This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer File: heFWexaBgzyUSl8mQKngO-jvC_Q.cer (raw, json) Hash identifier: ytZ6tFKZE3ZS/B+V/fPJtBQaVWRVu07aQVauyv67CXc= Subject key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84EDFED0408C886E001F77CD5A1F47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42334 IP: 77.235.128.0/19 IP: 185.131.36.0/22 IP: 2a02:4180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ed:fe:d0:40:8c:88:6e:00:1f:77:cd:5a:1f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:39:74:d6:80:bc:cf:d3:64:8d:5a:4c:ac: c5:42:40:5a:7d:b5:a0:f4:a0:9b:de:8b:44:d4:30: e3:ce:44:aa:e5:04:96:98:1f:c8:35:23:3d:ec:1d: 3e:6d:8f:b4:bb:1e:de:e8:8a:36:bd:3a:0e:17:1f: a4:a2:75:ad:bc:8f:9f:9a:62:2a:12:33:30:c6:4e: 4e:d0:01:79:d3:d1:37:0a:b6:83:57:45:15:71:3b: 2a:2d:3f:fc:33:94:05:d6:b5:c5:d1:d7:c9:c9:3f: 65:46:6d:08:37:7f:b7:86:dc:a5:05:5b:c0:d7:81: 09:b2:28:58:8b:70:c2:86:ba:e7:ba:be:20:fe:87: 34:3c:26:4f:2c:54:ce:3d:43:9c:03:dc:bc:f6:8e: 48:b8:6d:57:43:e5:6d:43:14:be:03:59:31:fe:8b: b6:0d:cd:c5:a1:66:30:b1:54:15:c4:ba:b9:a3:59: 22:cf:1f:f4:f0:c7:de:00:47:3f:bc:2b:cf:d3:ff: 56:87:92:90:5d:8d:4c:16:13:50:98:25:57:be:6e: 35:49:6c:73:31:4b:f4:b2:2d:68:17:7c:a9:5b:0d: fa:f8:12:9c:bd:70:d7:de:f6:77:4f:b7:51:2c:88: a9:97:eb:1f:9f:bb:58:53:33:9a:a8:97:6a:aa:3d: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.235.128.0/19 185.131.36.0/22 IPv6: 2a02:4180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42334 Signature Algorithm: sha256WithRSAEncryption 3e:6c:37:0d:b8:7c:6e:bc:20:8f:f8:c9:af:9a:50:74:0d:71: 96:2f:75:9e:cf:2c:cb:15:f2:11:00:78:b5:9c:93:77:72:99: 8a:55:06:7f:2b:a6:5c:44:7d:a5:ea:b2:cb:35:ba:7e:b8:e7: 07:64:03:38:03:b0:fe:6b:92:03:97:38:dd:9e:64:82:88:aa: 1c:e9:8c:0e:90:9e:69:ed:b0:c4:49:ed:72:5b:a4:0c:bf:c1: 4c:3b:35:62:4f:61:fa:7e:c4:92:0e:42:b6:a8:0c:3a:43:85: ac:c1:ec:0c:7b:ac:80:ca:ad:80:fa:2e:a1:25:3f:da:fa:86: 47:d9:61:bf:00:c8:2b:73:a0:7f:e0:b0:dd:bf:62:c5:ee:54: b2:e7:8a:50:06:0d:14:36:93:e8:3e:0d:87:77:1f:04:26:1b: 4d:90:d2:2f:e8:d4:2d:3c:4d:86:5b:8b:f3:03:c9:85:67:ad: cf:8a:fc:ee:70:a4:28:30:ba:44:57:c7:af:4c:8f:40:90:d8: ba:55:4c:5c:3e:0f:e8:73:37:6e:96:66:0a:9f:5c:b8:e6:64: c3:ce:3b:3a:9f:57:e6:69:aa:0d:5a:d6:99:11:2b:43:b2:9b: 7f:fd:bf:95:4e:04:50:73:73:75:62:dd:dc:83:42:90:17:e1: 10:64:6b:78 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/hO3+0ECMiG4AH3fNWh9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWUxNTY3YjE2ODE4MzNjOTQ0YTVmMjY0MGE5ZTAzYmU4ZWYwYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNQ5dNaAvM/TZI1aTKzFQkBafbWg 9KCb3otE1DDjzkSq5QSWmB/INSM97B0+bY+0ux7e6Io2vToOFx+konWtvI+fmmIq EjMwxk5O0AF509E3CraDV0UVcTsqLT/8M5QF1rXF0dfJyT9lRm0IN3+3htylBVvA 14EJsihYi3DChrrnur4g/oc0PCZPLFTOPUOcA9y89o5IuG1XQ+VtQxS+A1kx/ou2 Dc3FoWYwsVQVxLq5o1kizx/08MfeAEc/vCvP0/9Wh5KQXY1MFhNQmCVXvm41SWxz MUv0si1oF3ypWw36+BKcvXDX3vZ3T7dRLIipl+sfn7tYUzOaqJdqqj0LqwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIXhVnsWgYM8lEpfJkCp4Dvo7wv0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2RmNDk0 NS1mNTMyLTRhMDEtYTdmYS01M2E5OThkZTYzZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvZGY0OTQ1 LWY1MzItNGEwMS1hN2ZhLTUzYTk5OGRlNjNlMy8xL2hlRldleGFCZ3p5VVNsOG1R S25nTy1qdkNfUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFTeuAAwQCuYMkMA0EAgACMAcDBQAqAkGAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwClXjANBgkqhkiG9w0BAQsFAAOCAQEAPmw3 Dbh8brwgj/jJr5pQdA1xli91ns8syxXyEQB4tZyTd3KZilUGfyumXER9peqyyzW6 frjnB2QDOAOw/muSA5c43Z5kgoiqHOmMDpCeae2wxEntclukDL/BTDs1Yk9h+n7E kg5CtqgMOkOFrMHsDHusgMqtgPouoSU/2vqGR9lhvwDIK3Ogf+Cw3b9ixe5UsueK UAYNFDaT6D4Nh3cfBCYbTZDSL+jULTxNhluL8wPJhWetz4r87nCkKDC6RFfHr0yP QJDYulVMXD4P6HM3bpZmCp9cuOZkw847Op9X5mmqDVrWmRErQ7Kbf/2/lU4EUHNz dWLd3INCkBfhEGRreA== -----END CERTIFICATE-----Generated at Tue Jan 27 18:49:36 2026 by rpki-client