This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer File: HzJorQbzq480bQ3jm9SuqztlhNk.cer (raw, json) Hash identifier: 44gBgWYY9NaYdSl8yym7Q7r/v9/PuPEd+KjOycERJsU= Subject key identifier: 1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15AE1C900AB90A12B45E6CAAE50F15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39753 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ae:1c:90:0a:b9:0a:12:b4:5e:6c:aa:e5:0f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:0e:89:bc:8e:3a:92:48:98:6a:be:2d:76: 26:93:3d:c0:48:f3:c9:16:ce:54:0e:e8:be:d3:14: be:4e:80:94:80:46:cf:7e:32:43:4e:f6:9d:47:66: 85:f6:0f:72:ca:fb:41:71:cf:34:a2:29:b6:1f:be: ab:fc:e7:fe:1f:3d:ca:aa:cb:30:be:a5:a3:f3:33: e5:bb:03:8b:76:a4:09:98:9a:20:9a:6d:49:54:18: cd:68:4c:d1:c0:bb:4c:d9:f3:f7:63:8c:32:20:2c: 4f:8d:79:9e:c7:7e:54:8c:f6:d3:17:88:df:39:ee: 19:8d:24:fe:50:8b:bc:07:53:35:a5:b6:f4:b2:2a: 79:59:92:94:a4:a6:16:8e:8a:a6:b0:e4:80:b5:6b: f5:ae:da:c1:d1:15:c3:fc:98:1f:ea:1e:8d:37:1a: 7d:d4:5d:ec:29:ad:26:f8:44:08:94:c1:57:7d:fe: d3:4e:ea:42:77:e4:69:86:f0:48:93:76:89:c5:4e: 8f:bf:6e:ba:a4:3a:7d:cb:b4:28:2a:b9:bb:9e:77: 89:a0:02:40:82:ba:e3:64:60:dd:f1:63:91:72:39: 1a:c6:4b:c2:b0:78:35:a0:69:88:ca:dd:cb:93:44: df:38:f4:2d:1d:dd:b8:5c:b8:3a:81:5b:7a:e9:f9: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 39753 Signature Algorithm: sha256WithRSAEncryption 4c:d5:fc:be:5c:9d:55:15:fb:5a:36:78:c6:d3:47:50:ff:57: c6:66:54:87:3b:eb:8e:b7:e6:e7:ca:fd:65:bb:ab:58:4a:31: ce:e7:17:56:e3:a4:09:0e:7f:aa:26:1c:22:4e:c8:01:9b:c2: ce:2a:4e:eb:f2:9f:bb:67:81:82:4d:85:06:94:c1:92:1b:e4: 0e:25:9e:a3:5a:ab:8b:36:ed:80:c9:29:2f:6d:76:a5:40:1f: c8:56:bb:cf:bb:f7:d8:53:44:ef:dc:fe:a9:a6:6a:17:4c:7a: 74:b6:df:8b:ee:1a:1b:71:9b:54:fc:a9:e4:04:4d:97:2f:47: d8:65:5b:01:13:3a:7a:70:7f:b3:d1:cc:a4:3b:2d:b6:89:d2: 5f:93:c9:93:50:bf:b2:f7:e3:fa:88:05:ac:ee:f2:a8:1f:26: 88:4f:82:d1:d2:ae:4d:7c:3a:c2:9d:cb:f6:f4:80:f4:8d:60: 9f:ef:e6:c1:94:7a:c0:e5:8b:e8:fa:c1:9e:ce:cb:32:78:c0: d3:2d:73:e5:de:db:f4:57:b0:b8:7c:40:e1:9a:af:17:79:77: 0d:d0:11:ef:9b:47:bd:51:6b:f5:70:79:9d:6c:b7:68:8e:89: 76:08:de:37:2a:4b:c9:7f:7b:7d:5f:eb:6c:5c:e5:86:62:24: 43:83:d3:98 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/Fa4ckAq5ChK0Xmyq5Q8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjMyNjhhZDA2ZjNhYjhmMzQ2ZDBkZTM5YmQ0YWVhYjNiNjU4NGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybcOibyOOpJImGq+LXYmkz3ASPPJ Fs5UDui+0xS+ToCUgEbPfjJDTvadR2aF9g9yyvtBcc80oim2H76r/Of+Hz3Kqssw vqWj8zPluwOLdqQJmJogmm1JVBjNaEzRwLtM2fP3Y4wyICxPjXmex35UjPbTF4jf Oe4ZjST+UIu8B1M1pbb0sip5WZKUpKYWjoqmsOSAtWv1rtrB0RXD/Jgf6h6NNxp9 1F3sKa0m+EQIlMFXff7TTupCd+RphvBIk3aJxU6Pv266pDp9y7QoKrm7nneJoAJA grrjZGDd8WORcjkaxkvCsHg1oGmIyt3Lk0TfOPQtHd24XLg6gVt66flhSwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFB8yaK0G86uPNG0N45vUrqs7ZYTZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzM5MTlk My0yMTM5LTRjNDItYjdkNC04YTBjNzI5ODkzYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvMzkxOWQz LTIxMzktNGM0Mi1iN2Q0LThhMGM3Mjk4OTNiYS8xL0h6Sm9yUWJ6cTQ4MGJRM2pt OVN1cXp0bGhOay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCbSTANBgkqhkiG9w0BAQsFAAOCAQEATNX8vlydVRX7 WjZ4xtNHUP9XxmZUhzvrjrfm58r9ZburWEoxzucXVuOkCQ5/qiYcIk7IAZvCzipO 6/Kfu2eBgk2FBpTBkhvkDiWeo1qrizbtgMkpL212pUAfyFa7z7v32FNE79z+qaZq F0x6dLbfi+4aG3GbVPyp5ARNly9H2GVbARM6enB/s9HMpDsttonSX5PJk1C/svfj +ogFrO7yqB8miE+C0dKuTXw6wp3L9vSA9I1gn+/mwZR6wOWL6PrBns7LMnjA0y1z 5d7b9FewuHxA4ZqvF3l3DdAR75tHvVFr9XB5nWy3aI6JdgjeNypLyX97fV/rbFzl hmIkQ4PTmA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:30 2026 by rpki-client