This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer File: hWklE5rMSv4L6e8JhOPnvVtE6eY.cer (raw, json) Hash identifier: Z5vgb0mBDFGZvYIY/TMgVJpztAAVMRhIyoF0ThPFqHY= Subject key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A58699648C5F3F8A5F790201D3682 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207290 IP: 37.44.240.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:58:69:96:48:c5:f3:f8:a5:f7:90:20:1d:36:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:20:6d:77:88:e2:c4:f2:dc:8f:15:c0:aa:42: 6f:bc:cd:9d:d3:3c:e1:62:50:83:d6:61:e0:72:ef: 0f:c2:91:fd:68:25:43:1d:ec:17:61:ee:08:97:f4: ee:45:2f:01:61:39:0e:f6:bf:e4:95:ad:7b:5f:67: 45:26:f2:3e:53:03:db:fc:40:11:bf:07:62:45:a9: bb:43:f4:bd:bc:3d:d9:72:d0:fa:42:23:18:a1:61: 4a:84:18:fc:9e:2e:c2:7d:59:10:75:99:a3:af:10: e4:d8:50:71:e5:5d:e9:04:77:73:33:ee:5c:6d:f0: a6:33:36:53:cf:ff:79:6e:70:dd:c6:2b:b5:f5:9c: 59:23:36:ff:32:ed:c3:5e:3a:d7:4d:d9:08:56:f7: 2d:ad:d7:ef:8e:aa:96:0d:3d:22:61:bc:b7:a4:03: bf:6c:94:82:3a:b2:20:9f:6b:5e:ae:e4:9d:d8:68: 13:a5:a3:9f:b3:45:08:3e:21:22:5d:a3:e4:70:74: a6:54:2e:e2:3f:15:b1:c1:53:d7:c2:fe:ea:e1:74: 83:4b:3a:c9:5f:18:3d:6b:fa:1d:b4:f7:42:4e:7d: cb:11:12:66:f2:a8:24:ac:b5:7d:1e:83:7b:ac:31: 6b:3c:94:62:c3:74:91:ef:5d:4d:b4:cd:63:1c:f7: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.240.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207290 Signature Algorithm: sha256WithRSAEncryption 47:81:05:48:7c:bb:a0:40:79:df:03:f2:2f:7a:0f:7d:8b:7a: ba:d8:f8:67:59:54:51:8a:72:7f:ea:31:85:d6:48:dc:51:a8: 09:1e:fb:79:a7:04:15:4a:1d:5c:4f:ad:ad:ee:68:1f:30:06: bd:ca:2e:4d:fd:c2:59:66:85:cc:98:c5:52:7d:89:2e:68:27: 6a:86:f0:e2:f1:84:51:7d:69:4b:d6:60:2a:7d:59:69:d9:23: e1:09:99:e1:ee:50:72:da:47:16:ef:15:6a:45:e5:ef:9b:0c: d9:13:23:bb:12:c6:34:e1:18:a9:40:a2:52:4a:8f:f9:3c:af: 81:d0:1f:f1:32:93:26:92:49:8e:04:00:37:2c:24:d9:9a:19: a2:15:fd:86:bf:d5:7d:e6:e5:41:de:38:6d:c1:42:06:52:58: 72:86:53:56:b9:6e:b7:fb:41:12:ff:26:d4:56:c1:25:bf:00: 0d:65:c1:47:c9:bf:78:12:19:bd:77:62:c5:2e:42:d1:a8:07: e9:b5:db:f9:49:1f:f2:be:3b:0b:bb:01:9c:4b:5e:b0:d2:b8: 05:03:06:7b:07:e3:76:76:e4:6c:cf:11:84:2e:f3:55:df:d1: 11:34:a3:44:7a:41:22:4e:53:01:9a:e2:16:6a:ec:0a:a9:e7: a2:dd:3e:3e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WlhplkjF8/il95AgHTaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTY5MjUxMzlhY2M0YWZlMGJlOWVmMDk4NGUzZTdiZDViNDRlOWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCBtd4jixPLcjxXAqkJvvM2d0zzh YlCD1mHgcu8PwpH9aCVDHewXYe4Il/TuRS8BYTkO9r/kla17X2dFJvI+UwPb/EAR vwdiRam7Q/S9vD3ZctD6QiMYoWFKhBj8ni7CfVkQdZmjrxDk2FBx5V3pBHdzM+5c bfCmMzZTz/95bnDdxiu19ZxZIzb/Mu3DXjrXTdkIVvctrdfvjqqWDT0iYby3pAO/ bJSCOrIgn2teruSd2GgTpaOfs0UIPiEiXaPkcHSmVC7iPxWxwVPXwv7q4XSDSzrJ Xxg9a/odtPdCTn3LERJm8qgkrLV9HoN7rDFrPJRiw3SR711NtM1jHPevDQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIVpJROazEr+C+nvCYTj571bROnmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzdjNDVl Yy0zZjZiLTQ2MzUtOWQzNS04ZDIwM2JhNGFjYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvN2M0NWVj LTNmNmItNDYzNS05ZDM1LThkMjAzYmE0YWNjNC8xL2hXa2xFNXJNU3Y0TDZlOEpo T1BudlZ0RTZlWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCJSzwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMpujANBgkqhkiG9w0BAQsFAAOCAQEAR4EFSHy7oEB53wPyL3oPfYt6utj4Z1lU UYpyf+oxhdZI3FGoCR77eacEFUodXE+tre5oHzAGvcouTf3CWWaFzJjFUn2JLmgn aobw4vGEUX1pS9ZgKn1Zadkj4QmZ4e5QctpHFu8VakXl75sM2RMjuxLGNOEYqUCi UkqP+TyvgdAf8TKTJpJJjgQANywk2ZoZohX9hr/VfeblQd44bcFCBlJYcoZTVrlu t/tBEv8m1FbBJb8ADWXBR8m/eBIZvXdixS5C0agH6bXb+Ukf8r47C7sBnEtesNK4 BQMGewfjdnbkbM8RhC7zVd/RETSjRHpBIk5TAZriFmrsCqnnot0+Pg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:10 2026 by rpki-client