This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer File: HLQJLqLRKW3-YdeKffs8HgORZAg.cer (raw, json) Hash identifier: /yNFAaTui25vktdXnfAdMN6ARiMl4Ua6EIyWf2xrfj8= Subject key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF20F0CD22D808FA6FD0E4EAC277CF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203071 IP: 45.147.94.0/24 IP: 213.134.4.0/24 IP: 2a13:4e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0f:0c:d2:2d:80:8f:a6:fd:0e:4e:ac:27:7c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:93:90:38:15:97:63:bb:86:e2:94:02:60: c5:bc:ed:84:5d:d4:09:b4:d3:90:fb:07:0c:91:7d: 6e:68:19:8a:b7:fe:61:81:e6:7b:76:0a:97:b8:dc: 91:15:25:45:73:e1:6e:78:d3:21:aa:07:ab:19:3d: 04:4f:83:da:b1:cb:42:10:c5:26:be:9b:69:c4:6c: 40:fc:4b:7d:e9:e4:1b:64:fa:9d:85:bd:94:8b:a1: 2c:88:43:33:87:32:9d:5e:aa:fb:08:1e:61:ce:2e: 5f:85:7b:3a:9e:fe:3b:1a:5a:b9:d5:b0:01:f6:30: 42:fe:43:27:34:41:97:7a:ff:16:44:c8:97:0d:42: 04:84:38:63:91:8c:ad:52:92:61:1f:4b:09:fc:b1: fc:df:67:14:2c:22:7e:20:27:16:24:1d:49:8c:84: fd:d2:6e:8e:e6:f1:ca:0c:64:0c:35:4c:87:a4:ef: 30:57:14:81:e1:c4:9f:1a:95:c8:70:b8:9a:24:7e: af:f6:7c:fc:03:4d:6d:74:60:b7:14:dc:49:27:f9: d2:88:b0:4a:46:0a:55:4c:2d:1c:99:29:c3:41:5d: 6c:86:55:73:b4:09:5e:1f:83:5a:14:72:74:66:79: 7d:d4:e7:39:da:2b:b5:49:de:30:14:2f:e1:6c:d2: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.94.0/24 213.134.4.0/24 IPv6: 2a13:4e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203071 Signature Algorithm: sha256WithRSAEncryption 51:d1:d8:cc:0c:2c:30:6e:1c:af:c7:ae:17:32:fb:a6:d6:50: de:5e:e8:8e:19:01:c6:70:ce:24:30:5d:d4:4a:23:35:04:e0: 37:60:07:b9:52:e7:da:bb:6e:7b:a0:c9:34:50:de:90:ee:36: 24:cf:04:4b:a7:e2:12:df:3a:03:40:1a:54:cf:d0:5a:25:64: 0d:78:3b:c6:75:af:4c:58:c6:99:2f:82:57:f0:e5:f8:1a:eb: 02:61:55:90:4d:d0:5a:c5:a2:2c:31:8f:9d:68:a3:30:4a:a1: c1:0a:83:fe:0b:20:db:a3:65:50:71:42:8b:a6:00:bd:d0:84: d2:4e:f2:c8:53:e4:c6:88:bf:50:cb:96:dc:00:0c:37:8f:4e: 73:89:9b:de:65:22:e3:89:2e:3f:c8:81:13:6f:10:d3:ef:27: 81:d9:0c:88:44:4e:4f:73:74:ed:60:4a:97:9d:1c:ee:a1:00: 88:3d:1f:1f:51:59:2f:72:2b:6c:a8:7b:9a:fa:0b:42:47:ef: a9:bc:4b:a2:b5:87:8d:c4:a5:d8:7b:b1:fc:c5:04:ce:45:08: dc:b7:ef:0e:fe:9a:49:b1:13:2f:36:6b:b1:0d:d1:b9:e4:5b: 57:bc:fb:21:90:be:3b:32:55:7c:ce:28:a4:cd:18:5d:2d:6d: 5f:f7:cb:fc -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/8g8M0i2Aj6b9Dk6sJ3z5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxY2I0MDkyZWEyZDEyOTZkZmU2MWQ3OGE3ZGZiM2MxZTAzOTE2NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUqTkDgVl2O7huKUAmDFvO2EXdQJ tNOQ+wcMkX1uaBmKt/5hgeZ7dgqXuNyRFSVFc+FueNMhqgerGT0ET4PasctCEMUm vptpxGxA/Et96eQbZPqdhb2Ui6EsiEMzhzKdXqr7CB5hzi5fhXs6nv47Glq51bAB 9jBC/kMnNEGXev8WRMiXDUIEhDhjkYytUpJhH0sJ/LH832cULCJ+ICcWJB1JjIT9 0m6O5vHKDGQMNUyHpO8wVxSB4cSfGpXIcLiaJH6v9nz8A01tdGC3FNxJJ/nSiLBK RgpVTC0cmSnDQV1shlVztAleH4NaFHJ0Znl91Oc52iu1Sd4wFC/hbNJdQQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBy0CS6i0Slt/mHXin37PB4DkWQIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzRjYTAw NS0xNzdkLTQ0YjUtOWQ5Ni1jNTQ2OWZjN2QyZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNGNhMDA1 LTE3N2QtNDRiNS05ZDk2LWM1NDY5ZmM3ZDJkMC8xL0hMUUpMcUxSS1czLVlkZUtm ZnM4SGdPUlpBZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQALZNeAwQA1YYEMA0EAgACMAcDBQMqE06AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMZPzANBgkqhkiG9w0BAQsFAAOCAQEAUdHY zAwsMG4cr8euFzL7ptZQ3l7ojhkBxnDOJDBd1EojNQTgN2AHuVLn2rtue6DJNFDe kO42JM8ES6fiEt86A0AaVM/QWiVkDXg7xnWvTFjGmS+CV/Dl+BrrAmFVkE3QWsWi LDGPnWijMEqhwQqD/gsg26NlUHFCi6YAvdCE0k7yyFPkxoi/UMuW3AAMN49Oc4mb 3mUi44kuP8iBE28Q0+8ngdkMiEROT3N07WBKl50c7qEAiD0fH1FZL3IrbKh7mvoL QkfvqbxLorWHjcSl2Hux/MUEzkUI3LfvDv6aSbETLzZrsQ3RueRbV7z7IZC+OzJV fM4opM0YXS1tX/fL/A== -----END CERTIFICATE-----Generated at Tue Jan 27 00:35:10 2026 by rpki-client