0:7e:4f:08:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=869c0e737df482e89aa6726cdd8a9958aa74111e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:a6:cc:ca:1c:01:a9:d6:8e:a0:87:c8:1a: 68:18:e5:45:a1:0d:e9:a9:d2:ca:45:4c:3d:b1:11: 0f:22:01:65:09:e5:e5:c3:47:79:48:e3:d2:a0:46: f1:32:cf:60:cb:8e:0a:4d:09:1c:6a:6f:ed:23:fc: f1:cb:38:a7:b1:14:24:c9:b9:ea:8a:80:af:4c:55: f5:30:62:6e:44:95:c8:ca:04:5d:46:6a:3f:64:0f: 4a:02:59:6b:95:b9:b1:84:a5:ac:a8:0a:5d:b1:41: ea:d7:c0:a3:95:8e:c6:1b:08:8b:72:04:78:ac:b0: 5a:26:78:c3:4d:d1:e1:0d:41:34:ce:5d:d2:fb:fe: 26:c2:4c:c2:13:47:1c:67:6a:9b:15:b1:f7:07:7f: 4d:ac:ff:e3:80:22:77:51:43:78:9e:a3:f6:04:11: 98:fb:a6:e2:79:e0:ef:14:c5:88:9e:38:31:c5:94: 14:9e:ee:51:87:b6:5e:dc:6c:9f:36:01:82:aa:a5: 19:1f:fb:55:51:87:58:e5:5d:bf:3a:2b:02:64:80: 46:92:05:b8:04:4c:db:f7:91:e4:13:8d:a8:ba:b7: be:ee:a8:0c:a0:4b:6e:85:17:67:08:03:06:b7:f4: d7:19:bf:20:3c:6e:97:3c:97:35:3c:16:bb:6a:92: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.135.217.0/24 Signature Algorithm: sha256WithRSAEncryption 03:54:83:a2:0e:91:b8:62:03:59:8c:19:8d:69:a5:d0:21:54: 36:ae:87:8d:bb:1d:64:4b:23:bb:55:6e:fa:ad:55:97:d9:a0: 8a:cf:8c:fa:74:85:a9:73:1b:dc:6b:4f:0d:67:ab:4d:9e:58: 67:9e:b7:bd:e4:79:22:32:16:90:93:02:e5:36:ae:30:76:96: 39:ee:a4:f8:27:05:24:38:10:f9:c3:0b:3c:ff:2b:43:d3:63: 61:f4:72:8e:54:6f:da:a1:b5:d7:36:91:6e:a5:da:6b:32:ad: 00:d5:35:b4:22:ac:cf:82:66:90:54:cf:57:8c:3d:a2:27:b2: fc:be:2b:44:6f:7c:82:e9:e2:68:22:a9:a4:76:60:33:c7:f1: 96:ff:f7:1c:49:27:17:d4:52:4a:68:6c:9c:92:51:36:ca:44: 3a:03:97:4b:af:d0:f6:69:6a:63:83:9b:61:ca:5c:72:58:39: 51:e0:b0:08:1b:fe:55:7d:a0:b9:7c:90:9e:8a:44:de:7b:58: 4f:3f:de:97:a6:25:3a:f4:a0:86:d9:fb:e4:91:fa:65:68:c6: 73:2c:74:ff:15:30:ce:54:bb:2b:ce:fd:16:2b:a7:5f:7f:b9: 90:90:d2:f4:a4:74:14:fa:00:1a:38:a4:95:1c:c6:d4:7b:2b: e2:67:09:76 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WSZTj2xS2weECaB+TwihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjljMGU3MzdkZjQ4MmU4OWFhNjcyNmNkZDhhOTk1OGFhNzQxMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6WmzMocAanWjqCHyBpoGOVFoQ3p qdLKRUw9sREPIgFlCeXlw0d5SOPSoEbxMs9gy44KTQkcam/tI/zxyzinsRQkybnq ioCvTFX1MGJuRJXIygRdRmo/ZA9KAllrlbmxhKWsqApdsUHq18CjlY7GGwiLcgR4 rLBaJnjDTdHhDUE0zl3S+/4mwkzCE0ccZ2qbFbH3B39NrP/jgCJ3UUN4nqP2BBGY +6bieeDvFMWInjgxxZQUnu5Rh7Ze3GyfNgGCqqUZH/tVUYdY5V2/OisCZIBGkgW4 BEzb95HkE42oure+7qgMoEtuhRdnCAMGt/TXGb8gPG6XPJc1PBa7apLgtQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIacDnN99ILomqZybN2KmViqdBEeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3L2E3OTgw Yi1jZWY4LTRiNTMtYTAzMS1jNWUwZmFjYTRhNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvYTc5ODBi LWNlZjgtNGI1My1hMDMxLWM1ZTBmYWNhNGE1ZS8xL2hwd09jMzMwZ3VpYXBuSnMz WXFaV0twMEVSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwIfZMA0GCSqGSIb3DQEBCwUAA4IBAQADVIOi DpG4YgNZjBmNaaXQIVQ2roeNux1kSyO7VW76rVWX2aCKz4z6dIWpcxvca08NZ6tN nlhnnre95HkiMhaQkwLlNq4wdpY57qT4JwUkOBD5wws8/ytD02Nh9HKOVG/aobXX NpFupdprMq0A1TW0IqzPgmaQVM9XjD2iJ7L8vitEb3yC6eJoIqmkdmAzx/GW//cc SScX1FJKaGycklE2ykQ6A5dLr9D2aWpjg5thylxyWDlR4LAIG/5VfaC5fJCeikTe e1hPP96XpiU69KCG2fvkkfplaMZzLHT/FTDOVLsrzv0WK6dff7mQkNL0pHQU+gAa OKSVHMbUeyviZwl2 -----END CERTIFICATE-----Generated at Mon Jan 26 05:10:08 2026 by rpki-client