This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
File:                     hPLOccb_zodWDVZe5czaMeAbnBU.cer (raw, json)
Hash identifier:          p2xVgxvKXMvNu3ZXawzcmPHJ3KBhwf2hjXYo+nfugxo=
Subject key identifier:   84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797ED7AD36AEDADDEA7078B917A4EAB5
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:18:34 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 2819
                          AS: 5588
                          AS: 12767
                          AS: 13036
                          AS: 15485
                          AS: 21142
                          AS: 48574
                          AS: 50491
                          IP: 37.48.0.0/18
                          IP: 46.13.0.0/16
                          IP: 62.77.64.0/18
                          IP: 62.84.128.0/19
                          IP: 62.141.0.0/19
                          IP: 62.168.0.0/18
                          IP: 62.209.192.0/18
                          IP: 78.80.0.0/16
                          IP: 80.95.240.0/20
                          IP: 89.24.0.0/16
                          IP: 89.233.128.0/18
                          IP: 91.139.0.0/17
                          IP: 93.153.0.0/17
                          IP: 109.75.144.0/20
                          IP: 109.183.0.0/16
                          IP: 109.238.208.0/20
                          IP: 185.14.188.0/22
                          IP: 185.248.176.0/22
                          IP: 193.33.14.0/23
                          IP: 193.85.0.0 -- 193.86.255.255
                          IP: 193.179.0.0/16
                          IP: 194.108.0.0/16
                          IP: 194.149.96.0/19
                          IP: 194.212.0.0/16
                          IP: 194.213.32.0/19
                          IP: 194.213.192.0/19
                          IP: 195.22.32.0/19
                          IP: 195.39.0.0/17
                          IP: 195.39.208.0/23
                          IP: 195.47.0.0/17
                          IP: 195.70.128.0/19
                          IP: 195.144.96.0/19
                          IP: 212.47.0.0/19
                          IP: 212.65.192.0/18
                          IP: 212.67.64.0/19
                          IP: 213.29.0.0/16
                          IP: 213.210.128.0/18
                          IP: 217.30.64.0/20
                          IP: 2001:af0::/32
                          IP: 2001:b80::/29
                          IP: 2001:1ae8::/29
                          IP: 2a00:9fc0::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:d7:ad:36:ae:da:dd:ea:70:78:b9:17:a4:ea:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:2b:8b:22:4c:40:f8:97:e3:1c:3b:c7:37:
                    7a:5f:3c:3b:c1:e1:2d:89:a7:6e:49:bd:eb:ce:67:
                    1f:64:7d:65:0e:39:ec:23:7c:4b:a9:62:d0:cd:c2:
                    54:fb:6e:5e:97:4a:5b:4e:c2:3f:a4:15:b1:2d:1a:
                    ed:d6:db:1b:57:0c:49:07:63:b7:9f:28:56:14:a3:
                    9c:cf:60:88:5b:c7:a7:01:c8:da:fc:1e:3f:54:9e:
                    be:00:67:54:11:c8:ed:f9:35:1a:7f:de:31:a5:fb:
                    af:3f:19:5f:c8:66:1b:ad:1e:fa:6e:c8:db:1a:28:
                    60:9c:74:b5:28:77:d9:33:de:e5:24:c7:a6:1b:2e:
                    10:27:46:87:05:4d:c6:2c:98:4f:c2:5d:70:f9:3f:
                    a7:ee:82:f1:46:6c:95:ef:66:c7:33:cf:d6:06:a1:
                    79:5a:f4:e6:12:04:77:30:5b:62:d9:41:61:be:c9:
                    f2:33:cb:6f:5d:86:b2:a6:ee:d6:ad:53:9c:69:98:
                    26:87:14:cd:0d:06:68:0c:99:de:1f:0b:91:29:03:
                    f5:5f:c4:5b:42:5a:30:21:53:72:19:3f:dc:64:2c:
                    25:d7:f9:92:d3:b3:12:38:be:a5:e0:ae:5d:0f:32:
                    5f:96:ac:70:7a:39:5b:eb:5c:35:9f:a3:40:f0:6a:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.48.0.0/18
                  46.13.0.0/16
                  62.77.64.0/18
                  62.84.128.0/19
                  62.141.0.0/19
                  62.168.0.0/18
                  62.209.192.0/18
                  78.80.0.0/16
                  80.95.240.0/20
                  89.24.0.0/16
                  89.233.128.0/18
                  91.139.0.0/17
                  93.153.0.0/17
                  109.75.144.0/20
                  109.183.0.0/16
                  109.238.208.0/20
                  185.14.188.0/22
                  185.248.176.0/22
                  193.33.14.0/23
                  193.85.0.0-193.86.255.255
                  193.179.0.0/16
                  194.108.0.0/16
                  194.149.96.0/19
                  194.212.0.0/16
                  194.213.32.0/19
                  194.213.192.0/19
                  195.22.32.0/19
                  195.39.0.0/17
                  195.39.208.0/23
                  195.47.0.0/17
                  195.70.128.0/19
                  195.144.96.0/19
                  212.47.0.0/19
                  212.65.192.0/18
                  212.67.64.0/19
                  213.29.0.0/16
                  213.210.128.0/18
                  217.30.64.0/20
                IPv6:
                  2001:af0::/32
                  2001:b80::/29
                  2001:1ae8::/29
                  2a00:9fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2819
                  5588
                  12767
                  13036
                  15485
                  21142
                  48574
                  50491

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:42:8a:6e:31:79:fa:f4:e9:c2:a0:17:38:ac:52:da:58:
         ce:f8:8f:a6:71:1b:6d:a3:5e:d4:88:d5:ad:51:50:5c:53:5c:
         18:45:69:f4:7d:15:c9:6b:b2:67:08:28:b1:3d:3c:1a:85:d0:
         6e:86:70:a3:dd:8f:36:ee:ac:e3:38:b7:10:93:12:44:a0:c9:
         3a:35:c1:1d:f1:58:60:69:80:1b:28:eb:c3:fd:b6:0d:21:89:
         b8:4b:ab:79:fc:88:b1:22:ac:4d:e6:5a:87:79:e6:a0:ae:d8:
         d2:5e:72:4d:09:81:57:a2:84:6a:e3:42:13:61:a0:70:71:df:
         78:dc:1d:2e:1d:06:97:c0:c9:a7:d2:f4:f9:9a:77:1f:ff:25:
         1e:e9:99:c4:7d:dc:e5:03:3c:cc:f2:1c:e0:59:bf:73:a2:50:
         ba:2a:41:29:83:6d:69:e1:a4:1f:15:70:a0:73:2b:07:03:53:
         ec:e8:da:16:86:6f:2c:a7:cc:d9:21:5f:c4:e3:84:35:05:03:
         8a:a7:4c:33:d8:ee:65:62:0c:73:a6:f0:d9:75:61:13:51:9c:
         df:1e:9b:39:b3:60:ce:4b:0d:f6:83:16:ff:b6:8f:78:e3:82:
         d5:b6:58:9b:e0:94:73:4c:65:0b:58:bf:7a:b2:b6:d9:36:bb:
         72:7c:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----