This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer (raw, json) Hash identifier: Wa7PC1uZDHJMx2qBaG7LGs+DAcLPJKtgjXMmXxF7ES0= Subject key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A32B8E1D7CFDF99525E2EF90AF45EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208959 IP: 45.86.221.0/24 IP: 46.232.210.0/23 IP: 85.155.120.0/22 IP: 185.207.164.0/22 IP: 216.163.184.0/22 IP: 2a11:b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2b:8e:1d:7c:fd:f9:95:25:e2:ef:90:af:45:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e514098a5a9736cda4303e0495e94652390aa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:5b:28:61:1f:73:61:a0:f9:e4:a3:83:9a: 75:e5:02:fa:9b:21:e1:2e:46:41:b0:f6:52:25:66: 46:02:f9:20:e8:1e:26:54:bc:5f:0d:11:8f:01:67: c4:8c:83:7d:de:a3:aa:18:8e:4d:37:18:fa:4f:f7: 71:da:73:ff:1f:5a:fb:5d:ca:f0:2b:55:a3:ec:40: 17:bb:8a:1b:29:3b:8d:16:d8:d6:4e:b4:49:fd:bb: 82:68:b0:61:94:2b:65:e8:7b:f4:32:9d:f6:47:5b: 27:6e:a2:5f:7a:c6:e6:a4:d1:b4:5a:dd:12:b8:b9: 72:87:51:0a:80:24:e0:7c:42:bf:fe:96:d3:91:40: 90:f4:49:15:bc:db:73:71:4a:92:11:35:32:6d:79: 6f:a1:f8:44:bf:67:7c:37:ea:2e:ea:87:1c:90:12: 57:27:06:c7:d8:90:cb:77:25:7c:df:a2:b1:a5:98: 83:99:15:56:ac:ee:00:0c:49:12:91:b8:5c:7b:a2: 3e:cd:9d:f7:23:91:af:85:74:c8:2a:c5:16:ce:13: 35:a9:23:8f:cf:dd:33:55:d4:d1:ae:c6:a0:4b:bf: e9:59:3c:12:4d:92:e6:8e:ea:56:cc:a8:35:9d:20: 0b:12:fb:57:93:4e:57:43:14:c1:77:f0:b8:70:1e: 04:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.221.0/24 46.232.210.0/23 85.155.120.0/22 185.207.164.0/22 216.163.184.0/22 IPv6: 2a11:b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208959 Signature Algorithm: sha256WithRSAEncryption 59:9e:d3:38:c0:38:99:6b:25:3e:32:91:34:d6:71:c0:29:e3: 3d:7c:de:82:bd:82:f4:d4:50:a0:fb:36:5d:b7:30:f9:8c:98: e8:16:d9:e1:f9:4a:85:31:f6:75:f2:fd:5b:7e:a1:d3:a4:35: 04:01:bb:e8:dd:9c:c0:a3:d9:48:c0:93:d6:af:e0:c7:93:57: e3:6f:08:95:c0:8f:20:fd:a1:9d:75:d1:76:55:cc:08:d2:c2: 6a:4f:d7:2d:61:ac:f9:e8:cd:b6:87:cf:29:c2:97:84:23:4f: 71:22:d1:e6:de:31:45:ee:5a:91:b1:1e:6e:7d:3a:84:0d:9f: 14:b0:49:cf:e9:cd:ea:7c:c1:0b:57:34:1b:33:fb:b2:90:b1: 7c:34:5e:a9:ed:6b:2f:30:2e:4b:e1:80:4f:65:71:11:67:71: ee:71:79:69:b7:59:e0:a7:35:8d:90:f9:3f:0b:b7:98:d2:ad: 17:dc:47:60:45:42:e1:4f:40:cf:e9:a0:e2:87:db:fb:10:26: 25:1e:da:1a:1e:e7:36:77:9c:b8:83:98:b1:9c:38:d6:80:44: a6:59:57:2f:28:92:07:41:3f:9a:31:06:02:38:f4:e0:12:bb: 38:5b:3e:67:98:49:b5:44:df:ad:75:0b:28:c3:5e:90:a0:98: 76:74:92:f7 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt4oyuOHXz9+ZUl4u+Qr0XvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTUxNDA5OGE1YTk3MzZjZGE0MzAzZTA0OTVlOTQ2NTIzOTBhYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno1bKGEfc2Gg+eSjg5p15QL6myHh LkZBsPZSJWZGAvkg6B4mVLxfDRGPAWfEjIN93qOqGI5NNxj6T/dx2nP/H1r7Xcrw K1Wj7EAXu4obKTuNFtjWTrRJ/buCaLBhlCtl6Hv0Mp32R1snbqJfesbmpNG0Wt0S uLlyh1EKgCTgfEK//pbTkUCQ9EkVvNtzcUqSETUybXlvofhEv2d8N+ou6occkBJX JwbH2JDLdyV836KxpZiDmRVWrO4ADEkSkbhce6I+zZ33I5GvhXTIKsUWzhM1qSOP z90zVdTRrsagS7/pWTwSTZLmjupWzKg1nSALEvtXk05XQxTBd/C4cB4EJwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFB5RQJilqXNs2kMD4ElelGUjkKqRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzM1ZGZj Yi1kOTJkLTQ4ZmUtOWRhZC04NTQzODE2ODZjN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMzVkZmNi LWQ5MmQtNDhmZS05ZGFkLTg1NDM4MTY4NmM3Yi8xL0hsRkFtS1dwYzJ6YVF3UGdT VjZVWlNPUXFwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQALVbdAwQBLujSAwQCVZt4AwQCuc+kAwQC2KO4 MA0EAgACMAcDBQMqEQsAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwPzANBgkq hkiG9w0BAQsFAAOCAQEAWZ7TOMA4mWslPjKRNNZxwCnjPXzegr2C9NRQoPs2Xbcw +YyY6BbZ4flKhTH2dfL9W36h06Q1BAG76N2cwKPZSMCT1q/gx5NX428IlcCPIP2h nXXRdlXMCNLCak/XLWGs+ejNtofPKcKXhCNPcSLR5t4xRe5akbEebn06hA2fFLBJ z+nN6nzBC1c0GzP7spCxfDReqe1rLzAuS+GAT2VxEWdx7nF5abdZ4Kc1jZD5Pwu3 mNKtF9xHYEVC4U9Az+mg4ofb+xAmJR7aGh7nNnecuIOYsZw41oBEpllXLyiSB0E/ mjEGAjj04BK7OFs+Z5hJtUTfrXULKMNekKCYdnSS9w== -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:36 2026 by rpki-client