This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_hpSVPN9jCkbEd2r7YiwY0gdr2s.cer File: _hpSVPN9jCkbEd2r7YiwY0gdr2s.cer (raw, json) Hash identifier: HocUgg0uvGU1JJ2H4p6oisbGl7TjNYqe5iP6fjg+De0= Subject key identifier: FE:1A:52:54:F3:7D:8C:29:1B:11:DD:AB:ED:88:B0:63:48:1D:AF:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5B18428D5A43C0186AC5B346D63D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.168.232.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:b1:84:28:d5:a4:3c:01:86:ac:5b:34:6d:63:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe1a5254f37d8c291b11ddabed88b063481daf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:29:97:da:f3:35:ff:87:e9:8d:21:7c:53: bd:34:8e:84:67:84:fd:91:aa:74:ad:60:69:84:f5: f1:44:57:73:f7:ef:ad:9a:f2:15:08:97:91:14:56: cd:73:ef:3a:41:e6:f2:9f:e1:f4:02:b0:95:3a:74: d8:59:43:3d:7f:8e:6c:54:fa:8c:b8:ef:76:5d:58: 01:1c:ab:41:27:24:3c:31:d6:e7:9d:d3:9d:98:93: 95:20:5e:e1:4c:0c:b9:07:8f:a8:c6:05:1c:51:15: 8d:9f:fe:4e:fa:f9:01:d5:11:81:7e:16:26:ce:26: b1:55:32:1a:c4:39:ae:bd:98:ba:5d:64:11:5c:e9: 5d:c8:c1:bd:7b:8d:b3:54:d2:b2:28:a5:9b:0d:70: 99:fd:22:9c:2c:e0:5f:04:13:81:4c:b0:6c:16:c0: 69:fd:3a:fa:6b:f0:b4:ec:8f:48:79:8c:3e:70:a6: 1e:bc:6d:dd:2d:22:5f:02:d5:19:ee:b6:0e:ac:3f: e8:ed:90:69:98:c8:ff:63:a7:1f:2c:f5:ec:2d:43: 64:1d:41:1e:2d:37:52:22:cf:09:ac:ce:b0:1f:24: 8b:20:3c:54:a6:9a:bb:04:22:d5:a9:01:c6:08:92: 18:89:ac:cc:39:64:34:75:1f:61:2e:12:1e:d3:eb: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1A:52:54:F3:7D:8C:29:1B:11:DD:AB:ED:88:B0:63:48:1D:AF:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.232.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:5c:a9:b6:10:07:a9:0a:fa:b7:c2:a9:00:79:9f:e4:ff:78: 25:1e:d5:ae:07:2f:43:48:a6:c6:f7:80:e7:a5:ef:66:19:55: 68:ab:79:2d:09:70:12:a9:4e:e3:f6:94:50:2b:67:40:e0:26: b6:be:c5:e6:6f:0c:18:38:65:22:23:4e:e7:25:70:6a:75:8d: 53:7f:3b:38:fb:2b:d4:ce:33:6a:9f:17:22:fa:40:c6:b5:2d: 6e:28:7a:eb:06:00:d8:b8:d5:e5:12:b0:ee:78:ee:d4:d1:fd: 3a:be:9d:4a:1f:31:17:47:d8:15:c2:28:a9:74:d2:a1:cc:df: 44:fc:e8:88:da:cf:c1:a6:94:c9:d1:ad:6c:bf:0a:d7:f0:cd: 9c:bb:f8:8e:d0:47:59:8d:e4:77:c3:27:1e:4d:68:4c:06:08: 19:46:ed:ef:50:9b:25:f0:d9:45:3b:ba:fc:b8:14:bf:a9:83: 60:92:46:35:ec:1d:0e:0c:07:50:ea:21:c4:eb:d1:aa:86:0a: f0:b3:6e:2c:bb:9d:0a:38:15:ec:e7:34:a3:39:0c:0d:8e:33: d1:78:83:cc:9f:10:38:ca:4b:dc:72:13:2b:8a:80:4f:14:9c: 28:1d:1e:03:e5:31:5e:b6:b5:a2:5a:a9:c5:e2:28:fe:22:8b: 3f:f9:bb:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pbGEKNWkPAGGrFs0bWPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTFhNTI1NGYzN2Q4YzI5MWIxMWRkYWJlZDg4YjA2MzQ4MWRhZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYEpl9rzNf+H6Y0hfFO9NI6EZ4T9 kap0rWBphPXxRFdz9++tmvIVCJeRFFbNc+86Qebyn+H0ArCVOnTYWUM9f45sVPqM uO92XVgBHKtBJyQ8MdbnndOdmJOVIF7hTAy5B4+oxgUcURWNn/5O+vkB1RGBfhYm ziaxVTIaxDmuvZi6XWQRXOldyMG9e42zVNKyKKWbDXCZ/SKcLOBfBBOBTLBsFsBp /Tr6a/C07I9IeYw+cKYevG3dLSJfAtUZ7rYOrD/o7ZBpmMj/Y6cfLPXsLUNkHUEe LTdSIs8JrM6wHySLIDxUppq7BCLVqQHGCJIYiazMOWQ0dR9hLhIe0+tJEwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFP4aUlTzfYwpGxHdq+2IsGNIHa9rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzYzZjYw YS0yN2Q3LTQ5MWUtYmRjMi1mYTBkMGU4MDVkZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvNjNmNjBh LTI3ZDctNDkxZS1iZGMyLWZhMGQwZTgwNWRmOC8xL19ocFNWUE45akNrYkVkMnI3 WWl3WTBnZHIycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuajoMA0GCSqGSIb3DQEBCwUAA4IBAQCaXKm2 EAepCvq3wqkAeZ/k/3glHtWuBy9DSKbG94Dnpe9mGVVoq3ktCXASqU7j9pRQK2dA 4Ca2vsXmbwwYOGUiI07nJXBqdY1Tfzs4+yvUzjNqnxci+kDGtS1uKHrrBgDYuNXl ErDueO7U0f06vp1KHzEXR9gVwiipdNKhzN9E/OiI2s/BppTJ0a1svwrX8M2cu/iO 0EdZjeR3wyceTWhMBggZRu3vUJsl8NlFO7r8uBS/qYNgkkY17B0ODAdQ6iHE69Gq hgrws24su50KOBXs5zSjOQwNjjPReIPMnxA4ykvcchMrioBPFJwoHR4D5TFetrWi WqnF4ij+Ios/+bvv -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:58 2026 by rpki-client