This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer File: hZjLxOjf8YUkBKmSddIwpWERBV8.cer (raw, json) Hash identifier: /dfVQkxCS88e7Z0YF5nvAaWcr7EnbqwBtOxMmPGATrI= Subject key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F856D0CC117DE352C9E22932834C9A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.212.67.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6d:0c:c1:17:de:35:2c:9e:22:93:28:34:c9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8598cbc4e8dff1852404a99275d230a56111055f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:97:66:e6:66:a1:53:8a:87:1f:31:5e:0e: 6c:4c:74:63:89:00:ee:84:b4:0c:83:2b:de:e2:be: b4:8b:cc:bc:5c:23:3a:f2:b1:b4:9e:33:6b:a2:df: a5:dd:d9:90:f6:6b:f2:57:66:1d:52:12:79:a1:1f: c0:89:ae:8f:41:d8:c9:39:b6:61:02:a6:fd:f6:8c: b7:95:12:92:c8:59:d1:81:de:c7:2e:30:49:57:09: 34:24:ca:4c:df:6f:79:c6:08:23:64:3f:90:b7:ae: a4:f0:64:4d:2f:4a:5d:13:9b:0f:16:68:e9:fa:06: dd:4d:c8:fa:01:ed:fe:cd:21:48:67:9b:fd:1f:ce: 79:99:bc:11:18:0e:29:1c:af:59:63:7b:df:70:22: 9f:4b:13:a1:4f:e1:71:90:38:d4:6f:99:96:83:a0: d0:b2:4b:ca:51:d9:ff:f1:f1:a1:c6:28:27:fe:f1: f9:d9:a6:cb:28:42:96:97:28:74:6e:83:c2:d7:60: e6:61:ab:06:60:3b:0f:9d:49:bb:92:06:66:af:f2: 0e:98:74:ab:6f:32:05:32:85:cc:5f:7f:43:ef:1d: 5c:e3:8a:cd:23:25:ee:4a:46:68:a6:61:77:31:e9: b3:62:52:91:f0:2e:f1:6b:62:62:e3:1d:1f:1d:3f: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.67.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:82:6c:f2:a1:55:e0:59:17:d6:35:df:46:22:d9:a6:ee:e8: 5b:e9:be:68:a6:08:a1:f5:04:fd:3b:ed:dc:63:9e:72:6d:48: ed:76:5a:1e:14:93:1a:40:4d:32:2d:43:05:6d:55:be:29:d5: 18:b7:07:3b:70:5e:96:98:5c:69:53:82:9f:b5:3a:bc:9a:f3: fd:1d:ef:74:53:14:77:6c:b3:87:89:0b:40:56:62:a3:a2:0c: 2e:66:78:21:d6:ae:d9:47:f7:24:67:62:35:6f:fe:2e:27:fd: 1e:3b:2a:a5:cd:94:8c:4b:31:d5:fb:d0:38:49:dd:2e:65:e9: 8f:48:a7:ae:eb:15:5e:66:d8:75:10:ec:a2:2c:ce:55:01:cb: fc:25:f4:1d:9e:9a:18:f9:57:e8:93:54:83:c0:cf:81:90:d7: 64:ab:57:c7:cf:94:31:cb:b0:d1:e2:f5:cf:d1:8b:b8:0c:05: 14:7b:0c:d9:44:ed:31:b7:02:99:41:2d:81:a5:7a:b4:65:8e: 05:ac:60:48:5c:80:fb:7a:bd:87:f4:75:ba:33:fe:8e:73:20: a0:85:ed:99:74:0d:79:b0:9f:10:14:e3:cd:bd:c1:f7:c7:8f: d1:d5:7b:f2:30:8e:28:9b:aa:42:95:c7:39:07:e6:a3:20:d9: e1:7e:a8:64 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/hW0MwRfeNSyeIpMoNMmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTk4Y2JjNGU4ZGZmMTg1MjQwNGE5OTI3NWQyMzBhNTYxMTEwNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo2XZuZmoVOKhx8xXg5sTHRjiQDu hLQMgyve4r60i8y8XCM68rG0njNrot+l3dmQ9mvyV2YdUhJ5oR/Aia6PQdjJObZh Aqb99oy3lRKSyFnRgd7HLjBJVwk0JMpM3295xggjZD+Qt66k8GRNL0pdE5sPFmjp +gbdTcj6Ae3+zSFIZ5v9H855mbwRGA4pHK9ZY3vfcCKfSxOhT+FxkDjUb5mWg6DQ skvKUdn/8fGhxign/vH52abLKEKWlyh0boPC12DmYasGYDsPnUm7kgZmr/IOmHSr bzIFMoXMX39D7x1c44rNIyXuSkZopmF3MemzYlKR8C7xa2Ji4x0fHT/uFQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIWYy8To3/GFJASpknXSMKVhEQVfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzA0OWFi Mi05MjI2LTRiNDAtYWI4YS01MWU0YTVlYWZjOGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMDQ5YWIy LTkyMjYtNGI0MC1hYjhhLTUxZTRhNWVhZmM4ZS8xL2haakx4T2pmOFlVa0JLbVNk ZEl3cFdFUkJWOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9RDMA0GCSqGSIb3DQEBCwUAA4IBAQCOgmzy oVXgWRfWNd9GItmm7uhb6b5opgih9QT9O+3cY55ybUjtdloeFJMaQE0yLUMFbVW+ KdUYtwc7cF6WmFxpU4KftTq8mvP9He90UxR3bLOHiQtAVmKjogwuZngh1q7ZR/ck Z2I1b/4uJ/0eOyqlzZSMSzHV+9A4Sd0uZemPSKeu6xVeZth1EOyiLM5VAcv8JfQd npoY+Vfok1SDwM+BkNdkq1fHz5Qxy7DR4vXP0Yu4DAUUewzZRO0xtwKZQS2BpXq0 ZY4FrGBIXID7er2H9HW6M/6OcyCghe2ZdA15sJ8QFOPNvcH3x4/R1XvyMI4om6pC lcc5B+ajINnhfqhk -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:39 2026 by rpki-client