This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer (raw, json) Hash identifier: yvnICLLGwcnDW7TZOWyc+vbBK89I8bboWZiUR0Ex/G0= Subject key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E9A7F5CCEBE1A2E3BB9CDD7C784C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209181 AS: 213051 IP: 2.58.192.0/22 IP: 79.143.16.0 -- 79.143.18.255 IP: 89.46.123.0/24 IP: 128.0.38.0/23 IP: 185.252.0.0/22 IP: 193.109.108.0/22 IP: 2a09:e9c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9a:7f:5c:ce:be:1a:2e:3b:b9:cd:d7:c7:84:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:6c:bb:5c:4f:f8:f3:19:da:cf:a1:3c:07: e7:04:54:09:cb:27:9f:df:47:cb:8c:cb:84:2d:a0: 7b:65:44:0a:42:8c:d1:93:09:06:06:0f:31:59:8b: 11:bd:92:b2:d2:b9:c5:3a:70:1c:9f:6a:dc:c5:af: 18:03:ae:1c:bf:30:e9:99:1d:8f:30:fd:20:aa:71: 67:29:59:d7:26:f1:84:b4:4d:d1:ae:4c:bd:09:b8: e3:d3:e2:21:4d:e3:67:5a:80:f1:bc:5f:f7:82:a8: 6e:3e:af:44:a2:c0:54:b3:1f:48:85:1d:06:3a:07: db:17:58:c5:81:09:da:04:e3:b7:8c:a4:d3:60:6f: d8:1d:2f:4d:b3:b7:d9:34:70:f2:67:3f:38:08:52: 62:95:2f:55:6d:f2:9d:70:4e:73:76:4b:8e:d5:75: 27:35:66:77:ac:3c:30:14:77:99:2d:ed:09:bf:50: 50:a9:c5:a1:b2:82:e9:83:3b:6e:79:65:8d:a9:4d: 5f:64:5b:d7:00:c9:99:ac:a1:46:f2:01:e1:01:54: bb:2d:3a:13:0c:65:e0:39:24:94:94:d0:63:38:05: bf:e9:e8:ac:a0:6e:a6:14:7d:85:36:83:01:76:af: fd:7c:16:71:e9:26:0f:52:a4:c4:0c:6a:5e:d6:b8: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.192.0/22 79.143.16.0-79.143.18.255 89.46.123.0/24 128.0.38.0/23 185.252.0.0/22 193.109.108.0/22 IPv6: 2a09:e9c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209181 213051 Signature Algorithm: sha256WithRSAEncryption 21:19:e4:37:e9:1b:9c:03:da:7a:0a:5d:f4:61:6f:2b:c4:0c: f6:18:68:49:cc:17:94:8d:79:d0:7a:84:82:9a:e7:d1:bd:22: d9:c6:68:0c:9e:f4:9c:a4:d6:e5:13:4d:dc:29:38:e0:11:81: f9:0d:3b:69:ec:b8:7b:1c:3b:7d:01:b3:3a:34:e8:fc:a3:b7: f1:e7:49:75:a8:79:c2:77:23:4b:39:a3:df:b6:00:45:1f:e7: 6e:e3:05:4c:bc:2e:c5:6c:30:bb:03:ce:a8:1d:d9:42:6b:c6: 10:7c:5b:b9:62:59:58:ed:87:39:66:ba:68:1a:7a:58:13:7d: b7:9c:93:e0:2c:71:d2:e2:8f:9b:d5:45:7b:be:ef:30:c3:5b: 78:9c:ab:22:f4:79:15:dd:a2:60:8f:1f:5d:21:06:e7:35:63: c2:49:30:64:ca:8b:d9:d2:19:b7:2c:ff:07:42:7c:3d:12:2e: 52:87:6e:be:1a:11:8b:d5:15:61:1f:f1:59:c6:d3:42:bc:eb: 3a:a5:b7:71:57:4c:7c:71:f1:1e:0a:97:df:15:c6:66:d9:58: 8d:9b:22:6e:9f:eb:fb:07:f1:9d:5a:61:e0:42:dd:95:9c:26: b1:3f:3d:3c:1e:df:79:05:e6:1e:5c:05:fb:ea:10:b8:37:b3: fd:5e:31:22 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt5fpp/XM6+Gi47uc3Xx4TIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmE4ZmY0YzljNTY2NjdkOTkwMjVkN2YwMTU5MWNiZjc3YWQyZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOlsu1xP+PMZ2s+hPAfnBFQJyyef 30fLjMuELaB7ZUQKQozRkwkGBg8xWYsRvZKy0rnFOnAcn2rcxa8YA64cvzDpmR2P MP0gqnFnKVnXJvGEtE3Rrky9Cbjj0+IhTeNnWoDxvF/3gqhuPq9EosBUsx9IhR0G OgfbF1jFgQnaBOO3jKTTYG/YHS9Ns7fZNHDyZz84CFJilS9VbfKdcE5zdkuO1XUn NWZ3rDwwFHeZLe0Jv1BQqcWhsoLpgztueWWNqU1fZFvXAMmZrKFG8gHhAVS7LToT DGXgOSSUlNBjOAW/6eisoG6mFH2FNoMBdq/9fBZx6SYPUqTEDGpe1rjrhQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFIao/0ycVmZ9mQJdfwFZHL93rS8JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2M5MjFl OC02Yzk0LTRjYzItYjlmZC0wNmE0OTk2OGMyZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvYzkyMWU4 LTZjOTQtNGNjMi1iOWZkLTA2YTQ5OTY4YzJkMy8xL2hxal9USnhXWm4yWkFsMV9B VmtjdjNldEx3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQCAjrAMAwDBARPjxADBABPjxIDBABZLnsDBAGA ACYDBAK5/AADBALBbWwwDQQCAAIwBwMFAyoJ6cAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAzEdAgMDQDswDQYJKoZIhvcNAQELBQADggEBACEZ5DfpG5wD2noKXfRh byvEDPYYaEnMF5SNedB6hIKa59G9ItnGaAye9Jyk1uUTTdwpOOARgfkNO2nsuHsc O30Bszo06Pyjt/HnSXWoecJ3I0s5o9+2AEUf527jBUy8LsVsMLsDzqgd2UJrxhB8 W7liWVjthzlmumgaelgTfbeck+AscdLij5vVRXu+7zDDW3icqyL0eRXdomCPH10h Buc1Y8JJMGTKi9nSGbcs/wdCfD0SLlKHbr4aEYvVFWEf8VnG00K86zqlt3FXTHxx 8R4Kl98VxmbZWI2bIm6f6/sH8Z1aYeBC3ZWcJrE/PTwe33kF5h5cBfvqELg3s/1e MSI= -----END CERTIFICATE-----Generated at Fri Jan 16 02:47:19 2026 by rpki-client