This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer (raw, json) Hash identifier: obsjlh3gP6xHFwvAOWYqkLu9tcB6k69SxfEy31qKvbc= Subject key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783513BB12FBD6659B7FE277E7631431 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199993 IP: 185.39.208.0/22 IP: 2a04:6d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:13:bb:12:fb:d6:65:9b:7f:e2:77:e7:63:14:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8498f3fefce2fa0120336264df15010461082e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:93:3c:aa:4d:cc:34:1b:b5:be:6f:a7:c0: 73:f7:23:7c:7d:35:d4:b1:ec:36:c4:90:eb:c1:11: 8f:cd:15:43:73:49:84:a4:4d:95:a8:58:cc:26:74: fb:62:74:48:28:bd:18:b3:fb:68:98:d5:92:86:e9: 69:c5:fb:b7:86:4b:a8:09:a2:46:ac:8e:a0:d4:95: a8:c3:31:8c:cf:41:70:cc:f0:45:17:ac:73:4e:d2: d4:17:72:e6:bb:1a:3e:09:1a:75:e0:f4:ab:e5:57: 16:48:a9:af:7f:0a:b4:52:56:34:97:e3:48:3a:a6: b7:91:8f:48:e9:62:ad:95:d6:e6:28:5d:2b:d4:c2: fc:00:be:48:3b:07:3a:15:2e:ec:a4:e0:38:e1:a9: 51:b1:d4:e9:cc:d0:33:96:d3:12:c8:86:4d:c1:66: 0a:f8:f2:4a:51:d4:9a:60:de:13:3e:3a:ec:aa:04: c2:06:c4:b9:c4:54:a1:15:61:c5:05:22:bb:e8:59: 1e:e4:2c:e8:62:e2:b9:d1:2a:7c:ac:55:8c:ef:8c: c3:43:95:26:b7:a0:cd:69:f8:61:cb:84:47:1b:f7: 20:9f:7d:29:55:f7:2b:fa:b0:87:92:b6:f1:cf:a8: dc:c9:c1:ba:5f:70:64:86:08:34:52:de:2b:5d:76: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.208.0/22 IPv6: 2a04:6d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199993 Signature Algorithm: sha256WithRSAEncryption 2c:02:80:7b:5b:32:c5:99:5c:28:38:92:a6:86:e8:1a:09:7c: 5c:96:48:c9:2d:4d:5c:0c:61:2e:f6:5c:02:f1:6c:30:19:87: 1b:df:3a:43:f5:a1:aa:49:08:44:79:58:57:e0:18:83:5b:70: d8:a1:66:1b:35:75:c9:ab:91:ac:fb:99:7f:0c:a3:2b:c2:a8: 9e:da:32:5e:33:0d:ae:90:d9:99:47:95:ca:24:fc:13:b2:04: c0:30:d1:82:3b:ed:0e:b5:21:a5:0e:1f:74:6f:d5:05:f2:fb: 4b:e9:b5:d9:e1:c6:fd:d3:b4:d8:06:83:3e:b3:70:5b:45:43: bd:3a:1a:de:30:ab:6c:7e:e0:97:e2:a0:3d:be:2b:06:c4:b4: fd:54:64:15:41:8d:a3:bb:4b:86:8c:fc:54:2e:df:fa:80:1d: 54:ad:dc:aa:83:78:2a:69:5d:5e:d1:d7:e3:9f:15:c8:72:2a: 27:00:c7:2a:c1:2c:ea:60:c0:16:1a:fe:8f:d2:cd:13:3b:73: ba:3e:f1:50:44:14:38:9f:1c:24:ac:50:85:a3:b2:6c:68:60: 30:39:86:7f:7f:72:03:57:61:f4:19:d9:87:ef:19:05:91:cb: 59:8f:d3:8b:f1:ca:05:e8:c9:46:71:88:ef:b6:fd:b7:d7:79: 43:a2:36:8b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NRO7EvvWZZt/4nfnYxQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDk4ZjNmZWZjZTJmYTAxMjAzMzYyNjRkZjE1MDEwNDYxMDgyZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3qTPKpNzDQbtb5vp8Bz9yN8fTXU sew2xJDrwRGPzRVDc0mEpE2VqFjMJnT7YnRIKL0Ys/tomNWShulpxfu3hkuoCaJG rI6g1JWowzGMz0FwzPBFF6xzTtLUF3Lmuxo+CRp14PSr5VcWSKmvfwq0UlY0l+NI Oqa3kY9I6WKtldbmKF0r1ML8AL5IOwc6FS7spOA44alRsdTpzNAzltMSyIZNwWYK +PJKUdSaYN4TPjrsqgTCBsS5xFShFWHFBSK76Fke5CzoYuK50Sp8rFWM74zDQ5Um t6DNafhhy4RHG/cgn30pVfcr+rCHkrbxz6jcycG6X3Bkhgg0Ut4rXXai2QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFISY8/784voBIDNiZN8VAQRhCC6KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzQ2MTFm Zi00MGIyLTRjMGEtYTdmOC00MDRkZmRiNDY0NzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNDYxMWZm LTQwYjItNGMwYS1hN2Y4LTQwNGRmZGI0NjQ3Ny8xL2hKanpfdnppLWdFZ00ySmsz eFVCQkdFSUxvby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSfQMA0EAgACMAcDBQMqBG2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMNOTANBgkqhkiG9w0BAQsFAAOCAQEALAKAe1syxZlc KDiSpoboGgl8XJZIyS1NXAxhLvZcAvFsMBmHG986Q/WhqkkIRHlYV+AYg1tw2KFm GzV1yauRrPuZfwyjK8KontoyXjMNrpDZmUeVyiT8E7IEwDDRgjvtDrUhpQ4fdG/V BfL7S+m12eHG/dO02AaDPrNwW0VDvToa3jCrbH7gl+KgPb4rBsS0/VRkFUGNo7tL hoz8VC7f+oAdVK3cqoN4KmldXtHX458VyHIqJwDHKsEs6mDAFhr+j9LNEztzuj7x UEQUOJ8cJKxQhaOybGhgMDmGf39yA1dh9BnZh+8ZBZHLWY/Ti/HKBejJRnGI77b9 t9d5Q6I2iw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:12 2026 by rpki-client