This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer File: HxKTy74vaSVA08xaboI2YElMQGM.cer (raw, json) Hash identifier: fDnpcoyqvBdUYzWvAr98OeHZcCLHBvMFwKB+RxOgxPc= Subject key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3816426CC3A8B00D75FAFB54FF6EB7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8448 IP: 84.225.192.0/18 IP: 188.44.128.0/17 IP: 217.79.128.0/20 IP: 2a00:1878::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:16:42:6c:c3:a8:b0:0d:75:fa:fb:54:ff:6e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:01:d5:20:50:f4:9f:6a:36:0f:4e:b2:e2: 87:de:e3:09:75:59:4f:6a:98:ad:96:aa:5b:10:7b: 90:4c:d6:47:46:b3:ae:18:76:76:08:97:fa:24:ee: ca:7e:b5:bd:7c:11:db:8c:67:b6:08:f1:b0:0c:2f: 50:bf:3c:ab:e6:56:cc:87:f6:f7:17:ce:92:4c:bb: 9e:ef:55:ec:13:64:6f:dd:d7:15:f1:23:34:5e:f2: a2:12:51:be:bb:e6:21:fe:77:bf:71:8a:f7:88:4a: 59:14:d8:89:a5:50:ab:39:bf:06:a4:a2:59:56:48: 58:a3:e3:f6:a1:8e:81:10:a7:f7:89:03:1e:61:70: 85:b8:21:3c:64:f2:82:0e:6b:48:40:c7:6a:bf:3d: 89:30:18:9c:7f:4e:ef:dd:08:ab:7c:0b:84:31:fa: 18:24:15:91:0c:33:a0:26:ad:26:3f:b2:08:ac:78: 09:31:e4:59:22:fa:ae:8e:34:31:68:d9:d5:c0:39: cb:bc:09:25:68:2a:f0:fe:a1:2b:09:a3:08:f4:70: 4c:a8:24:95:3e:0a:d4:61:4c:33:65:06:5b:4f:7d: d2:94:68:8e:2e:47:ed:eb:eb:2b:1b:aa:4b:99:d8: 8f:c7:38:62:cd:46:f4:8b:42:e7:fd:82:f3:b6:ff: e3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.225.192.0/18 188.44.128.0/17 217.79.128.0/20 IPv6: 2a00:1878::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8448 Signature Algorithm: sha256WithRSAEncryption 91:10:31:88:3d:02:6d:0a:40:df:d1:a8:c9:98:ee:07:d4:b7: ad:bd:2e:36:4e:2f:f7:9b:45:8a:ae:e7:94:f2:db:f5:ea:3a: 1b:f9:85:45:db:0c:67:0e:54:dc:bc:2d:af:f6:80:e6:bc:bb: a3:7b:46:f5:49:42:01:ce:88:92:f4:72:4a:f1:89:23:de:b7: 79:d1:c7:0b:99:17:a6:99:10:80:dc:e8:52:e5:f0:c6:86:f2: 37:da:dd:86:2c:ad:01:73:56:82:95:35:2f:0d:eb:43:f2:f5: 55:78:38:1a:0c:3a:a7:26:14:7b:03:cd:7c:ee:78:dc:cd:98: b5:c9:70:f2:33:57:95:0b:fd:c5:75:b4:72:4b:c5:22:a3:5e: 29:43:27:58:52:a2:52:6d:1b:9f:28:cf:b5:0b:85:af:1f:db: c8:da:ef:e2:0c:a3:51:38:65:f9:b8:19:60:76:7e:02:74:80: 32:71:93:3a:82:0f:f1:e3:3e:25:76:5d:90:6f:23:13:4f:16: 04:4e:39:e1:fc:87:67:36:b0:26:3a:35:8d:87:40:43:2c:00: 6b:5c:d4:8d:c7:ce:2e:df:f4:4b:e7:9b:88:da:e0:fc:f7:b7: 7e:91:cb:66:a0:4f:d0:5e:81:e2:c4:82:51:b6:4c:08:96:73: 10:45:e7:c9 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt+OBZCbMOosA11+vtU/263MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjEyOTNjYmJlMmY2OTI1NDBkM2NjNWE2ZTgyMzY2MDQ5NGM0MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku8B1SBQ9J9qNg9OsuKH3uMJdVlP apitlqpbEHuQTNZHRrOuGHZ2CJf6JO7KfrW9fBHbjGe2CPGwDC9Qvzyr5lbMh/b3 F86STLue71XsE2Rv3dcV8SM0XvKiElG+u+Yh/ne/cYr3iEpZFNiJpVCrOb8GpKJZ VkhYo+P2oY6BEKf3iQMeYXCFuCE8ZPKCDmtIQMdqvz2JMBicf07v3QirfAuEMfoY JBWRDDOgJq0mP7IIrHgJMeRZIvqujjQxaNnVwDnLvAklaCrw/qErCaMI9HBMqCSV PgrUYUwzZQZbT33SlGiOLkft6+srG6pLmdiPxzhizUb0i0Ln/YLztv/jEQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFB8Sk8u+L2klQNPMWm6CNmBJTEBjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzNmNWUz Yy1hYzdiLTRmMGYtYTg3NC0yNjk3MTU5OWE1NTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvM2Y1ZTNj LWFjN2ItNGYwZi1hODc0LTI2OTcxNTk5YTU1NC8xL0h4S1R5NzR2YVNWQTA4eGFi b0kyWUVsTVFHTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQGVOHAAwQHvCyAAwQE2U+AMA0EAgACMAcDBQMq ABh4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiEAMA0GCSqGSIb3DQEBCwUAA4IB AQCREDGIPQJtCkDf0ajJmO4H1LetvS42Ti/3m0WKrueU8tv16job+YVF2wxnDlTc vC2v9oDmvLuje0b1SUIBzoiS9HJK8Ykj3rd50ccLmRemmRCA3OhS5fDGhvI32t2G LK0Bc1aClTUvDetD8vVVeDgaDDqnJhR7A8187njczZi1yXDyM1eVC/3FdbRyS8Ui o14pQydYUqJSbRufKM+1C4WvH9vI2u/iDKNROGX5uBlgdn4CdIAycZM6gg/x4z4l dl2QbyMTTxYETjnh/IdnNrAmOjWNh0BDLABrXNSNx84u3/RL55uI2uD897d+kctm oE/QXoHixIJRtkwIlnMQRefJ -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:45 2026 by rpki-client