This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer File: hu4gHGXWVe6c_iUflR6pG7oVRWc.cer (raw, json) Hash identifier: 8GYsu7ASe+jCZ8FtJGN0ifs4Re0gzGt7Ky2OQw3c7sU= Subject key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834D74E17951932D112A8AB0914BF1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43054 IP: 45.91.121.0/24 IP: 45.93.148.0/24 IP: 45.131.180.0/24 IP: 45.140.132.0/24 IP: 45.147.95.0/24 IP: 46.229.240.0/24 IP: 80.91.219.0/24 IP: 87.236.163.0/24 IP: 185.201.16.0/22 IP: 185.209.51.0/24 IP: 185.218.226.0/24 IP: 185.225.27.0/24 IP: 188.190.112.0/23 IP: 193.41.32.0/24 IP: 193.200.214.0/24 IP: 2a01:ebc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d7:4e:17:95:19:32:d1:12:a8:ab:09:14:bf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86ee201c65d655ee9cfe251f951ea91bba154567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:12:6b:a6:fa:f1:3b:37:7c:e6:91:cc:5e: c0:42:bd:28:7f:e9:57:0c:76:46:44:0e:87:1c:96: 55:80:19:0b:8f:6f:06:fe:fa:81:6a:53:85:97:57: 11:34:d0:4d:c0:d6:e4:b0:98:37:c2:8e:b6:06:02: c8:24:15:11:54:72:c7:ff:6f:25:52:ce:67:a5:c7: 1e:c7:9b:39:b4:b4:45:fc:fd:4d:1b:87:1e:33:b4: 9d:c5:a0:45:4c:99:d9:c6:5a:05:5f:ce:74:e8:88: e7:2a:6b:6c:25:32:4f:4d:cc:04:d5:ef:5b:28:6d: f8:58:ab:37:8d:28:c0:3b:4c:b5:73:f7:83:59:45: d4:1a:f6:c1:7e:eb:85:8e:5d:9a:23:56:00:f4:ec: 2b:14:ec:7b:76:06:c6:4d:42:79:f3:98:1c:91:b1: 2e:8e:99:89:cd:47:b2:c6:09:6e:02:47:44:96:58: c2:ad:0f:07:15:3d:be:f1:40:46:06:b5:f7:35:41: d9:b3:8c:d6:36:7f:0e:12:84:21:04:47:de:9b:e3: 7f:7f:b6:7d:4c:11:1e:fe:de:a9:cd:b3:0a:b1:fd: bd:c4:c1:72:d7:30:4c:65:11:d7:85:89:47:af:66: cc:58:ed:99:0f:4b:0b:60:f2:c2:e0:c6:cd:a2:3e: d5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.121.0/24 45.93.148.0/24 45.131.180.0/24 45.140.132.0/24 45.147.95.0/24 46.229.240.0/24 80.91.219.0/24 87.236.163.0/24 185.201.16.0/22 185.209.51.0/24 185.218.226.0/24 185.225.27.0/24 188.190.112.0/23 193.41.32.0/24 193.200.214.0/24 IPv6: 2a01:ebc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43054 Signature Algorithm: sha256WithRSAEncryption 84:e3:5a:ae:ce:9a:60:8a:f3:00:14:f0:56:39:20:15:d5:f4: 3d:a2:ab:6e:0c:86:9e:c5:46:85:9c:a1:f1:dd:e0:dd:63:cb: 7a:a7:cf:34:f8:85:12:f5:76:c0:ce:84:fa:0d:ac:fd:a7:ba: 4a:3d:2c:37:43:6d:27:38:fa:6f:71:71:62:5f:f4:1c:2f:40: 50:17:3e:da:9f:9f:5f:3f:4e:de:bb:7a:61:dc:27:e5:f1:d6: e1:b8:bb:74:79:0a:03:8f:9e:36:8a:40:82:1d:44:62:07:4b: fa:a8:58:f9:8f:11:c7:ae:5c:de:ba:2c:e3:25:67:7f:24:80: 45:e8:3a:62:22:8a:64:03:9a:97:5e:08:b3:7d:2a:b6:8a:72: 78:15:9f:5f:47:f0:0d:9d:ac:2b:92:b3:08:87:03:96:e2:d7: 83:bf:61:2d:81:39:e9:d8:a2:32:4a:bf:17:a6:d4:e8:25:65: 1d:dc:41:35:10:9f:a7:f2:64:a0:9d:cf:d0:05:89:41:02:94: d3:b8:6f:af:ca:40:c6:e6:24:49:68:b1:7a:a3:a8:1c:5b:e9: db:0d:a7:f2:6b:d7:b3:99:ce:e5:c3:a8:4f:c8:a6:29:65:55: 76:49:19:ad:bb:40:e6:45:bc:c0:c9:d1:7a:f5:fc:1e:3e:ad: 06:06:de:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt4NNdOF5UZMtESqKsJFL8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmVlMjAxYzY1ZDY1NWVlOWNmZTI1MWY5NTFlYTkxYmJhMTU0NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YsSa6b68Ts3fOaRzF7AQr0of+lX DHZGRA6HHJZVgBkLj28G/vqBalOFl1cRNNBNwNbksJg3wo62BgLIJBURVHLH/28l Us5npccex5s5tLRF/P1NG4ceM7SdxaBFTJnZxloFX8506IjnKmtsJTJPTcwE1e9b KG34WKs3jSjAO0y1c/eDWUXUGvbBfuuFjl2aI1YA9OwrFOx7dgbGTUJ585gckbEu jpmJzUeyxgluAkdElljCrQ8HFT2+8UBGBrX3NUHZs4zWNn8OEoQhBEfem+N/f7Z9 TBEe/t6pzbMKsf29xMFy1zBMZRHXhYlHr2bMWO2ZD0sLYPLC4MbNoj7V0wIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFIbuIBxl1lXunP4lH5UeqRu6FUVnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzEzYTcz NS0zYjFjLTRkOWMtOGNmYS1hOGNhOGU0YzdlNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMTNhNzM1 LTNiMWMtNGQ5Yy04Y2ZhLWE4Y2E4ZTRjN2U3Ny8xL2h1NGdIR1hXVmU2Y19pVWZs UjZwRzdvVlJXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwYAQCAAEwWgMEAC1beQMEAC1dlAMEAC2DtAMEAC2MhAMEAC2T XwMEAC7l8AMEAFBb2wMEAFfsowMEArnJEAMEALnRMwMEALna4gMEALnhGwMEAby+ cAMEAMEpIAMEAMHI1jANBAIAAjAHAwUAKgHrwDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAqC4wDQYJKoZIhvcNAQELBQADggEBAITjWq7OmmCK8wAU8FY5IBXV9D2i q24Mhp7FRoWcofHd4N1jy3qnzzT4hRL1dsDOhPoNrP2nuko9LDdDbSc4+m9xcWJf 9BwvQFAXPtqfn18/Tt67emHcJ+Xx1uG4u3R5CgOPnjaKQIIdRGIHS/qoWPmPEceu XN66LOMlZ38kgEXoOmIiimQDmpdeCLN9KraKcngVn19H8A2drCuSswiHA5bi14O/ YS2BOenYojJKvxem1OglZR3cQTUQn6fyZKCdz9AFiUEClNO4b6/KQMbmJElosXqj qBxb6dsNp/Jr17OZzuXDqE/IpillVXZJGa27QOZFvMDJ0Xr1/B4+rQYG3tY= -----END CERTIFICATE-----Generated at Mon Jan 26 06:35:08 2026 by rpki-client