This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer File: HgUGRdac54HkkMDzxJle5tTmB4s.cer (raw, json) Hash identifier: 4KlXU+5HmyGhGlMjefx+X/C6WYBPt09pCRTK4FfmEfs= Subject key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8047022CB290706D9144C4203013BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35357 IP: 92.119.132.0/22 IP: 2a09:b8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:47:02:2c:b2:90:70:6d:91:44:c4:20:30:13:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:ee:94:bf:83:20:50:e1:40:48:01:ca:f9: bf:e9:01:61:4b:16:33:fc:60:b5:05:6d:4a:25:f4: dc:a9:1a:c6:95:71:6d:c6:41:a9:b0:2e:77:48:21: d6:e3:4e:7a:17:30:3a:0c:b7:45:ce:82:0a:c6:44: 89:09:28:9e:4c:21:b9:c3:4b:8e:6e:83:bb:1f:4a: 22:c5:73:22:7f:3c:a6:39:28:25:ca:f4:a0:7a:34: 38:2e:c7:c8:6d:c1:df:70:7c:45:d3:32:35:fd:5e: 34:29:d4:c4:7b:2a:2b:aa:c9:1b:84:c2:a5:a0:cc: d8:5e:94:7b:db:dd:f2:ee:f2:1b:66:c8:20:69:43: f5:6d:9e:e8:0d:ff:f7:aa:f1:57:60:de:cd:24:d9: 37:0c:61:d4:99:df:1e:58:68:7a:c1:3c:0b:38:8e: c0:e4:50:2d:27:1f:12:46:ee:e3:3e:57:6b:3f:7c: 01:fa:aa:89:49:d9:16:6b:85:e4:96:b8:2c:ec:35: a0:13:5f:0b:ec:04:af:df:20:4f:36:e1:a4:6b:e4: 6b:0e:89:aa:f5:5c:d1:8c:6b:00:f7:46:82:d0:c2: e6:36:58:c2:fb:b4:bd:53:fc:54:f2:99:5d:e4:5a: 14:28:da:23:86:17:0a:8d:a4:a1:81:01:f2:75:56: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.132.0/22 IPv6: 2a09:b8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35357 Signature Algorithm: sha256WithRSAEncryption 19:5e:16:90:51:1e:1a:49:3c:bb:8b:bc:8d:77:c6:a2:ee:cf: 9e:92:1c:40:ef:52:6c:02:33:84:44:86:23:41:ad:ff:59:94: e3:c7:19:5b:76:5b:d5:39:59:d1:04:e0:41:37:25:c0:9c:8a: 20:15:b6:76:a1:fe:74:f3:0f:db:ee:f0:1b:dd:9a:7a:e9:b2: 7a:d8:6e:fe:05:2e:93:5f:95:dd:5a:78:cd:a9:2d:4c:6c:7e: 6c:8b:83:12:b6:7e:0a:bb:45:bf:cb:8f:21:30:cb:cd:7f:d9: ef:ab:57:1c:b4:9a:2b:8a:c7:62:2b:57:49:78:e7:d0:d0:cc: a8:7c:5d:91:dd:38:46:88:ba:23:27:e7:43:db:b7:0a:e3:a7: 1d:7a:ff:9f:44:7b:dd:97:69:e7:95:9c:a6:8f:a7:33:53:67: 18:eb:6d:8e:5c:36:24:bd:bc:72:66:cf:bb:5b:07:c7:77:21: 79:af:05:da:a6:8f:11:bc:40:ff:39:f3:6f:7b:ae:bd:20:35: 5b:89:1f:96:83:0b:67:59:37:50:1e:80:34:9c:18:8f:53:43: 3b:d7:2f:fd:66:8f:8f:32:04:d7:54:e3:d0:20:f7:30:46:10: ed:08:44:ce:d7:2e:dc:b8:0c:5e:76:4a:e3:72:2d:9a:50:df: 85:40:12:ba -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gEcCLLKQcG2RRMQgMBO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTA1MDY0NWQ2OWNlNzgxZTQ5MGMwZjNjNDk5NWVlNmQ0ZTYwNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSnulL+DIFDhQEgByvm/6QFhSxYz /GC1BW1KJfTcqRrGlXFtxkGpsC53SCHW4056FzA6DLdFzoIKxkSJCSieTCG5w0uO boO7H0oixXMifzymOSglyvSgejQ4LsfIbcHfcHxF0zI1/V40KdTEeyorqskbhMKl oMzYXpR7293y7vIbZsggaUP1bZ7oDf/3qvFXYN7NJNk3DGHUmd8eWGh6wTwLOI7A 5FAtJx8SRu7jPldrP3wB+qqJSdkWa4Xklrgs7DWgE18L7ASv3yBPNuGka+RrDomq 9VzRjGsA90aC0MLmNljC+7S9U/xU8pld5FoUKNojhhcKjaShgQHydVbHzwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFB4FBkXWnOeB5JDA88SZXubU5geLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2NiM2Fm MC0wNTZkLTQyNzctYTZkYS0yMjdhODZjNDcyY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvY2IzYWYw LTA1NmQtNDI3Ny1hNmRhLTIyN2E4NmM0NzJjZS8xL0hnVUdSZGFjNTRIa2tNRHp4 SmxlNXRUbUI0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCXHeEMA0EAgACMAcDBQMqCbjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCKHTANBgkqhkiG9w0BAQsFAAOCAQEAGV4WkFEeGkk8 u4u8jXfGou7PnpIcQO9SbAIzhESGI0Gt/1mU48cZW3Zb1TlZ0QTgQTclwJyKIBW2 dqH+dPMP2+7wG92aeumyethu/gUuk1+V3Vp4zaktTGx+bIuDErZ+CrtFv8uPITDL zX/Z76tXHLSaK4rHYitXSXjn0NDMqHxdkd04Roi6IyfnQ9u3CuOnHXr/n0R73Zdp 55Wcpo+nM1NnGOttjlw2JL28cmbPu1sHx3chea8F2qaPEbxA/znzb3uuvSA1W4kf loMLZ1k3UB6ANJwYj1NDO9cv/WaPjzIE11Tj0CD3MEYQ7QhEztcu3LgMXnZK43It mlDfhUASug== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:06 2026 by rpki-client