This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer (raw, json) Hash identifier: Ec1d8CK2cKt2KeZgMLj6YrYEqg6Za2BDQ3lov4CPY8Q= Subject key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7B5D67F70950E9A562E4CFBAA45B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59689 IP: 185.3.128.0/22 IP: 2a02:5cc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b5:d6:7f:70:95:0e:9a:56:2e:4c:fb:aa:45:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:16:9c:02:a9:4d:ad:23:36:8c:3f:37:59: 3e:5b:7d:dd:ee:f2:81:8c:a5:9d:f1:62:38:b7:36: 71:0a:e2:39:aa:67:f5:97:cb:9d:4e:ca:b5:8c:07: b4:a5:d6:6b:78:dd:2a:5d:fe:c5:c9:a8:b6:6e:7a: d7:0a:4d:87:cf:ea:3a:37:78:ff:ff:ed:cc:2e:c3: e1:78:a3:1b:32:08:9a:1e:d9:43:53:02:b2:9f:84: dd:10:7a:44:54:63:34:85:bc:3e:c4:a7:94:dd:43: 44:32:2c:3f:d6:08:13:c5:6e:0b:4c:7e:85:94:37: d3:24:bc:cc:ed:77:1c:cd:7c:51:db:10:6b:20:59: f1:3f:c6:93:70:e0:4c:15:06:9a:1b:21:2b:70:cc: 35:c7:a6:80:f0:5b:04:09:5e:7e:ba:4d:d6:0d:57: b4:c5:c7:2b:b9:75:f5:6d:58:fa:cb:fc:37:50:be: d9:e2:e2:7c:05:b9:f7:8f:14:cb:30:ce:a6:38:1c: d4:82:f1:aa:8c:5c:87:be:70:4b:e7:70:58:5f:5f: e2:d3:bd:2c:11:31:ad:08:d5:02:cb:26:5b:a5:63: 36:e3:09:8b:3d:d5:50:6a:8d:88:b4:4d:29:ca:49: 46:21:cf:5d:7d:44:5b:f0:31:0c:51:b8:00:4b:b2: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.3.128.0/22 IPv6: 2a02:5cc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59689 Signature Algorithm: sha256WithRSAEncryption 78:95:a8:9a:30:5c:b3:57:eb:7f:a9:8a:38:15:bf:32:5a:53: 4c:72:b6:14:79:cb:fd:85:35:2d:fd:4d:67:f3:ef:77:05:9a: 32:fe:3b:54:9f:29:6c:c9:14:0a:ea:5f:72:d0:42:de:d8:b3: 7b:9c:83:d3:2e:09:81:7f:b1:f7:13:bc:6f:b3:16:c6:74:32: 88:ff:29:7d:01:73:88:e5:82:1c:63:0b:0b:41:75:0f:91:2a: 95:13:4e:a8:58:76:86:f2:bd:4d:3f:46:ba:44:64:8d:ed:1d: 2d:93:9b:ea:45:93:e2:1b:e1:24:2f:05:91:c0:bc:ac:29:13: ba:a2:0f:7f:68:25:f4:89:bb:eb:1f:07:d8:b6:30:23:e8:a1: 30:d4:8f:23:bb:ae:67:1f:28:b5:ac:15:45:f1:01:da:15:51: fd:74:90:00:1c:c2:a9:8e:43:d1:ff:65:1a:30:e9:19:d9:38: b3:ea:48:09:d7:fa:b0:58:48:06:69:b3:ad:56:6f:8d:70:1e: 39:61:d6:95:e2:9c:f1:e3:dc:c7:aa:ad:5c:c4:c7:67:48:01: e8:c6:7f:b3:d5:a5:ef:64:be:b1:9b:80:f2:a1:da:80:00:02: 9c:1b:8c:d7:5e:68:dc:39:78:69:ba:6d:e8:16:0e:ad:4d:31: fb:f2:e8:66 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x7XWf3CVDppWLkz7qkW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGQ1MDkyNTlmNzAwY2RjNDQ0OGYxZmJmNTMwYzE5ZTQwNzU0ZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/oWnAKpTa0jNow/N1k+W33d7vKB jKWd8WI4tzZxCuI5qmf1l8udTsq1jAe0pdZreN0qXf7Fyai2bnrXCk2Hz+o6N3j/ /+3MLsPheKMbMgiaHtlDUwKyn4TdEHpEVGM0hbw+xKeU3UNEMiw/1ggTxW4LTH6F lDfTJLzM7XcczXxR2xBrIFnxP8aTcOBMFQaaGyErcMw1x6aA8FsECV5+uk3WDVe0 xccruXX1bVj6y/w3UL7Z4uJ8Bbn3jxTLMM6mOBzUgvGqjFyHvnBL53BYX1/i070s ETGtCNUCyyZbpWM24wmLPdVQao2ItE0pyklGIc9dfURb8DEMUbgAS7IUXwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFITVCSWfcAzcREjx+/UwwZ5AdU7EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzEyODZm Ni02ODhjLTRjZmEtYTAyZC0xYTg5YWI3YjhjYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvMTI4NmY2 LTY4OGMtNGNmYS1hMDJkLTFhODlhYjdiOGNiNS8xL2hOVUpKWjl3RE54RVNQSDc5 VERCbmtCMVRzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQOAMA0EAgACMAcDBQAqAlzAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDpKTANBgkqhkiG9w0BAQsFAAOCAQEAeJWomjBcs1fr f6mKOBW/MlpTTHK2FHnL/YU1Lf1NZ/PvdwWaMv47VJ8pbMkUCupfctBC3tize5yD 0y4JgX+x9xO8b7MWxnQyiP8pfQFziOWCHGMLC0F1D5EqlRNOqFh2hvK9TT9GukRk je0dLZOb6kWT4hvhJC8FkcC8rCkTuqIPf2gl9Im76x8H2LYwI+ihMNSPI7uuZx8o tawVRfEB2hVR/XSQABzCqY5D0f9lGjDpGdk4s+pICdf6sFhIBmmzrVZvjXAeOWHW leKc8ePcx6qtXMTHZ0gB6MZ/s9Wl72S+sZuA8qHagAACnBuM115o3Dl4abpt6BYO rU0x+/LoZg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:06 2026 by rpki-client