This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer File: hyj0ANg9Saqm6TIMosv6k9pb55s.cer (raw, json) Hash identifier: nG2V04OuQLdpy4HPPfV9hAuOTXci1/VrLzIVbf2Yeg0= Subject key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35BFDD04E435389D146111DCADBC00 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204986 IP: 185.233.180.0/22 IP: 2a0c:ed00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bf:dd:04:e4:35:38:9d:14:61:11:dc:ad:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:29:21:a9:85:3e:b9:75:91:54:b5:65:f1: 7f:f3:97:42:04:b6:7a:51:78:36:2c:30:ff:1a:ac: 4d:4f:35:a3:c1:b9:d0:99:c1:00:36:f1:12:39:89: 6c:00:d1:3f:95:ec:0d:c5:62:aa:b0:1a:b1:2a:38: 38:e0:6a:65:7e:2d:ba:b0:c4:04:d6:c3:ae:be:10: 91:d1:48:78:d8:0f:c5:35:b0:af:f6:73:43:29:a9: 10:82:56:d1:76:91:04:4a:5a:09:d5:3b:2f:7c:bd: ad:42:7c:a3:f4:dc:9d:b8:25:f3:28:0e:ea:aa:41: 2f:94:7e:d1:9f:23:67:c8:bb:f2:32:a3:3c:b3:15: 6c:36:84:ff:3e:70:c0:fe:22:01:32:5b:f1:4d:fb: 78:26:f4:9a:a5:02:ec:99:a1:9a:3c:ed:a5:30:4c: 56:7c:35:70:6e:51:77:f2:fc:c7:2b:60:d4:58:8a: 1e:0d:04:6e:d0:23:48:43:43:b1:8e:89:7c:71:a7: 02:c0:94:3e:34:f5:6a:67:66:c7:b0:c0:eb:d5:3c: 0a:76:9e:9f:ad:94:12:23:24:4b:e9:78:df:ff:41: 51:00:28:1c:be:15:07:a6:d2:03:f8:c1:02:30:25: 42:55:96:61:39:e2:8a:be:58:98:a0:2a:d7:c7:db: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.180.0/22 IPv6: 2a0c:ed00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204986 Signature Algorithm: sha256WithRSAEncryption 95:1c:c5:4d:ed:3c:57:64:38:9a:84:5a:40:e4:d4:16:fd:1f: 77:18:00:bd:3c:f1:e5:4c:f0:e4:05:9c:ef:17:39:b5:3b:c8: cb:e6:90:25:86:2a:21:2b:0d:12:ed:99:a6:6c:be:87:87:8f: e8:ab:b5:f4:47:05:70:7f:c3:70:be:df:8d:17:9b:2d:4c:e4: 7a:10:0c:fa:5f:7b:d6:48:cd:c6:7e:7d:93:69:65:d2:89:da: be:f4:0c:c1:0e:51:4e:fd:c5:ad:f9:b3:2b:30:35:2f:03:3d: 60:fa:48:ac:8b:82:e4:f7:12:e7:3c:e3:dc:5c:0f:6c:bd:b8: fd:43:30:19:70:ab:31:5a:b1:2d:3f:f6:5a:67:a8:58:77:b1: 55:f1:fd:50:bc:94:87:34:be:5a:e6:2b:c3:17:7d:52:f7:b5: 84:19:9c:8e:64:d9:9d:90:a3:70:23:78:66:12:c0:b4:4e:4f: fe:94:f7:78:93:83:8b:1f:47:35:f5:76:e7:fd:43:5c:bf:3a: 62:89:e5:dc:6d:6f:83:11:cc:d2:ec:fa:ec:c2:36:61:8b:78: b3:68:c6:50:84:ed:d6:98:e3:a3:d7:fb:33:53:71:46:71:90: ae:d2:04:b7:03:06:ef:0d:6e:54:53:ed:41:ba:b5:db:d9:39: 11:ab:66:fe -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7Nb/dBOQ1OJ0UYRHcrbwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzI4ZjQwMGQ4M2Q0OWFhYTZlOTMyMGNhMmNiZmE5M2RhNWJlNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMwpIamFPrl1kVS1ZfF/85dCBLZ6 UXg2LDD/GqxNTzWjwbnQmcEANvESOYlsANE/lewNxWKqsBqxKjg44Gplfi26sMQE 1sOuvhCR0Uh42A/FNbCv9nNDKakQglbRdpEESloJ1TsvfL2tQnyj9NyduCXzKA7q qkEvlH7RnyNnyLvyMqM8sxVsNoT/PnDA/iIBMlvxTft4JvSapQLsmaGaPO2lMExW fDVwblF38vzHK2DUWIoeDQRu0CNIQ0Oxjol8cacCwJQ+NPVqZ2bHsMDr1TwKdp6f rZQSIyRL6Xjf/0FRACgcvhUHptID+MECMCVCVZZhOeKKvliYoCrXx9soZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIco9ADYPUmqpukyDKLL+pPaW+ebMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzMzZjFh Yi02YTM1LTRlNjMtOGJkYy1hMjVlMTRkNTM5YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMzNmMWFi LTZhMzUtNGU2My04YmRjLWEyNWUxNGQ1MzlhMi8xL2h5ajBBTmc5U2FxbTZUSU1v c3Y2azlwYjU1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuem0MA0EAgACMAcDBQMqDO0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgujANBgkqhkiG9w0BAQsFAAOCAQEAlRzFTe08V2Q4 moRaQOTUFv0fdxgAvTzx5Uzw5AWc7xc5tTvIy+aQJYYqISsNEu2Zpmy+h4eP6Ku1 9EcFcH/DcL7fjRebLUzkehAM+l971kjNxn59k2ll0onavvQMwQ5RTv3FrfmzKzA1 LwM9YPpIrIuC5PcS5zzj3FwPbL24/UMwGXCrMVqxLT/2WmeoWHexVfH9ULyUhzS+ WuYrwxd9Uve1hBmcjmTZnZCjcCN4ZhLAtE5P/pT3eJODix9HNfV25/1DXL86Yonl 3G1vgxHM0uz67MI2YYt4s2jGUITt1pjjo9f7M1NxRnGQrtIEtwMG7w1uVFPtQbq1 29k5Eatm/g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:50 2026 by rpki-client