This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer File: HkXMabTR7hUbUCdEL7upRMJ035c.cer (raw, json) Hash identifier: Ed/TN+MtkSVHyPNdgYSyig4pETtrxokmytjsafbk7A0= Subject key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3847CC14A793C82A477DEEEC0E7CE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213376 IP: 2001:678:d08::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:47:cc:14:a7:93:c8:2a:47:7d:ee:ec:0e:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e45cc69b4d1ee151b5027442fbba944c274df97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:78:52:d5:ed:a8:4b:18:21:a0:e1:4c:fb: 91:07:42:5b:37:7a:91:aa:a4:07:19:e6:eb:08:5c: 94:f5:de:5a:19:97:c7:a9:14:d9:80:ec:68:90:ca: f4:41:a4:a8:42:23:97:aa:38:09:05:c0:d8:21:48: 35:69:2b:ca:0b:55:e7:ca:50:07:e9:4b:e4:b9:75: 1d:d2:f0:89:5a:a6:65:fd:7f:c9:74:97:29:23:78: 57:82:95:71:dd:02:e6:2b:72:b7:d9:6d:8d:5c:51: 4d:87:4d:50:00:d8:14:15:ff:84:7b:be:b0:d9:76: 5e:26:99:d0:d1:c3:b2:a9:f1:62:92:fe:62:b9:5c: 6d:44:7c:e3:f9:07:14:f3:e9:72:ee:05:c7:23:4c: e5:b5:31:57:4e:5c:43:03:04:6f:70:c2:9b:7a:eb: 89:61:be:0e:bb:53:93:b8:3f:67:38:87:b7:fb:32: 69:15:d4:4e:32:8a:31:77:da:8c:7c:75:5c:1a:39: 54:58:05:94:f6:71:96:fd:7c:77:29:dd:72:52:58: 41:7b:d6:9b:2f:12:22:18:0e:1e:6c:b8:56:3d:42: a4:d5:99:fc:a0:d0:63:e3:4a:b1:d7:65:16:bb:5b: 60:1a:51:58:01:e5:3e:b9:f6:6f:c4:54:c8:5d:da: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d08::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213376 Signature Algorithm: sha256WithRSAEncryption ab:78:b8:63:0c:d3:f1:5e:82:65:27:b0:7a:df:67:5a:23:ff: 04:14:aa:07:64:21:42:bf:f4:20:0e:f8:f8:bd:74:39:06:cf: 23:03:5d:bf:7c:33:ee:c2:eb:25:59:46:5a:04:d5:af:ea:4f: cf:69:a4:0b:14:dd:d9:d8:9e:ce:53:8c:f3:7f:44:19:ce:0d: 8d:53:e7:df:d7:7e:9c:b3:10:98:94:95:e3:ca:70:bb:9d:79: 1f:75:a0:58:1b:55:23:4a:6b:7d:85:c2:c6:18:ce:33:0a:79: 79:d9:86:89:1f:1e:93:46:d0:ef:58:76:e8:51:19:d8:ec:f4: dd:7e:5c:2d:31:11:57:6c:01:6b:5d:91:01:15:24:58:ec:2c: e5:9d:9f:2a:13:e8:48:57:f5:74:71:f7:ee:24:88:f5:9d:27: f2:be:e1:ae:7b:56:7d:90:8c:0e:f6:ef:23:ff:7a:6f:76:3c: ed:16:16:ab:19:cf:ac:88:c8:b1:d5:10:90:d3:c1:7f:df:14: 42:e6:71:21:b0:21:7f:5f:31:ca:83:df:8a:a0:49:61:bd:f2: 02:47:13:af:f1:26:9b:44:f9:f4:b6:ad:6c:4b:6c:e8:c8:77: 9a:69:37:d5:0e:0f:fa:7e:11:0b:80:f4:f8:1c:f7:d1:35:6a: 15:b8:42:2f -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt+OEfMFKeTyCpHfe7sDnzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTQ1Y2M2OWI0ZDFlZTE1MWI1MDI3NDQyZmJiYTk0NGMyNzRkZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgB4UtXtqEsYIaDhTPuRB0JbN3qR qqQHGebrCFyU9d5aGZfHqRTZgOxokMr0QaSoQiOXqjgJBcDYIUg1aSvKC1XnylAH 6UvkuXUd0vCJWqZl/X/JdJcpI3hXgpVx3QLmK3K32W2NXFFNh01QANgUFf+Ee76w 2XZeJpnQ0cOyqfFikv5iuVxtRHzj+QcU8+ly7gXHI0zltTFXTlxDAwRvcMKbeuuJ Yb4Ou1OTuD9nOIe3+zJpFdROMooxd9qMfHVcGjlUWAWU9nGW/Xx3Kd1yUlhBe9ab LxIiGA4ebLhWPUKk1Zn8oNBj40qx12UWu1tgGlFYAeU+ufZvxFTIXdpdlQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFB5FzGm00e4VG1AnRC+7qUTCdN+XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2Q0OTUy OC0yYWE0LTRhN2QtOTg0NS1jMjQ0M2FhNTQ3ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZDQ5NTI4 LTJhYTQtNGE3ZC05ODQ1LWMyNDQzYWE1NDdlMi8xL0hrWE1hYlRSN2hVYlVDZEVM N3VwUk1KMDM1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA0IMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNBgDANBgkqhkiG9w0BAQsFAAOCAQEAq3i4YwzT8V6CZSewet9nWiP/BBSq B2QhQr/0IA74+L10OQbPIwNdv3wz7sLrJVlGWgTVr+pPz2mkCxTd2diezlOM839E Gc4NjVPn39d+nLMQmJSV48pwu515H3WgWBtVI0prfYXCxhjOMwp5edmGiR8ek0bQ 71h26FEZ2Oz03X5cLTERV2wBa12RARUkWOws5Z2fKhPoSFf1dHH37iSI9Z0n8r7h rntWfZCMDvbvI/96b3Y87RYWqxnPrIjIsdUQkNPBf98UQuZxIbAhf18xyoPfiqBJ Yb3yAkcTr/Emm0T59LatbEts6Mh3mmk31Q4P+n4RC4D0+Bz30TVqFbhCLw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:49 2026 by rpki-client