This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer File: HvyrTe3tZqvvfNftcmV7wDqCKdY.cer (raw, json) Hash identifier: c/xaQ5ri5/Q7aetAjfA2HsUzaZuzG8RzwFccCasTOFA= Subject key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8407D43FC190429EF65C8D59580F89 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47180 IP: 185.28.46.0/24 IP: 194.179.140.0/22 IP: 2a13:f8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:07:d4:3f:c1:90:42:9e:f6:5c:8d:59:58:0f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:82:0a:7c:4e:0f:e8:c4:ad:18:fd:4d:93: f9:78:60:9c:fa:26:34:6d:99:04:41:04:6c:17:7c: e4:ca:7a:35:61:6a:aa:f9:6f:8d:4d:58:7c:35:41: 30:36:b0:23:05:c9:56:36:ef:20:c9:da:ba:28:6e: 65:21:c4:39:06:12:ec:24:7a:96:b5:9d:aa:f6:5f: fd:8b:59:19:ed:d6:ce:21:5c:88:bd:77:b8:25:75: c4:fb:0f:0e:17:db:87:a9:2f:f8:1b:7a:52:8c:b4: 77:d4:c4:c2:4a:f9:03:d4:32:28:cd:a0:5b:5d:31: d1:1d:ea:cb:52:3d:c0:30:33:39:c0:88:ba:08:d5: af:bd:45:d1:55:19:b4:a8:fb:42:92:92:de:4c:3f: 57:49:76:0d:67:6e:b4:9b:93:ee:85:56:4b:27:88: 32:88:6a:94:0b:c5:ed:db:9e:07:f6:df:22:22:4e: f2:23:72:6a:6a:0f:13:7e:25:bc:43:32:17:de:ad: 57:88:7b:01:d4:8e:a6:c1:40:10:ce:e2:bb:f4:ee: a4:70:85:d1:db:58:2f:de:16:15:85:24:a7:7a:11: 07:80:4c:99:09:55:f2:4a:cc:09:9d:1f:d7:1b:21: f3:f4:7b:f7:58:c9:ee:3c:4c:c6:cd:50:b0:ae:b9: 68:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.46.0/24 194.179.140.0/22 IPv6: 2a13:f8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47180 Signature Algorithm: sha256WithRSAEncryption 28:4e:a2:be:9c:e8:4a:77:77:5e:15:d9:79:09:29:c2:e7:50: c2:47:19:c7:a9:fe:7c:94:ea:fd:6a:e3:3c:f4:eb:4d:64:d2: d4:1d:13:cc:54:89:6d:90:d6:2f:d2:8b:8d:b2:12:95:53:dd: 2c:b8:f8:78:55:56:e7:37:6c:21:43:5f:6d:b4:8e:b4:41:03: 62:5c:56:22:95:51:02:c7:25:ee:0e:68:02:52:2e:81:66:5b: e8:39:7b:d2:d1:0e:1c:e7:a4:c9:61:64:30:42:fe:32:5d:7f: 79:3f:f1:09:9c:70:26:92:ed:18:a1:2c:c6:8f:42:ae:f5:eb: d1:ed:ca:5e:ce:32:33:2a:3d:c1:d5:9d:a9:fc:cc:77:06:f8: c8:eb:07:4c:a1:4f:1c:d1:17:f3:09:dc:ec:11:4a:a7:04:49: 7f:e7:00:12:0a:fd:ac:65:60:e2:b0:01:90:17:36:c2:70:9f: 75:5e:03:8a:0d:e4:53:1b:4d:ca:9f:c5:4e:a9:bd:d6:70:a0: 23:5e:0c:35:4b:d3:f2:5d:a5:73:96:b4:31:66:1a:1c:40:52: e6:1b:6e:88:04:34:7a:c4:61:42:5e:5f:86:bf:e7:9c:10:d9: e4:c6:ad:4e:be:3c:5b:46:37:cc:31:03:6a:13:76:67:53:fe: 67:90:b2:b1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/hAfUP8GQQp72XI1ZWA+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWZjYWI0ZGVkZWQ2NmFiZWY3Y2Q3ZWQ3MjY1N2JjMDNhODIyOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUiCCnxOD+jErRj9TZP5eGCc+iY0 bZkEQQRsF3zkyno1YWqq+W+NTVh8NUEwNrAjBclWNu8gydq6KG5lIcQ5BhLsJHqW tZ2q9l/9i1kZ7dbOIVyIvXe4JXXE+w8OF9uHqS/4G3pSjLR31MTCSvkD1DIozaBb XTHRHerLUj3AMDM5wIi6CNWvvUXRVRm0qPtCkpLeTD9XSXYNZ260m5PuhVZLJ4gy iGqUC8Xt254H9t8iIk7yI3Jqag8TfiW8QzIX3q1XiHsB1I6mwUAQzuK79O6kcIXR 21gv3hYVhSSnehEHgEyZCVXySswJnR/XGyHz9Hv3WMnuPEzGzVCwrrlotwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFB78q03t7War73zX7XJle8A6ginWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2M3Yzgz Zi1mYWMyLTQ1NTEtOGY3OC05MWE3N2VhMDVkZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvYzdjODNm LWZhYzItNDU1MS04Zjc4LTkxYTc3ZWEwNWRmMS8xL0h2eXJUZTN0WnF2dmZOZnRj bVY3d0RxQ0tkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuRwuAwQCwrOMMA0EAgACMAcDBQMqE/jAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4TDANBgkqhkiG9w0BAQsFAAOCAQEAKE6i vpzoSnd3XhXZeQkpwudQwkcZx6n+fJTq/WrjPPTrTWTS1B0TzFSJbZDWL9KLjbIS lVPdLLj4eFVW5zdsIUNfbbSOtEEDYlxWIpVRAscl7g5oAlIugWZb6Dl70tEOHOek yWFkMEL+Ml1/eT/xCZxwJpLtGKEsxo9CrvXr0e3KXs4yMyo9wdWdqfzMdwb4yOsH TKFPHNEX8wnc7BFKpwRJf+cAEgr9rGVg4rABkBc2wnCfdV4Dig3kUxtNyp/FTqm9 1nCgI14MNUvT8l2lc5a0MWYaHEBS5htuiAQ0esRhQl5fhr/nnBDZ5MatTr48W0Y3 zDEDahN2Z1P+Z5CysQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:56 2026 by rpki-client