This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer File: he1PzEWWTU6nL8RJLE15VxMyEMM.cer (raw, json) Hash identifier: hTyYvnqNuXu+FCRYL14qN4lOBi9F7GyPcK/txvQnMwI= Subject key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6D16F48F97DE400E771615539B1DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208847 IP: 45.82.232.0/22 IP: 2a0e:7680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d1:6f:48:f9:7d:e4:00:e7:71:61:55:39:b1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:e2:d3:b8:7f:e2:7b:4f:9c:50:bb:81:a0: 55:a2:38:14:d5:57:af:ae:fa:b9:9e:a2:49:4e:89: 5f:9d:92:e0:a2:cc:60:3f:f7:20:0b:43:3b:5b:14: 7f:39:34:4d:3f:0b:9d:10:85:d0:d0:ad:96:0a:e6: 09:ae:c7:e3:d8:b0:f5:71:95:8e:66:49:f3:31:9d: 5c:ad:6e:c4:b5:78:be:2b:43:91:bb:5c:a8:4f:2d: b4:d0:0b:80:27:b5:9e:16:bf:60:c4:1e:fa:94:4f: 17:78:57:7f:27:76:5b:1c:64:0a:d4:fe:ce:1f:d6: d1:b2:84:d0:35:bd:27:30:9a:93:fd:0b:6b:22:86: b0:fb:52:50:2d:07:6d:89:6a:9e:59:65:90:8f:16: 0c:02:d9:75:e8:69:95:0a:db:38:69:9f:95:ee:69: 65:de:a3:2c:67:86:32:60:e6:32:fd:f9:54:4f:e1: 5a:18:f0:99:72:f5:b5:2d:5c:b7:91:f5:c9:33:7f: cf:c7:ce:97:f7:e7:9a:09:30:c9:82:54:58:66:87: d8:17:dc:83:a2:9b:93:6a:af:2f:f7:d0:0d:02:70: cc:fb:45:05:27:9b:96:0a:5a:ab:f1:5b:b1:9e:43: 1a:40:cb:ff:cb:05:b0:71:57:2b:40:18:9b:a1:39: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.232.0/22 IPv6: 2a0e:7680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208847 Signature Algorithm: sha256WithRSAEncryption 05:e6:d9:39:90:9e:ac:47:dc:90:b8:95:f3:b5:b9:e4:ea:1f: a4:4b:f9:49:91:7b:fd:ff:83:be:d1:67:dd:6a:5e:02:9f:e8: 49:d3:3a:24:f1:d9:bd:b1:ff:fe:2d:b9:a9:57:02:4e:a0:e3: e7:23:87:48:73:9f:87:49:c4:49:a2:ed:a7:df:bf:ae:69:41: 1a:32:3b:8a:9b:c4:53:f9:d8:8e:ac:26:b2:bd:ee:6d:cb:b8: 86:d0:b6:c7:dc:66:d4:bd:a7:55:80:21:7a:31:4c:d1:b3:36: 4d:1e:19:7e:77:ad:26:ba:11:e0:2d:90:4c:05:3d:ca:b0:3e: a6:a6:e6:01:b1:da:e9:cc:4e:b6:ab:fb:45:09:00:42:81:4d: 89:c2:f5:54:1f:8f:07:f0:40:33:f7:a5:e4:32:92:ed:02:7a: 6f:b3:bf:5e:77:16:12:c4:ac:d5:b0:fd:bd:d8:05:17:76:4e: 02:2f:1a:7a:06:93:e6:65:55:c6:1f:72:da:71:46:3c:60:c2: 36:19:5a:0d:79:98:de:6c:a5:43:82:bc:73:22:3d:04:cb:7c: 91:49:23:23:21:58:1c:8b:10:f8:da:24:0f:fe:e9:3c:9d:9f: 75:b3:2a:d5:dc:b7:e0:46:2b:37:0b:45:ef:cd:97:97:f8:e5: 47:ac:ef:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+ptFvSPl95ADncWFVObHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWVkNGZjYzQ1OTY0ZDRlYTcyZmM0NDkyYzRkNzk1NzEzMzIxMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGvi07h/4ntPnFC7gaBVojgU1Vev rvq5nqJJTolfnZLgosxgP/cgC0M7WxR/OTRNPwudEIXQ0K2WCuYJrsfj2LD1cZWO ZknzMZ1crW7EtXi+K0ORu1yoTy200AuAJ7WeFr9gxB76lE8XeFd/J3ZbHGQK1P7O H9bRsoTQNb0nMJqT/QtrIoaw+1JQLQdtiWqeWWWQjxYMAtl16GmVCts4aZ+V7mll 3qMsZ4YyYOYy/flUT+FaGPCZcvW1LVy3kfXJM3/Px86X9+eaCTDJglRYZofYF9yD opuTaq8v99ANAnDM+0UFJ5uWClqr8VuxnkMaQMv/ywWwcVcrQBiboTlwKQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIXtT8xFlk1Opy/ESSxNeVcTMhDDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2NhNDYw ZS02NjM1LTQ4MWItYjZlOS1mODVhN2NiMWQxOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvY2E0NjBl LTY2MzUtNDgxYi1iNmU5LWY4NWE3Y2IxZDE5Mi8xL2hlMVB6RVdXVFU2bkw4UkpM RTE1VnhNeUVNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVLoMA0EAgACMAcDBQMqDnaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvzzANBgkqhkiG9w0BAQsFAAOCAQEABebZOZCerEfc kLiV87W55OofpEv5SZF7/f+DvtFn3WpeAp/oSdM6JPHZvbH//i25qVcCTqDj5yOH SHOfh0nESaLtp9+/rmlBGjI7ipvEU/nYjqwmsr3ubcu4htC2x9xm1L2nVYAhejFM 0bM2TR4ZfnetJroR4C2QTAU9yrA+pqbmAbHa6cxOtqv7RQkAQoFNicL1VB+PB/BA M/el5DKS7QJ6b7O/XncWEsSs1bD9vdgFF3ZOAi8aegaT5mVVxh9y2nFGPGDCNhla DXmY3mylQ4K8cyI9BMt8kUkjIyFYHIsQ+NokD/7pPJ2fdbMq1dy34EYrNwtF782X l/jlR6zvHA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:53 2026 by rpki-client