This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer File: hYAvwdDz46RGJWLS8G8rPe_49Oc.cer (raw, json) Hash identifier: dpwQa1Zm3X0YTY/TCxym5C0+gwm40iuzjGCt89AdeOw= Subject key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775926ED842B9BD76CCFF72068F08AC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57789 IP: 31.135.192.0/20 IP: 185.23.7.0/24 IP: 2a0e:64c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:ed:84:2b:9b:d7:6c:cf:f7:20:68:f0:8a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:c8:c6:0c:b7:b8:2e:4c:60:a8:35:66:9e: 23:44:df:c8:f3:a4:c9:6d:00:2a:0f:fe:70:6d:49: 56:0f:67:9e:4d:d5:d7:ff:24:5b:ad:86:b1:bb:75: 36:07:e5:c5:07:3b:3f:8d:30:7b:43:38:c6:45:91: 44:89:fa:f5:c2:cb:ff:7e:6f:e2:f3:dd:1e:a4:e6: e0:41:de:11:6c:d8:94:f3:4e:5a:01:75:99:60:11: 44:cc:a8:f5:cc:c4:54:e6:50:ae:60:1f:6a:bf:b1: a4:3e:2d:3b:d5:2c:e2:20:d2:b2:50:b0:50:3a:31: a3:76:82:68:5f:56:83:df:5d:80:f2:33:c0:ad:6f: 10:02:11:0f:bc:37:c7:12:c7:1b:cf:99:1b:b3:f7: 6a:2f:0f:79:0b:20:f7:09:56:e4:01:4e:34:ae:c9: 2f:0f:38:78:b3:57:6c:8a:8f:cf:be:55:52:16:86: f0:6f:9f:66:81:c4:35:ca:37:19:64:40:0d:38:56: a5:0f:bd:55:e6:64:33:1f:7f:20:fe:b8:ed:54:95: c7:96:2c:5e:67:bc:49:b9:7c:ae:58:12:12:35:f9: 8b:2a:6d:e4:a6:a0:c6:1f:09:e5:21:1b:83:9c:c3: d4:47:a6:21:c5:de:29:32:e6:a5:3e:ac:94:f2:e9: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.192.0/20 185.23.7.0/24 IPv6: 2a0e:64c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57789 Signature Algorithm: sha256WithRSAEncryption 3c:17:e4:1f:4c:48:4e:73:75:39:b2:04:d3:67:33:0a:45:19: c2:5a:ec:30:08:34:ef:78:26:7c:94:90:fe:2a:d0:aa:c8:e5: f6:a3:8b:2e:ef:b3:7a:19:1e:b1:58:0a:79:9d:7c:e5:f4:2d: 83:ac:7c:55:b2:2f:01:48:8c:02:cb:c3:53:43:d2:dc:5c:84: 9b:6a:1f:86:7c:e1:f8:9a:f1:c4:ae:84:73:b1:85:10:4e:c0: 5d:0d:43:cc:d1:33:46:7e:af:bf:34:1e:aa:90:28:5d:93:23: 4c:a3:28:da:47:e6:cb:21:d5:ab:de:3c:9c:e1:25:a8:a7:f3: f0:ae:8e:7b:c2:2a:2c:1f:4f:97:18:d7:2f:54:79:70:8e:b6: c5:7f:a1:53:bc:a4:f5:91:15:34:d8:d4:5f:f0:6e:29:ee:e4: 42:97:9b:6f:24:1e:c8:18:6f:e9:ed:08:21:06:e9:ab:58:e2: ee:2e:9c:d0:8c:ff:ac:6d:b9:da:6a:1b:40:fa:9b:5a:8a:57: c4:1a:40:27:ba:81:10:e0:61:af:f0:df:7a:6b:08:7a:8e:d9: 22:50:89:79:9e:94:d1:14:f4:f7:3d:c6:95:ec:f0:24:03:0b: b2:e8:62:e3:e0:b5:dc:bb:3b:b7:6d:8d:32:38:12:e7:a7:a8: 14:0c:3e:2d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WSbthCub12zP9yBo8IrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTgwMmZjMWQwZjNlM2E0NDYyNTYyZDJmMDZmMmIzZGVmZjhmNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCnIxgy3uC5MYKg1Zp4jRN/I86TJ bQAqD/5wbUlWD2eeTdXX/yRbrYaxu3U2B+XFBzs/jTB7QzjGRZFEifr1wsv/fm/i 890epObgQd4RbNiU805aAXWZYBFEzKj1zMRU5lCuYB9qv7GkPi071SziINKyULBQ OjGjdoJoX1aD312A8jPArW8QAhEPvDfHEscbz5kbs/dqLw95CyD3CVbkAU40rskv Dzh4s1dsio/PvlVSFobwb59mgcQ1yjcZZEANOFalD71V5mQzH38g/rjtVJXHlixe Z7xJuXyuWBISNfmLKm3kpqDGHwnlIRuDnMPUR6Yhxd4pMualPqyU8ukBpwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIWAL8HQ8+OkRiVi0vBvKz3v+PTnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5L2FmOGIy OS1iMWFmLTRjZjYtYmYxNi1iMDU4MzJiYzY5NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvYWY4YjI5 LWIxYWYtNGNmNi1iZjE2LWIwNTgzMmJjNjk2Mi8xL2hZQXZ3ZER6NDZSR0pXTFM4 RzhyUGVfNDlPYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEH4fAAwQAuRcHMA0EAgACMAcDBQMqDmTAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDhvTANBgkqhkiG9w0BAQsFAAOCAQEAPBfk H0xITnN1ObIE02czCkUZwlrsMAg073gmfJSQ/irQqsjl9qOLLu+zehkesVgKeZ18 5fQtg6x8VbIvAUiMAsvDU0PS3FyEm2ofhnzh+JrxxK6Ec7GFEE7AXQ1DzNEzRn6v vzQeqpAoXZMjTKMo2kfmyyHVq948nOElqKfz8K6Oe8IqLB9PlxjXL1R5cI62xX+h U7yk9ZEVNNjUX/BuKe7kQpebbyQeyBhv6e0IIQbpq1ji7i6c0Iz/rG252mobQPqb WopXxBpAJ7qBEOBhr/DfemsIeo7ZIlCJeZ6U0RT09z3GlezwJAMLsuhi4+C13Ls7 t22NMjgS56eoFAw+LQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:48 2026 by rpki-client