This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer File: HXJHHgJd46gqjfWKrm4S4x1s0FA.cer (raw, json) Hash identifier: qh0mTwDm+g0pzMRhzj/IzNqCUtHY100lRgWVo/wQTa8= Subject key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E264D3E243A59602CA4A717D9170 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56396 IP: 46.228.160.0/20 IP: 2001:678:cb4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e2:64:d3:e2:43:a5:96:02:ca:4a:71:7d:91:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:c9:a2:a6:8e:31:c3:88:82:15:2c:58:ac: ce:ee:e6:92:84:af:c0:a0:3a:ac:6c:e8:f1:e9:14: 97:b1:3b:d9:40:55:a9:5a:c4:96:4b:7c:b2:f7:11: 60:53:13:16:f5:d4:13:ab:a3:e9:52:77:bf:9c:b5: be:f4:b9:e3:c3:a2:26:b0:13:38:48:9f:a3:ee:83: a2:6b:71:9b:31:af:4d:b2:82:7f:b2:6e:64:aa:c2: 5f:9c:ab:e0:b8:d3:cf:75:b7:86:11:bb:26:97:29: 9e:a9:4d:ed:cb:d0:a5:36:55:4f:a7:81:67:ab:4c: 33:35:ff:fa:88:43:af:8c:b9:a6:ff:c7:fa:23:e3: 6f:7a:94:a5:87:76:2b:78:f5:3e:bd:f8:d2:ec:70: 2b:7d:6b:e1:a3:fe:c3:3d:7b:df:3a:ba:85:da:47: 2c:da:c0:58:f6:76:99:31:ae:b8:28:e7:df:90:47: b2:f7:0d:bd:86:20:de:19:9f:56:c8:50:d7:db:c0: 3c:54:3e:2b:c8:22:a7:00:32:bd:f8:02:9f:60:60: 86:ff:b5:34:4e:65:c9:8b:59:22:b2:01:33:bf:6c: 2f:0e:fd:5a:04:f7:64:b0:f9:0f:3f:9a:78:ab:a0: dc:a8:be:29:da:51:c0:d1:22:b0:33:a6:c9:e8:92: ab:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.160.0/20 IPv6: 2001:678:cb4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56396 Signature Algorithm: sha256WithRSAEncryption a7:23:2e:15:71:ad:ff:8c:e3:8b:19:a7:e0:9c:84:d9:72:75: fe:1b:b5:65:fe:6b:4b:f1:56:3e:71:b1:8e:ae:35:72:23:76: 7e:95:34:0b:5f:be:17:be:a2:74:d8:a0:52:33:b2:07:36:c5: 6c:67:a5:30:48:ca:9a:46:29:88:fd:f7:b4:d2:82:e7:a2:91: 16:93:e0:5f:84:c3:14:bb:94:66:42:2a:97:8b:24:2d:3d:8a: a3:e5:bc:24:96:2b:8f:92:12:11:cf:38:ee:e8:ab:a5:47:34: b2:d2:fe:c1:fc:f8:bc:a5:92:b0:2a:e6:d2:74:28:23:32:15: b6:96:1a:83:41:ec:97:d6:c5:b6:40:48:bc:9a:c5:1e:02:ac: 6c:f9:95:7a:30:9c:5f:e4:19:10:21:13:6b:27:67:2b:59:94: 6c:11:e7:99:a1:55:15:ab:31:eb:a9:c5:a8:f8:e6:40:e9:08: 3b:20:b8:f2:2e:c7:95:7a:9a:05:f6:c9:61:e6:8a:6e:91:02: c3:e3:a5:dd:3a:94:40:ee:b2:77:a1:88:d8:ea:a5:eb:ea:70: 57:11:34:54:ca:80:3e:29:34:06:de:4b:46:84:4f:3f:94:eb: 64:a8:b3:ae:d8:13:a5:0d:4a:7f:e0:fa:e1:1b:60:0c:2e:15: 82:3f:08:f5 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7NeJk0+JDpZYCykpxfZFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDcyNDcxZTAyNWRlM2E4MmE4ZGY1OGFhZTZlMTJlMzFkNmNkMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFPJoqaOMcOIghUsWKzO7uaShK/A oDqsbOjx6RSXsTvZQFWpWsSWS3yy9xFgUxMW9dQTq6PpUne/nLW+9Lnjw6ImsBM4 SJ+j7oOia3GbMa9NsoJ/sm5kqsJfnKvguNPPdbeGEbsmlymeqU3ty9ClNlVPp4Fn q0wzNf/6iEOvjLmm/8f6I+NvepSlh3YrePU+vfjS7HArfWvho/7DPXvfOrqF2kcs 2sBY9naZMa64KOffkEey9w29hiDeGZ9WyFDX28A8VD4ryCKnADK9+AKfYGCG/7U0 TmXJi1kisgEzv2wvDv1aBPdksPkPP5p4q6DcqL4p2lHA0SKwM6bJ6JKrQQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFB1yRx4CXeOoKo31iq5uEuMdbNBQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzZmZjdk Ny0xZWRkLTQzYzItODZjZi1iZTRiMDZjNWM0MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvNmZmN2Q3 LTFlZGQtNDNjMi04NmNmLWJlNGIwNmM1YzQyZi8xL0hYSkhIZ0pkNDZncWpmV0ty bTRTNHgxczBGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQELuSgMA8EAgACMAkDBwAgAQZ4DLQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDANxMMA0GCSqGSIb3DQEBCwUAA4IBAQCnIy4Vca3/ jOOLGafgnITZcnX+G7Vl/mtL8VY+cbGOrjVyI3Z+lTQLX74XvqJ02KBSM7IHNsVs Z6UwSMqaRimI/fe00oLnopEWk+BfhMMUu5RmQiqXiyQtPYqj5bwkliuPkhIRzzju 6KulRzSy0v7B/Pi8pZKwKubSdCgjMhW2lhqDQeyX1sW2QEi8msUeAqxs+ZV6MJxf 5BkQIRNrJ2crWZRsEeeZoVUVqzHrqcWo+OZA6Qg7ILjyLseVepoF9slh5opukQLD 46XdOpRA7rJ3oYjY6qXr6nBXETRUyoA+KTQG3ktGhE8/lOtkqLOu2BOlDUp/4Prh G2AMLhWCPwj1 -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:36 2026 by rpki-client