This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer (raw, json) Hash identifier: owf1VyQ9eWYPk5DYF1xxk0GmHXkGtYXHYjyctVxLDZs= Subject key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E374E787562D250CB8C1FAF18FE353A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39864 IP: 91.232.94.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4e:78:75:62:d2:50:cb:8c:1f:af:18:fe:35:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:eb:fe:a2:f4:16:0c:3b:03:72:01:b2:a4: 4a:91:66:fa:4b:6a:35:be:d7:72:61:e5:5c:5e:a2: a8:2e:d6:48:45:63:6f:bd:b3:9f:95:b5:76:97:8b: eb:bd:86:8f:3f:62:3d:ef:8f:4d:3d:68:0b:93:a2: 36:2c:e9:10:80:71:44:21:b6:e6:84:6c:62:ad:28: 48:ef:a4:a5:53:03:de:35:bb:71:51:d6:f8:44:a3: 1b:09:ab:1b:ae:64:c9:b9:91:5e:36:88:c0:6b:e3: 7b:93:d7:01:e1:46:94:9b:78:47:09:f5:a9:27:d7: 81:10:be:33:7f:58:ee:7b:05:80:2d:62:73:25:cc: 7a:b0:30:54:49:f5:0f:23:60:92:63:85:92:9e:9f: df:3a:4c:4a:3c:f0:3d:ed:87:88:8f:87:f6:4e:77: 7d:1e:69:27:dd:e3:a8:28:bf:73:93:e1:a5:d9:3b: 91:f8:e4:28:f1:46:1a:24:66:52:9b:68:24:16:61: c2:ac:85:b2:27:95:dd:a5:1c:f8:a4:1f:10:0e:14: 2d:d4:d7:a0:ba:1f:c7:12:e2:2a:78:4c:a2:c9:19: e4:48:b0:e9:88:0a:03:a7:b7:d9:74:fc:68:34:02: 0d:77:0f:61:de:32:c7:5a:87:83:78:7c:a4:32:18: 0e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.94.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39864 Signature Algorithm: sha256WithRSAEncryption 82:44:58:00:bd:e5:ab:ba:04:1c:13:16:48:b3:44:2f:17:07: 4d:52:7d:3e:ea:89:f5:57:fa:13:49:39:17:52:66:95:73:70: a4:96:97:99:2a:24:84:d4:f5:cd:9e:95:c9:0c:52:0f:96:8e: 27:e7:f9:d1:5d:74:d2:68:2e:bf:40:3f:9f:d1:f9:f8:25:fa: 69:30:51:da:b9:e0:15:c5:c7:31:ab:61:ff:46:7b:0e:15:1d: 7d:d1:2f:b5:35:77:21:76:8e:a5:ef:b3:ee:91:d6:fa:eb:6a: 30:89:ad:8c:b0:2f:c4:b0:af:00:56:2f:5e:b9:37:a2:89:f9: 8a:ca:25:f9:a2:19:5e:4d:b2:48:60:4e:11:12:e0:ef:9b:ee: cf:b0:64:af:90:35:6f:75:16:c5:c7:b7:b3:8e:a2:ea:1f:c7: 39:40:1d:f1:76:a1:dc:65:0a:95:d8:2a:a0:c8:7f:ce:5e:c3: 2d:a0:db:dd:ad:3d:fd:ba:77:d6:a2:02:a4:f8:12:f3:e6:f8: cb:79:04:17:97:4c:eb:cd:76:40:0b:d9:6f:f3:90:0f:3c:33: 51:45:f6:38:ad:95:e6:11:90:b3:26:7f:93:4e:e6:df:77:99: 6b:b0:a7:9b:fa:9d:09:09:ae:fa:80:ab:39:74:58:2f:67:5d: b6:2d:ab:26 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+N054dWLSUMuMH68Y/jU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTkxNmJlN2U2M2NmZDhjOGI3N2MwNTg4ZDEyNjk0ZjE2YjE0Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGXr/qL0Fgw7A3IBsqRKkWb6S2o1 vtdyYeVcXqKoLtZIRWNvvbOflbV2l4vrvYaPP2I9749NPWgLk6I2LOkQgHFEIbbm hGxirShI76SlUwPeNbtxUdb4RKMbCasbrmTJuZFeNojAa+N7k9cB4UaUm3hHCfWp J9eBEL4zf1juewWALWJzJcx6sDBUSfUPI2CSY4WSnp/fOkxKPPA97YeIj4f2Tnd9 Hmkn3eOoKL9zk+Gl2TuR+OQo8UYaJGZSm2gkFmHCrIWyJ5XdpRz4pB8QDhQt1Neg uh/HEuIqeEyiyRnkSLDpiAoDp7fZdPxoNAINdw9h3jLHWoeDeHykMhgOZwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzU3ZmIx NC1kNzA1LTQwNTUtODA0NS1iY2EyMzQ4MjlmNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvNTdmYjE0 LWQ3MDUtNDA1NS04MDQ1LWJjYTIzNDgyOWY0OC8xL2haRnI1LVk4X1l5TGQ4Qllq UkpwVHhheFROby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+heMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCbuDANBgkqhkiG9w0BAQsFAAOCAQEAgkRYAL3lq7oEHBMWSLNELxcHTVJ9PuqJ 9Vf6E0k5F1JmlXNwpJaXmSokhNT1zZ6VyQxSD5aOJ+f50V100mguv0A/n9H5+CX6 aTBR2rngFcXHMath/0Z7DhUdfdEvtTV3IXaOpe+z7pHW+utqMImtjLAvxLCvAFYv Xrk3oon5isol+aIZXk2ySGBOERLg75vuz7Bkr5A1b3UWxce3s46i6h/HOUAd8Xah 3GUKldgqoMh/zl7DLaDb3a09/bp31qICpPgS8+b4y3kEF5dM6812QAvZb/OQDzwz UUX2OK2V5hGQsyZ/k07m33eZa7Cnm/qdCQmu+oCrOXRYL2ddti2rJg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:34 2026 by rpki-client