This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer File: HW2cywJxWEmzoey800toh_ZJlA8.cer (raw, json) Hash identifier: 82/FzklA2dM974RMkDsoEJnvBzTgSOGE4OCt0C5QZ2Q= Subject key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E379388E2CCA261EBB044211022A9F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.141.139.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:93:88:e2:cc:a2:61:eb:b0:44:21:10:22:a9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:5d:55:5b:b7:ae:28:b9:1f:ca:8b:59:67: 48:0e:bc:9e:08:54:f2:3a:77:ff:86:1c:8f:7b:4e: c7:39:fa:a0:c4:45:7d:06:c4:c7:0c:2f:e7:bb:51: 9c:cd:b4:23:cb:cd:38:fe:e5:db:60:5e:6e:cb:ba: 26:b2:94:8b:08:c9:bf:02:a1:43:6b:6e:0e:62:2b: 8e:61:f1:1a:f7:42:97:47:94:b5:72:5d:9b:1a:08: 65:b3:b7:d1:f3:9c:c6:3c:fe:8f:b5:dc:37:27:cf: 60:df:38:66:19:d7:49:7b:51:c7:32:28:a3:b6:cc: 2b:45:35:84:d3:63:ef:14:bd:05:8c:2c:de:c4:18: 96:cd:99:35:60:94:3c:98:0f:0b:d6:72:44:a9:5a: 83:91:43:63:19:7b:64:e9:88:e5:a3:58:26:b9:60: 37:c1:5d:09:fe:c6:e2:73:b8:65:8c:50:04:0d:31: 81:65:5a:11:ae:73:bb:3c:e6:5a:1a:39:92:ec:a2: 36:6c:22:86:59:d5:1b:6b:3f:30:5e:d0:00:75:ff: 3c:80:c4:26:5f:df:cb:2a:22:5e:33:0d:d5:4a:cb: 84:74:b9:c7:6e:70:b5:f1:93:d2:47:b3:e0:15:c4: d3:96:69:fe:a7:14:cd:50:bc:04:0f:82:f8:76:8c: 5d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.139.0/24 Signature Algorithm: sha256WithRSAEncryption 55:72:94:8d:bc:96:4d:d9:23:53:9b:cf:20:97:92:3c:d8:2f: 83:a7:af:3b:9f:c0:4c:32:f4:a5:0c:fc:df:47:0c:7d:79:0f: 8d:84:d1:19:b4:9c:99:09:8b:3f:4d:26:a1:fe:09:f7:6e:4f: 67:a1:5d:af:a6:00:f0:e1:90:39:fc:c4:23:93:49:c9:07:d8: 56:63:0d:fa:16:96:3e:31:55:74:7a:81:cd:64:21:f5:e6:bf: 91:8f:1a:02:d0:79:5c:64:78:70:ce:7d:16:ad:66:5d:cf:1d: db:f0:4f:7a:f6:f7:f8:32:b1:89:76:01:67:53:cb:c2:51:b9: 2c:cc:e7:a7:b3:a1:a0:ee:de:35:28:7e:51:cc:db:63:c5:9f: 93:fd:a8:e4:70:88:51:e3:19:2e:bb:dd:dd:63:0a:2d:0a:41: 7f:9c:d2:84:b9:2c:88:b2:e4:93:37:de:58:68:58:22:2e:2c: 81:36:26:7f:e8:bc:42:ce:18:92:37:4c:b8:27:20:f8:aa:46: 3a:68:34:ef:7f:19:62:be:fa:5d:c5:27:6d:9e:81:57:a6:a0: 31:bd:84:92:b5:e4:97:0f:04:10:9e:32:92:a5:3a:d8:28:89: 3e:5c:45:4d:94:8b:2a:72:b9:db:3f:66:98:ed:86:67:3f:0b: 34:b5:ea:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+N5OI4syiYeuwRCEQIqn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDZkOWNjYjAyNzE1ODQ5YjNhMWVjYmNkMzRiNjg4N2Y2NDk5NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumldVVu3rii5H8qLWWdIDryeCFTy Onf/hhyPe07HOfqgxEV9BsTHDC/nu1GczbQjy804/uXbYF5uy7omspSLCMm/AqFD a24OYiuOYfEa90KXR5S1cl2bGghls7fR85zGPP6Ptdw3J89g3zhmGddJe1HHMiij tswrRTWE02PvFL0FjCzexBiWzZk1YJQ8mA8L1nJEqVqDkUNjGXtk6Yjlo1gmuWA3 wV0J/sbic7hljFAEDTGBZVoRrnO7POZaGjmS7KI2bCKGWdUbaz8wXtAAdf88gMQm X9/LKiJeMw3VSsuEdLnHbnC18ZPSR7PgFcTTlmn+pxTNULwED4L4doxdWwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFB1tnMsCcVhJs6HsvNNLaIf2SZQPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzBlZjZk ZS1iM2YxLTQ0MzAtOGI0OS0xMTRmZmMyMGY5YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvMGVmNmRl LWIzZjEtNDQzMC04YjQ5LTExNGZmYzIwZjlhYS8xL0hXMmN5d0p4V0Vtem9leTgw MHRvaF9aSmxBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwY2LMA0GCSqGSIb3DQEBCwUAA4IBAQBVcpSN vJZN2SNTm88gl5I82C+Dp687n8BMMvSlDPzfRwx9eQ+NhNEZtJyZCYs/TSah/gn3 bk9noV2vpgDw4ZA5/MQjk0nJB9hWYw36FpY+MVV0eoHNZCH15r+RjxoC0HlcZHhw zn0WrWZdzx3b8E969vf4MrGJdgFnU8vCUbkszOens6Gg7t41KH5RzNtjxZ+T/ajk cIhR4xkuu93dYwotCkF/nNKEuSyIsuSTN95YaFgiLiyBNiZ/6LxCzhiSN0y4JyD4 qkY6aDTvfxlivvpdxSdtnoFXpqAxvYSSteSXDwQQnjKSpTrYKIk+XEVNlIsqcrnb P2aY7YZnPws0terI -----END CERTIFICATE-----Generated at Wed Jan 21 13:35:58 2026 by rpki-client