This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer File: hAKSSGHLwIjGVahyU1qQMQige_E.cer (raw, json) Hash identifier: 73HFWBIZ04tszIXVClB+ydwU6BnVnxz8Ps1kaRDKLFI= Subject key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E89DA52DB271229AC3717C2BE810A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.233.66.0/24 IP: 217.65.131.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:89:da:52:db:27:12:29:ac:37:17:c2:be:81:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8402924861cbc088c655a872535a903108a07bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:1c:25:44:33:44:c0:8a:25:84:cb:f2:19: f8:b5:e6:b2:e8:bb:32:ad:f2:37:cd:00:36:cb:7f: 1e:4e:44:82:88:da:d0:82:45:d3:ff:a1:1c:d5:b8: 5b:71:ac:ca:9a:5f:c4:55:f9:4c:b8:f0:30:5b:f6: bc:11:a6:d3:fc:ba:3c:cc:8e:cb:76:8a:e0:ed:d5: dd:91:4a:82:5c:c8:b5:d0:dd:22:fb:7d:10:08:b4: a8:39:c5:7e:76:5d:c6:c1:22:91:22:64:3c:68:ed: 0d:90:d2:bd:4b:11:52:41:38:dc:7d:70:0c:c9:45: e7:9c:3f:b1:b9:0e:63:b0:86:10:70:4e:9e:4c:98: fb:a1:2b:1b:c7:04:2a:9c:52:52:91:8a:a4:e8:4d: af:9d:c7:13:d7:42:b6:27:3b:12:0d:e9:cf:d3:e2: dd:ec:b6:61:2c:b7:b2:31:e2:d1:66:0a:61:86:d6: 9f:cb:bf:1d:11:a9:c7:d9:68:5e:d2:20:2e:78:82: c9:da:ba:bf:26:b7:59:6b:98:8a:3e:5d:30:cc:c4: 48:ad:f8:34:29:ce:fc:aa:61:35:17:44:53:2c:f2: c0:4f:11:ba:fb:bb:1d:24:d7:2a:7e:9b:e3:3d:24: da:bb:77:76:50:3f:d5:63:ca:34:b5:84:bc:07:41: 03:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.66.0/24 217.65.131.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:21:c5:77:07:9c:05:1a:15:21:85:20:4b:55:09:52:59:52: 7f:84:bb:05:cb:94:80:06:78:f5:44:48:bc:18:54:a5:fc:00: 9c:ba:21:a5:d2:68:e5:38:02:52:8b:c4:45:8b:3e:e4:24:55: b4:12:a3:f7:78:16:e1:b0:31:e5:24:51:e9:14:5f:01:c2:b1: da:6c:de:43:3c:e4:69:28:fc:fd:ab:8c:72:6a:70:5e:31:a5: d9:7c:fd:20:59:de:2a:2f:df:cb:61:8b:ae:a1:c9:03:bc:13: 1f:3e:0c:b2:93:90:19:c4:95:e8:27:7a:49:c8:c1:ed:15:9e: af:d9:74:6a:d5:10:ea:42:ac:9c:30:26:40:1d:f5:42:74:b4: c0:10:a4:d4:08:09:d5:28:34:4e:34:85:ee:b0:de:0b:71:58: 7a:34:13:d4:0d:9c:f1:26:7f:0c:bd:a0:f2:7a:d2:9d:48:a6: d7:06:96:37:dd:b0:14:a3:60:20:e6:39:90:a2:ec:83:a2:8a: 19:20:ac:a1:6a:fa:67:86:d1:14:c1:ff:3b:eb:13:97:94:42: ce:6d:62:18:e7:ca:38:02:da:e2:44:9c:c2:a3:95:00:57:1f: 5c:d9:f4:71:7e:e6:10:93:64:33:87:a8:25:a9:b7:e6:42:e7: 7b:58:60:8c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt5fonaUtsnEimsNxfCvoEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDAyOTI0ODYxY2JjMDg4YzY1NWE4NzI1MzVhOTAzMTA4YTA3YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooIcJUQzRMCKJYTL8hn4teay6Lsy rfI3zQA2y38eTkSCiNrQgkXT/6Ec1bhbcazKml/EVflMuPAwW/a8EabT/Lo8zI7L dorg7dXdkUqCXMi10N0i+30QCLSoOcV+dl3GwSKRImQ8aO0NkNK9SxFSQTjcfXAM yUXnnD+xuQ5jsIYQcE6eTJj7oSsbxwQqnFJSkYqk6E2vnccT10K2JzsSDenP0+Ld 7LZhLLeyMeLRZgphhtafy78dEanH2Whe0iAueILJ2rq/JrdZa5iKPl0wzMRIrfg0 Kc78qmE1F0RTLPLATxG6+7sdJNcqfpvjPSTau3d2UD/VY8o0tYS8B0EDRwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFIQCkkhhy8CIxlWoclNakDEIoHvxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzA5MjRm YS01NGZiLTQyNTQtYjY0ZS0wYWM5YjNiYWU2ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMDkyNGZh LTU0ZmItNDI1NC1iNjRlLTBhYzliM2JhZTZmNS8xL2hBS1NTR0hMd0lqR1ZhaHlV MXFRTVFpZ2VfRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAuelCAwQA2UGDMA0GCSqGSIb3DQEBCwUAA4IB AQBLIcV3B5wFGhUhhSBLVQlSWVJ/hLsFy5SABnj1REi8GFSl/ACcuiGl0mjlOAJS i8RFiz7kJFW0EqP3eBbhsDHlJFHpFF8BwrHabN5DPORpKPz9q4xyanBeMaXZfP0g Wd4qL9/LYYuuockDvBMfPgyyk5AZxJXoJ3pJyMHtFZ6v2XRq1RDqQqycMCZAHfVC dLTAEKTUCAnVKDRONIXusN4LcVh6NBPUDZzxJn8MvaDyetKdSKbXBpY33bAUo2Ag 5jmQouyDoooZIKyhavpnhtEUwf876xOXlELObWIY58o4AtriRJzCo5UAVx9c2fRx fuYQk2Qzh6glqbfmQud7WGCM -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:45 2026 by rpki-client