This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer File: HRV4JMY4xxige1NeDYJMskr8Bww.cer (raw, json) Hash identifier: KoZC/wksWAva9fOb3RXBbxbrxqwPwfZa1XvQOFYNgkU= Subject key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11AE69B8CA8C5EC78306FB8A472491 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211802 IP: 88.218.220.0/22 IP: 2a09:b480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ae:69:b8:ca:8c:5e:c7:83:06:fb:8a:47:24:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d157824c638c718a07b535e0d824cb24afc070c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:b9:5f:3f:2d:ef:00:6b:9f:50:f6:68:13: 41:1a:2a:22:4a:d8:6c:18:01:c4:11:e3:32:ce:b4: 82:d2:78:5c:fe:39:b4:fd:ba:78:0b:9f:db:11:d3: e5:76:64:ac:40:71:80:aa:35:fe:15:b8:ee:78:d0: 46:15:62:e9:78:db:0c:e2:40:d7:7f:7d:20:eb:8b: 1d:79:77:ac:6d:57:f5:3b:00:94:c1:33:11:e3:4e: 0a:09:28:20:b8:fd:b8:36:2b:e0:ef:a0:23:20:81: 8d:99:03:18:9f:5b:dc:92:d0:06:e6:0d:f8:49:0c: 48:1a:42:60:b9:e2:4f:b1:9f:7a:0e:7b:24:c2:d9: cd:10:d9:96:e0:6b:f8:79:95:fb:07:fd:64:62:73: ad:d1:b6:c2:4f:ab:db:98:cb:d1:75:80:d1:5a:dc: 1a:27:b8:47:7b:c1:00:c7:98:98:41:cf:84:85:7f: 36:eb:3b:5c:6c:51:dc:0c:21:d4:be:b8:f0:61:86: a5:af:2e:21:d5:2b:3c:25:64:09:51:29:a8:e4:99: d5:52:2c:a6:fb:0f:a2:ed:83:c5:b2:9b:d2:d9:61: ea:96:6c:5c:3d:b9:40:34:4c:92:9e:ea:03:4e:40: 76:da:df:64:b9:b8:0d:d4:8d:65:0f:93:82:b6:23: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.220.0/22 IPv6: 2a09:b480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211802 Signature Algorithm: sha256WithRSAEncryption 55:1c:ae:a2:d6:c0:d4:eb:23:39:4c:86:54:e9:66:1a:c5:fc: 05:a8:64:45:2c:07:1b:6c:cb:63:6e:a0:e6:3d:e1:f9:41:aa: a4:c0:67:eb:72:04:75:81:c2:e3:0d:fd:01:65:64:28:6f:15: 3a:8a:07:b8:e0:35:74:0f:3c:da:ab:1d:f5:81:7d:64:90:b9: ad:84:f6:63:7e:e1:b9:60:a6:03:78:29:fe:50:7e:a4:ad:ef: 50:c1:b3:a8:a5:69:5b:78:97:dc:6f:94:6d:79:2b:56:e5:c0: 7b:07:ad:f1:a6:02:89:75:36:56:1b:82:27:c2:7e:60:f4:3e: f8:0a:30:bd:2d:26:0f:0e:3f:c5:e3:49:e3:6b:be:95:1f:c7: 61:f7:7b:0a:e3:70:d2:fe:97:df:11:73:7a:4e:08:15:b0:88: c0:58:92:1d:f7:fc:c2:c0:cb:44:1b:fc:87:a0:63:e6:36:c6: 21:20:44:54:bd:27:f0:3e:49:97:b0:d6:36:70:41:dd:da:96: 82:06:1a:51:9f:26:e9:a9:b5:d7:50:76:6a:a1:9d:7d:62:f2: fa:d7:44:af:26:6f:5c:0a:81:73:78:29:c5:99:fe:90:7d:27: 69:66:f3:66:04:55:d1:de:e7:f3:e5:53:e7:7c:e2:c2:a7:8d: 4f:ac:85:bf -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8Ea5puMqMXseDBvuKRySRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDE1NzgyNGM2MzhjNzE4YTA3YjUzNWUwZDgyNGNiMjRhZmMwNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGG5Xz8t7wBrn1D2aBNBGioiSths GAHEEeMyzrSC0nhc/jm0/bp4C5/bEdPldmSsQHGAqjX+FbjueNBGFWLpeNsM4kDX f30g64sdeXesbVf1OwCUwTMR404KCSgguP24Nivg76AjIIGNmQMYn1vcktAG5g34 SQxIGkJgueJPsZ96DnskwtnNENmW4Gv4eZX7B/1kYnOt0bbCT6vbmMvRdYDRWtwa J7hHe8EAx5iYQc+EhX826ztcbFHcDCHUvrjwYYalry4h1Ss8JWQJUSmo5JnVUiym +w+i7YPFspvS2WHqlmxcPblANEySnuoDTkB22t9kubgN1I1lD5OCtiMuPwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB0VeCTGOMcYoHtTXg2CTLJK/AcMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2U2YWMw MS04YmZiLTRlZjMtYmZhNy1lNTc0NDAyNjBiZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvZTZhYzAx LThiZmItNGVmMy1iZmE3LWU1NzQ0MDI2MGJlMC8xL0hSVjRKTVk0eHhpZ2UxTmVE WUpNc2tyOEJ3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCWNrcMA0EAgACMAcDBQMqCbSAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM7WjANBgkqhkiG9w0BAQsFAAOCAQEAVRyuotbA1Osj OUyGVOlmGsX8BahkRSwHG2zLY26g5j3h+UGqpMBn63IEdYHC4w39AWVkKG8VOooH uOA1dA882qsd9YF9ZJC5rYT2Y37huWCmA3gp/lB+pK3vUMGzqKVpW3iX3G+UbXkr VuXAewet8aYCiXU2VhuCJ8J+YPQ++AowvS0mDw4/xeNJ42u+lR/HYfd7CuNw0v6X 3xFzek4IFbCIwFiSHff8wsDLRBv8h6Bj5jbGISBEVL0n8D5Jl7DWNnBB3dqWggYa UZ8m6am111B2aqGdfWLy+tdEryZvXAqBc3gpxZn+kH0naWbzZgRV0d7n8+VT53zi wqeNT6yFvw== -----END CERTIFICATE-----Generated at Sun Jan 11 21:03:48 2026 by rpki-client