This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer File: HJe0gj08nhIexkmCHgDwp5rrm40.cer (raw, json) Hash identifier: biL573zLsKzHcCxedtrx0jmg/3ETZbiGyH5lCVRtHzw= Subject key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910F7A3829DAA6ED814F065760552DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43608 IP: 62.77.132.0/22 IP: 78.24.104.0/21 IP: 185.61.56.0/22 IP: 2a00:9500::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f7:a3:82:9d:aa:6e:d8:14:f0:65:76:05:52:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:28:76:4b:47:59:2f:a4:33:33:08:93:7d: 4e:ee:03:2b:28:7b:80:db:47:0a:15:80:4e:31:f3: 9c:f3:1a:47:4c:ef:7b:1a:17:a0:f5:b2:0e:b9:8f: 7c:44:ba:4f:e5:a9:5e:3c:27:9d:53:a5:4c:f2:c8: 4e:0b:5d:99:11:76:51:8a:3a:bd:b9:81:1a:93:29: 3e:6c:99:16:c0:0e:8e:20:c0:f0:eb:e7:bc:ba:cf: d9:d7:5c:e9:f2:15:c5:7f:b3:c7:ad:04:bf:1c:d1: c8:97:fd:b4:7c:3c:b5:f4:80:3d:0d:e5:d5:96:6a: 62:ac:cb:d5:84:b7:b6:27:19:d6:07:fb:9d:6b:df: 75:28:f1:f3:c8:d3:d5:05:a8:1a:d7:67:2d:d6:b4: bf:91:25:08:b9:de:1c:d9:54:14:fa:b4:9c:ae:50: b7:78:78:e4:a6:5d:db:ba:8d:76:00:ff:37:87:e8: f6:33:7c:93:69:d0:e7:fe:ae:52:3f:b4:05:18:9a: a9:a0:d8:79:d6:d9:be:1c:57:ab:3a:85:f5:c4:64: cd:90:48:bb:71:c7:1e:02:bf:9d:dc:ec:3d:08:08: 2c:c2:d2:20:38:5f:42:27:a2:03:03:c7:43:bb:86: 90:5d:b3:cb:e6:cf:95:57:44:7b:16:d8:a2:74:7e: d1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.132.0/22 78.24.104.0/21 185.61.56.0/22 IPv6: 2a00:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43608 Signature Algorithm: sha256WithRSAEncryption 87:16:29:87:29:ef:37:0e:f8:24:9b:44:cf:58:2a:b5:bf:a1: 7d:f7:eb:a2:7a:99:c3:59:3d:d0:41:89:f2:86:f0:76:d7:1d: 72:1d:22:49:d0:d8:6a:01:6f:c3:92:9f:03:40:24:8d:df:f3: 5b:c5:52:44:58:11:fc:69:29:3b:9f:63:22:79:cb:db:d5:20: 85:f5:c4:de:b3:75:16:9c:b1:7a:54:68:fc:3a:c0:26:2c:25: 69:fd:9c:4f:e0:ce:93:59:f2:dc:b5:07:b1:44:db:27:6a:48: 4d:ea:fb:34:6c:c8:ec:31:d2:33:76:5c:07:04:bc:1d:16:e3: a1:40:4a:48:cc:67:e5:8c:a7:ee:2e:0c:70:15:c3:f9:86:56: 96:43:9d:94:ab:56:b0:78:ab:09:92:b4:80:19:32:75:0f:cb: c4:38:7b:62:04:32:4e:53:18:8f:25:a5:7e:0a:88:f5:22:ca: 5d:41:3f:d2:d4:87:19:8d:94:5e:b2:94:f4:1d:63:e9:48:14: 91:18:2c:66:e8:c5:4a:fd:e0:6e:09:d1:7d:d2:d9:c1:b2:e6: af:0d:48:8c:37:4d:24:41:2e:2f:a4:60:88:e8:50:7b:b4:22: 34:f0:ae:d8:bb:86:15:6d:56:ef:b7:b2:f4:db:f7:59:5d:38: 43:fc:e2:03 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5EPejgp2qbtgU8GV2BVLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzk3YjQ4MjNkM2M5ZTEyMWVjNjQ5ODIxZTAwZjBhNzlhZWI5YjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBcodktHWS+kMzMIk31O7gMrKHuA 20cKFYBOMfOc8xpHTO97Gheg9bIOuY98RLpP5alePCedU6VM8shOC12ZEXZRijq9 uYEakyk+bJkWwA6OIMDw6+e8us/Z11zp8hXFf7PHrQS/HNHIl/20fDy19IA9DeXV lmpirMvVhLe2JxnWB/uda991KPHzyNPVBaga12ct1rS/kSUIud4c2VQU+rScrlC3 eHjkpl3buo12AP83h+j2M3yTadDn/q5SP7QFGJqpoNh51tm+HFerOoX1xGTNkEi7 ccceAr+d3Ow9CAgswtIgOF9CJ6IDA8dDu4aQXbPL5s+VV0R7FtiidH7R3wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFByXtII9PJ4SHsZJgh4A8Kea65uNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzE1NjQx YS02NjE0LTQ1ZTQtYTJhOS05YjljZDg5NjU5ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvMTU2NDFh LTY2MTQtNDVlNC1hMmE5LTliOWNkODk2NTllMC8xL0hKZTBnajA4bmhJZXhrbUNI Z0R3cDVycm00MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCPk2EAwQDThhoAwQCuT04MA0EAgACMAcDBQAq AJUAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqWDANBgkqhkiG9w0BAQsFAAOC AQEAhxYphynvNw74JJtEz1gqtb+hfffronqZw1k90EGJ8obwdtcdch0iSdDYagFv w5KfA0Akjd/zW8VSRFgR/GkpO59jInnL29UghfXE3rN1FpyxelRo/DrAJiwlaf2c T+DOk1ny3LUHsUTbJ2pITer7NGzI7DHSM3ZcBwS8HRbjoUBKSMxn5Yyn7i4McBXD +YZWlkOdlKtWsHirCZK0gBkydQ/LxDh7YgQyTlMYjyWlfgqI9SLKXUE/0tSHGY2U XrKU9B1j6UgUkRgsZujFSv3gbgnRfdLZwbLmrw1IjDdNJEEuL6RgiOhQe7QiNPCu 2LuGFW1W77ey9Nv3WV04Q/ziAw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:09 2026 by rpki-client