This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer File: hRJy5OgYa5zz0etCZlxTznFPTUs.cer (raw, json) Hash identifier: vm1yGTUkqkQG1zLhHnBAUJbaseAKmUsnyC/JAkd47r4= Subject key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECF17C7C5A7707A2DCD0AB66EC0082 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.190.8.0/24 IP: 2001:67c:2ae4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f1:7c:7c:5a:77:07:a2:dc:d0:ab:66:ec:00:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:df:85:b9:c0:80:d5:f8:da:ca:99:a7:20:d4: 27:34:21:3a:06:b9:d8:96:41:08:92:66:02:7b:32: ce:be:a3:f6:9e:dc:74:55:0d:4d:41:e5:7f:b2:e1: 9a:04:0f:ef:c6:52:ee:e6:e9:0c:88:d0:85:86:e6: 0d:f4:b5:c9:5e:3e:8e:23:b1:41:6e:6d:ed:40:15: 65:a2:9b:b6:95:33:c5:58:00:66:a0:77:70:73:28: 8f:1c:07:05:58:a2:25:55:46:45:b0:4e:75:6c:01: 29:b8:ac:ab:c6:7c:1a:6a:0a:72:c5:b5:ae:cb:fa: 59:9d:d6:8d:eb:93:6e:4a:1d:1f:d8:f1:05:bf:f2: bd:0b:cc:5d:18:b4:9d:cf:05:89:aa:a8:f0:0c:dc: 59:81:8b:cd:a1:5b:c3:07:f2:31:23:3a:4e:39:c6: fb:f9:6c:68:f7:dc:b4:32:bb:76:18:8a:cb:ee:84: 3c:60:10:29:aa:a2:17:df:da:bd:78:6b:d1:73:fb: b9:bd:b3:4b:f3:98:6f:50:f9:5e:b7:cc:7d:35:96: 2d:dc:31:fd:fc:41:a3:f2:80:7e:37:60:9e:c4:1c: 34:f6:31:81:d7:d1:ca:1f:a6:6d:0d:d7:bc:57:fc: 2c:f5:79:13:07:df:a3:24:10:a6:b8:0e:bd:cd:cb: 66:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.8.0/24 IPv6: 2001:67c:2ae4::/48 Signature Algorithm: sha256WithRSAEncryption 71:11:4c:2f:7c:d3:e3:6c:05:52:2a:e9:7b:73:d6:93:27:52: eb:f0:13:f3:a6:18:d7:f7:12:61:86:b2:f0:ab:2f:06:2d:46: ea:a5:26:a8:50:5c:05:04:e2:68:56:e8:73:c6:47:0d:ff:bf: a4:ff:a2:43:c6:bf:8a:ab:79:c5:c3:63:3a:63:2a:63:88:8a: a8:8c:d9:11:b7:c7:df:67:ad:f3:c8:82:f0:10:d2:bc:e1:06: 64:25:ab:60:9c:4c:c3:87:70:3a:cf:13:a7:69:e2:45:46:31: fa:76:78:a1:ae:e9:ff:0b:de:c2:44:5c:d6:e5:e7:80:5c:be: 67:e9:84:f0:1a:e8:d9:9e:16:02:d7:87:d4:1c:8d:b8:ee:49: 2c:c0:94:72:fb:62:6a:04:34:6b:b5:de:b3:f3:b7:74:f2:34: 3e:1a:02:bf:38:02:94:aa:2d:04:75:fc:57:08:1d:d3:35:d0: 22:a4:9a:9b:45:11:89:5a:d1:c4:94:10:93:ea:b4:11:d5:78: 4f:76:bc:d0:50:5d:8c:50:ae:61:92:d1:fc:c5:c5:39:c8:07: f0:75:81:a5:f7:29:36:45:0a:b8:d2:16:fc:b9:f1:f1:3d:63: 29:c0:b3:af:80:d3:5b:e3:82:43:59:33:a1:0b:74:5c:eb:44: 07:de:a3:fe -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt57PF8fFp3B6Lc0Ktm7ACCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTEyNzJlNGU4MTg2YjljZjNkMWViNDI2NjVjNTNjZTcxNGY0ZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9N+FucCA1fjaypmnINQnNCE6BrnY lkEIkmYCezLOvqP2ntx0VQ1NQeV/suGaBA/vxlLu5ukMiNCFhuYN9LXJXj6OI7FB bm3tQBVlopu2lTPFWABmoHdwcyiPHAcFWKIlVUZFsE51bAEpuKyrxnwaagpyxbWu y/pZndaN65NuSh0f2PEFv/K9C8xdGLSdzwWJqqjwDNxZgYvNoVvDB/IxIzpOOcb7 +Wxo99y0Mrt2GIrL7oQ8YBApqqIX39q9eGvRc/u5vbNL85hvUPlet8x9NZYt3DH9 /EGj8oB+N2CexBw09jGB19HKH6ZtDde8V/ws9XkTB9+jJBCmuA69zctmoQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFIUScuToGGuc89HrQmZcU85xT01LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2VkOTRi MS1iNTczLTQ1ZTQtOWUyMS0zZjQyYzcxNzgwYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvZWQ5NGIx LWI1NzMtNDVlNC05ZTIxLTNmNDJjNzE3ODBiYy8xL2hSSnk1T2dZYTV6ejBldENa bHhUem5GUFRVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAw74IMA8EAgACMAkDBwAgAQZ8KuQwDQYJKoZI hvcNAQELBQADggEBAHERTC980+NsBVIq6Xtz1pMnUuvwE/OmGNf3EmGGsvCrLwYt RuqlJqhQXAUE4mhW6HPGRw3/v6T/okPGv4qrecXDYzpjKmOIiqiM2RG3x99nrfPI gvAQ0rzhBmQlq2CcTMOHcDrPE6dp4kVGMfp2eKGu6f8L3sJEXNbl54BcvmfphPAa 6NmeFgLXh9QcjbjuSSzAlHL7YmoENGu13rPzt3TyND4aAr84ApSqLQR1/FcIHdM1 0CKkmptFEYla0cSUEJPqtBHVeE92vNBQXYxQrmGS0fzFxTnIB/B1gaX3KTZFCrjS Fvy58fE9YynAs6+A01vjgkNZM6ELdFzrRAfeo/4= -----END CERTIFICATE-----Generated at Tue Feb 3 08:12:37 2026 by rpki-client