This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer File: hUyBdtnELHBLMQkTMJRwNRu1meU.cer (raw, json) Hash identifier: Ilg4tI+vf06pfoud7nYbRNyxtgZ7gDEoLDocURHSyGk= Subject key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CCD5627B8041472287F8B8993F024 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6768 IP: 45.14.108.0/22 IP: 2a01:4a60::/32 IP: 2a0e:c080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cd:56:27:b8:04:14:72:28:7f:8b:89:93:f0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=854c8176d9c42c704b310913309470351bb599e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:74:66:63:a1:aa:b5:75:40:e6:7c:4d:32:5d: ea:de:ba:e5:1a:47:d6:48:fb:86:90:11:1b:0a:2d: 28:6c:b2:2d:fa:42:63:ba:ef:82:fe:45:1a:4f:cf: d3:39:d7:80:c4:b2:3c:d5:5f:b3:15:13:1c:53:5b: 79:a7:44:41:0c:60:85:06:c6:e3:25:a4:43:5a:02: d9:e6:0d:a9:57:25:df:43:f4:6c:e3:4f:61:12:a4: a9:23:e6:06:7a:56:af:5b:40:40:af:ce:a3:a8:bd: a2:c7:fe:57:11:cd:e1:af:f3:00:66:3d:b5:64:0a: 9a:a3:1d:5e:85:b3:77:f6:6e:e2:d1:6e:de:ad:9d: 2b:0e:a9:67:04:86:e4:d1:f3:b3:62:3a:0f:2f:c1: 5a:c0:5d:b2:c6:6a:0f:9d:f5:54:a7:d2:6f:74:b9: 05:6f:38:fc:af:a2:45:4f:66:18:69:af:9e:7c:f7: bc:73:d8:3b:aa:98:43:49:bd:2a:8d:b5:52:ce:82: ae:96:23:7c:89:ed:21:9e:ae:2a:a2:36:a9:3a:72: 5f:02:40:1e:de:24:7f:db:32:36:db:26:52:ad:49: 9c:04:aa:f2:3b:ef:ce:98:78:35:09:d3:e2:f3:9b: b4:dc:99:4f:18:7c:f5:45:fd:d5:d0:89:38:df:7e: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.108.0/22 IPv6: 2a01:4a60::/32 2a0e:c080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6768 Signature Algorithm: sha256WithRSAEncryption 78:88:53:3b:bf:38:b9:ae:5b:7a:f8:fe:c0:7c:4d:89:b5:a6: 09:dc:f4:a9:3f:1e:93:80:6f:8a:11:2d:41:de:2d:04:c7:51: 03:5f:3a:44:10:41:cc:0a:b9:80:c0:fe:ca:ca:65:97:8a:e5: 46:66:e8:28:62:0f:17:ae:37:9f:05:86:c3:92:f2:15:4c:04: ed:73:78:20:f5:30:fe:52:7c:71:94:a3:ed:87:a0:43:b8:1a: 01:fa:15:56:d3:88:1c:7d:a4:83:3d:08:22:76:ff:be:79:41: 82:ca:e0:7a:5c:7b:50:88:da:97:77:53:7a:7c:ae:2e:4d:70: 0a:af:87:ca:25:52:a8:cd:44:4d:f4:f9:28:72:fb:0f:5e:43: c7:e6:c3:a6:7a:9b:9c:09:ed:44:71:1c:b3:d2:b9:20:00:34: 59:22:a0:93:5b:90:95:3c:48:cc:38:46:b8:3a:0c:3b:05:aa: 5d:1a:e4:cb:0d:b1:b2:09:87:e6:09:d8:62:9b:2e:fd:2b:26: 11:da:f8:d9:cd:ab:a1:d9:ba:5c:46:d1:ac:92:f0:fc:dc:a2: d3:75:2b:69:a6:02:47:58:ce:62:90:af:f7:b8:ad:d3:d0:cb: a6:16:bc:0a:76:6c:d6:26:bd:b3:02:50:a3:f7:3d:76:db:25: 5b:2b:2c:39 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9XM1WJ7gEFHIof4uJk/AkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTRjODE3NmQ5YzQyYzcwNGIzMTA5MTMzMDk0NzAzNTFiYjU5OWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3RmY6GqtXVA5nxNMl3q3rrlGkfW SPuGkBEbCi0obLIt+kJjuu+C/kUaT8/TOdeAxLI81V+zFRMcU1t5p0RBDGCFBsbj JaRDWgLZ5g2pVyXfQ/Rs409hEqSpI+YGelavW0BAr86jqL2ix/5XEc3hr/MAZj21 ZAqaox1ehbN39m7i0W7erZ0rDqlnBIbk0fOzYjoPL8FawF2yxmoPnfVUp9JvdLkF bzj8r6JFT2YYaa+efPe8c9g7qphDSb0qjbVSzoKuliN8ie0hnq4qojapOnJfAkAe 3iR/2zI22yZSrUmcBKryO+/OmHg1CdPi85u03JlPGHz1Rf3V0Ik4336oUQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIVMgXbZxCxwSzEJEzCUcDUbtZnlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2NmZjYz MC02YzhhLTQzYmQtYWZiOS1iMDdmMDE2YTE3NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvY2ZmNjMw LTZjOGEtNDNiZC1hZmI5LWIwN2YwMTZhMTc2Mi8xL2hVeUJkdG5FTEhCTE1Ra1RN SlJ3TlJ1MW1lVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAMBAIAATAGAwQCLQ5sMBQEAgACMA4DBQAqAUpgAwUDKg7AgDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgIacDANBgkqhkiG9w0BAQsFAAOCAQEAeIhT O784ua5bevj+wHxNibWmCdz0qT8ek4BvihEtQd4tBMdRA186RBBBzAq5gMD+yspl l4rlRmboKGIPF643nwWGw5LyFUwE7XN4IPUw/lJ8cZSj7YegQ7gaAfoVVtOIHH2k gz0IInb/vnlBgsrgelx7UIjal3dTenyuLk1wCq+HyiVSqM1ETfT5KHL7D15Dx+bD pnqbnAntRHEcs9K5IAA0WSKgk1uQlTxIzDhGuDoMOwWqXRrkyw2xsgmH5gnYYpsu /SsmEdr42c2rodm6XEbRrJLw/Nyi03UraaYCR1jOYpCv97it09DLpha8CnZs1ia9 swJQo/c9dtslWyssOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:31 2026 by rpki-client