This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer (raw, json) Hash identifier: 4Tj9xbywhfoc5pz4ubVoI6VC2xIQEV9lWVFCYXsJ5x8= Subject key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C736509AF75C7B491CA1D5EB15356 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43852 IP: 78.159.160.0/19 IP: 185.147.28.0/22 IP: 2a0e:1140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:73:65:09:af:75:c7:b4:91:ca:1d:5e:b1:53:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:16:27:e3:1e:d4:1e:59:65:dd:be:96:c9: 72:69:6c:76:d8:74:42:ee:40:8d:2c:df:85:a8:a9: df:d4:66:76:91:af:bb:de:52:67:6f:c4:b3:e4:43: ca:f1:b7:c2:7c:00:17:6d:36:cd:9c:6a:57:c9:07: 33:f4:98:8b:09:15:db:eb:41:c9:23:94:09:ec:2e: 31:69:a4:14:d0:2d:06:35:f0:bc:cd:b0:b0:ec:f6: 59:63:13:4c:96:15:83:1e:fa:4b:41:95:87:5e:9b: 5c:e7:08:18:51:b3:80:ad:0f:a4:77:d8:96:b8:82: 89:13:67:1e:4e:39:b8:12:7f:34:a3:9c:ad:4c:11: 0b:61:c4:04:22:35:a6:a2:f9:7a:6b:5e:9c:a7:cd: 78:2e:4a:e1:64:98:52:64:fd:a5:68:91:6f:54:05: 9b:e4:00:97:0c:dd:18:5d:a0:f0:75:dc:a5:fd:a2: e2:2d:ff:08:bc:07:37:17:d4:fe:01:c1:12:39:9c: 9c:13:a9:bc:54:d1:93:82:bd:47:bb:a4:15:fd:d2: e3:e5:08:a2:00:e8:0e:54:ce:13:3e:77:c7:d9:9e: e5:33:36:70:d7:4c:9f:9d:3f:c5:d9:08:16:8f:f9: c0:a9:d1:26:a6:cb:72:55:9f:4d:67:31:76:36:df: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.160.0/19 185.147.28.0/22 IPv6: 2a0e:1140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43852 Signature Algorithm: sha256WithRSAEncryption 32:08:2c:99:9b:1f:d9:61:e8:42:87:89:55:3c:04:ba:85:c3: 5b:8e:78:b7:19:2e:9e:ea:37:0f:1a:6d:2d:e6:bd:66:4d:a2: 61:8b:ac:55:39:51:7b:43:f4:bf:c1:5a:6b:13:f2:6b:a9:ed: 01:8c:bb:6e:c5:31:b3:55:84:22:7f:47:c6:d2:21:3d:da:e0: 77:50:23:a6:b2:77:ab:53:94:26:ec:0f:52:e1:f1:11:e0:16: 1e:6e:76:22:b1:3e:d7:3c:bc:15:4f:7e:6d:9d:b2:c8:e1:be: fd:4e:eb:de:e2:01:f9:df:11:2d:c2:59:cf:b3:86:b9:ca:d2: 31:ea:0f:d8:32:17:2a:a9:93:3c:25:4e:1c:c9:65:73:6b:1a: 97:c7:d7:9b:07:04:15:ae:a8:c3:6e:a3:50:4e:5e:5e:5f:78: 8a:c9:d0:e2:8f:cf:63:90:f2:c1:73:c2:26:d6:08:1c:0e:d2: 24:41:90:4c:c9:a4:ae:4c:25:f4:72:c9:3d:f1:1d:f5:ec:58: 35:44:f2:0e:d8:d8:41:94:05:58:ec:1f:a7:15:17:92:50:8d: 9b:4a:16:c9:77:f6:fd:08:39:76:70:d1:bc:c1:96:ef:ef:96: f5:2a:cf:98:0c:d8:bc:7c:5b:4c:6a:03:b6:c8:25:a1:64:63: 82:83:de:f0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9XHNlCa91x7SRyh1esVNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDlhY2UwNjZhNDRlZDJmOTVmZTZiYzJkMGE3ZGE0MTI3NjNiZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgEWJ+Me1B5ZZd2+lslyaWx22HRC 7kCNLN+FqKnf1GZ2ka+73lJnb8Sz5EPK8bfCfAAXbTbNnGpXyQcz9JiLCRXb60HJ I5QJ7C4xaaQU0C0GNfC8zbCw7PZZYxNMlhWDHvpLQZWHXptc5wgYUbOArQ+kd9iW uIKJE2ceTjm4En80o5ytTBELYcQEIjWmovl6a16cp814LkrhZJhSZP2laJFvVAWb 5ACXDN0YXaDwddyl/aLiLf8IvAc3F9T+AcESOZycE6m8VNGTgr1Hu6QV/dLj5Qii AOgOVM4TPnfH2Z7lMzZw10yfnT/F2QgWj/nAqdEmpstyVZ9NZzF2Nt+t9wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFISazgZqRO0vlf5rwtCn2kEnY78qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzBhNTgx Ny1iYTg1LTQyNDQtYTA1Mi1mN2M0NjU3YjdiOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMGE1ODE3 LWJhODUtNDI0NC1hMDUyLWY3YzQ2NTdiN2I4ZC8xL2hKck9CbXBFN1MtVl9tdkMw S2ZhUVNkanZ5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFTp+gAwQCuZMcMA0EAgACMAcDBQMqDhFAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCrTDANBgkqhkiG9w0BAQsFAAOCAQEAMggs mZsf2WHoQoeJVTwEuoXDW454txkunuo3DxptLea9Zk2iYYusVTlRe0P0v8FaaxPy a6ntAYy7bsUxs1WEIn9HxtIhPdrgd1AjprJ3q1OUJuwPUuHxEeAWHm52IrE+1zy8 FU9+bZ2yyOG+/U7r3uIB+d8RLcJZz7OGucrSMeoP2DIXKqmTPCVOHMllc2sal8fX mwcEFa6ow26jUE5eXl94isnQ4o/PY5DywXPCJtYIHA7SJEGQTMmkrkwl9HLJPfEd 9exYNUTyDtjYQZQFWOwfpxUXklCNm0oWyXf2/Qg5dnDRvMGW7++W9SrPmAzYvHxb TGoDtsgloWRjgoPe8A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:21 2026 by rpki-client