This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer File: HDepAm5Fto_kc1pGm3VjYTCtElw.cer (raw, json) Hash identifier: eZBRwQ0ecycck3aEZnORDZjfkKAQRkraKRpNp7Znvk8= Subject key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA59605DD32AE1DA4A5E5AF8AE2CA05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210625 IP: 83.229.103.0/24 IP: 83.229.111.0/24 IP: 141.226.55.0/24 IP: 141.226.71.0/24 IP: 147.236.98.0/23 IP: 147.236.228.0/22 IP: 2a13:54c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:96:05:dd:32:ae:1d:a4:a5:e5:af:8a:e2:ca:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c37a9026e45b68fe4735a469b75636130ad125c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:67:41:83:f2:64:97:ce:91:46:4b:74:14:cf: 7e:b4:c8:99:c9:ed:4d:78:9f:93:ae:cf:60:a7:79: 43:d1:7b:5b:ca:56:f7:1c:98:ca:aa:47:7e:1c:71: d5:31:8c:0a:7d:a9:f1:9b:78:6f:87:65:1e:f5:0a: 5d:07:3f:1f:cd:6b:62:35:af:3d:d1:db:ed:b0:93: 17:39:e0:f5:97:fc:64:66:49:fd:18:ea:8d:86:0c: ea:3f:62:94:4f:d3:e0:30:8a:2a:ce:e8:62:5e:2c: 27:97:94:b3:78:b0:07:db:fd:88:bf:00:94:44:87: 5f:77:24:5a:56:fb:f4:70:83:6a:37:75:3d:62:56: a1:e1:87:c2:3a:14:e7:ec:3c:09:0d:fb:a6:68:1a: ff:4d:c8:31:92:99:ee:23:5d:d8:a6:a7:4d:f8:c9: ce:42:56:30:b1:46:d6:45:ac:0f:60:1b:26:4b:44: 13:ff:b7:4e:d7:cd:a6:ca:f1:6c:d5:0b:da:02:c5: d6:4a:56:d7:66:62:d2:6e:71:91:fb:ee:55:87:a1: 1c:02:12:a7:f1:b6:6c:5a:0d:62:7b:b0:c4:6b:ee: 2e:e4:e7:52:6c:33:b4:fd:c4:1a:81:e7:47:33:8b: 4b:31:4e:e5:01:1a:85:eb:de:3a:53:c8:59:6c:ea: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.229.103.0/24 83.229.111.0/24 141.226.55.0/24 141.226.71.0/24 147.236.98.0/23 147.236.228.0/22 IPv6: 2a13:54c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210625 Signature Algorithm: sha256WithRSAEncryption 98:a0:c7:3c:65:50:47:4c:00:fc:53:8c:32:b7:6e:f3:cc:e4: d2:b3:03:85:63:fe:77:d5:1c:d0:2e:88:bc:d5:65:f6:21:fa: a1:35:e8:7e:0c:94:08:95:b8:21:37:0e:6e:88:de:c2:7e:0b: 32:d7:78:bb:a4:39:a0:c6:50:49:0b:54:06:8e:59:b8:2d:f4: 9c:f4:af:42:8f:c5:e9:90:ef:37:ee:f0:84:75:22:44:2c:a5: 92:08:ad:b8:de:43:b4:f3:1a:27:42:e4:e1:dc:90:e0:9c:d9: 4b:89:95:32:2b:1a:7f:90:a7:b5:d8:9d:26:de:24:23:77:5b: 09:e4:98:88:ff:a0:31:da:61:05:b0:8b:38:c6:a7:05:43:9e: d2:61:4f:51:97:8c:a5:e1:9b:e3:7d:a1:17:9a:6e:66:d0:a4: f0:a2:a8:77:da:06:18:8f:65:7d:44:c0:ad:56:1f:2f:72:a5: 79:7a:b6:03:85:cd:2f:f9:15:7d:0e:e0:c3:20:a4:b7:71:ae: a1:33:c3:eb:c5:84:43:f0:1f:b9:a6:84:47:2e:f1:d4:7d:67: b9:d5:9b:ed:be:2f:12:13:0d:6a:bf:34:c5:f4:af:ab:04:ed: 45:a8:fe:96:96:73:9e:3b:c7:55:e0:dd:a5:01:43:3d:6b:ff: 35:4f:08:fc -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt+pZYF3TKuHaSl5a+K4soFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzM3YTkwMjZlNDViNjhmZTQ3MzVhNDY5Yjc1NjM2MTMwYWQxMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GdBg/Jkl86RRkt0FM9+tMiZye1N eJ+Trs9gp3lD0Xtbylb3HJjKqkd+HHHVMYwKfanxm3hvh2Ue9QpdBz8fzWtiNa89 0dvtsJMXOeD1l/xkZkn9GOqNhgzqP2KUT9PgMIoqzuhiXiwnl5SzeLAH2/2IvwCU RIdfdyRaVvv0cINqN3U9Ylah4YfCOhTn7DwJDfumaBr/TcgxkpnuI13YpqdN+MnO QlYwsUbWRawPYBsmS0QT/7dO182myvFs1QvaAsXWSlbXZmLSbnGR++5Vh6EcAhKn 8bZsWg1ie7DEa+4u5OdSbDO0/cQagedHM4tLMU7lARqF6946U8hZbOothwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFBw3qQJuRbaP5HNaRpt1Y2EwrRJcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1LzJiYjYw My1mNDc5LTQwY2ItODJkNC00OGQ2NzI5NzNiMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvMmJiNjAz LWY0NzktNDBjYi04MmQ0LTQ4ZDY3Mjk3M2IxMy8xL0hEZXBBbTVGdG9fa2MxcEdt M1ZqWVRDdEVsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAU+VnAwQAU+VvAwQAjeI3AwQAjeJHAwQBk+xi AwQCk+zkMA0EAgACMAcDBQMqE1TAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM2 wTANBgkqhkiG9w0BAQsFAAOCAQEAmKDHPGVQR0wA/FOMMrdu88zk0rMDhWP+d9Uc 0C6IvNVl9iH6oTXofgyUCJW4ITcObojewn4LMtd4u6Q5oMZQSQtUBo5ZuC30nPSv Qo/F6ZDvN+7whHUiRCylkgituN5DtPMaJ0Lk4dyQ4JzZS4mVMisaf5CntdidJt4k I3dbCeSYiP+gMdphBbCLOManBUOe0mFPUZeMpeGb432hF5puZtCk8KKod9oGGI9l fUTArVYfL3KleXq2A4XNL/kVfQ7gwyCkt3GuoTPD68WEQ/AfuaaERy7x1H1nudWb 7b4vEhMNar80xfSvqwTtRaj+lpZznjvHVeDdpQFDPWv/NU8I/A== -----END CERTIFICATE-----Generated at Wed Jan 21 05:07:51 2026 by rpki-client