This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hesz_RfSMvvmsq22bLCv4N7pA7A.cer File: hesz_RfSMvvmsq22bLCv4N7pA7A.cer (raw, json) Hash identifier: ixTSeWAX8Sdz2y0anGtldT+Gw5RJODy5byVhj0J+JUM= Subject key identifier: 85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775918C935741A629923FCA3DD21806D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35200 IP: 176.123.62.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:18:c9:35:74:1a:62:99:23:fc:a3:dd:21:80:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85eb33fd17d232fbe6b2adb66cb0afe0dee903b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:d4:35:dc:b9:32:b8:af:e9:ab:3e:66:19: 4c:5b:3d:b3:ba:a5:c2:6f:cf:2f:24:54:cc:6c:7b: 7a:b6:05:48:ad:9c:48:a7:f8:99:2a:d3:03:ad:3e: cb:65:c8:c2:e1:8d:7f:b7:76:f3:ec:71:f3:a3:7f: 5d:6b:0b:92:22:bd:8f:c1:49:2c:2e:b8:28:f7:49: ef:00:19:10:ea:ea:ed:95:e6:f5:32:a4:7d:36:71: f4:f6:21:05:54:89:bd:da:13:a1:69:2c:f7:0a:97: 15:c7:7f:b3:89:95:68:63:33:db:7b:c1:99:11:5f: 31:3d:28:4f:24:b7:35:dc:53:12:aa:51:62:c2:01: af:04:73:02:c3:88:d0:59:85:61:b5:21:02:76:f6: be:94:2f:96:79:25:de:17:94:44:9e:df:2d:c2:16: c2:0f:3c:3b:8a:e4:f8:bb:86:cc:e3:03:49:da:82: 8a:01:e7:b0:3e:1f:39:42:04:7f:c8:55:57:44:a2: 78:ec:76:03:b5:ea:39:3e:3a:da:f4:3f:01:b4:ba: c0:e5:51:4d:61:67:02:c5:27:a9:16:be:b3:7f:bb: 59:3e:a8:af:9d:ad:a0:1c:91:ff:64:e3:c9:c3:5b: ba:ba:0e:5a:43:8e:7a:47:07:76:c7:b2:a0:04:1d: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.123.62.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35200 Signature Algorithm: sha256WithRSAEncryption ae:9e:d4:c9:35:48:37:2f:a1:f6:cb:af:da:5e:70:ac:40:04: 03:13:b4:31:0e:4c:bc:61:df:40:89:3a:3d:f3:21:c5:fc:d7: c2:78:02:eb:5b:aa:3f:a0:75:50:03:af:dd:40:46:4d:ac:9d: 53:1e:29:bf:2a:d4:72:cb:e0:b4:cb:47:a6:99:11:d4:2e:fd: 7b:8f:60:c9:6f:a7:26:f7:b9:cb:0c:e1:27:70:ac:8b:6e:49: 91:e5:54:65:c0:f2:66:a9:46:2e:56:70:6c:0b:6f:bb:29:ad: 9d:33:93:3b:a2:d4:4d:0e:50:f9:11:ba:40:c7:b1:61:3a:76: e2:8a:c7:66:0b:00:bf:9a:3d:29:66:ec:9b:0c:fc:95:81:c0: c2:35:4f:96:ff:2b:d5:4a:b6:95:f1:5d:c8:06:21:0e:aa:18: 5b:fe:f7:af:8a:1c:75:0f:f1:53:42:6e:8c:36:85:29:fa:e8: c4:58:c0:b9:f4:e9:0c:56:6d:54:5c:91:fa:6e:74:8c:52:b1: 47:d7:a4:45:41:7e:92:a4:73:7f:5c:a7:90:a7:51:ac:f7:37: f8:75:24:79:cf:a7:5b:8c:d4:06:b3:e5:4a:d1:61:75:cb:c1: 16:a2:93:27:d9:44:a7:3d:92:0c:fb:23:3a:cc:e2:b4:29:80: 48:09:e3:17 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WRjJNXQaYpkj/KPdIYBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWViMzNmZDE3ZDIzMmZiZTZiMmFkYjY2Y2IwYWZlMGRlZTkwM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTLUNdy5Mriv6as+ZhlMWz2zuqXC b88vJFTMbHt6tgVIrZxIp/iZKtMDrT7LZcjC4Y1/t3bz7HHzo39dawuSIr2PwUks Lrgo90nvABkQ6urtleb1MqR9NnH09iEFVIm92hOhaSz3CpcVx3+ziZVoYzPbe8GZ EV8xPShPJLc13FMSqlFiwgGvBHMCw4jQWYVhtSECdva+lC+WeSXeF5REnt8twhbC Dzw7iuT4u4bM4wNJ2oKKAeewPh85QgR/yFVXRKJ47HYDteo5Pjra9D8BtLrA5VFN YWcCxSepFr6zf7tZPqivna2gHJH/ZOPJw1u6ug5aQ456Rwd2x7KgBB1TpwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIXrM/0X0jL75rKttmywr+De6QOwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhL2NlODI0 Zi03M2M5LTQ4NWUtOGVkYy04YTM4ZWEyYjFmNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvY2U4MjRm LTczYzktNDg1ZS04ZWRjLThhMzhlYTJiMWY1NC8xL2hlc3pfUmZTTXZ2bXNxMjJi TEN2NE43cEE3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHs+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCJgDANBgkqhkiG9w0BAQsFAAOCAQEArp7UyTVINy+h9suv2l5wrEAEAxO0MQ5M vGHfQIk6PfMhxfzXwngC61uqP6B1UAOv3UBGTaydUx4pvyrUcsvgtMtHppkR1C79 e49gyW+nJve5ywzhJ3Csi25JkeVUZcDyZqlGLlZwbAtvuymtnTOTO6LUTQ5Q+RG6 QMexYTp24orHZgsAv5o9KWbsmwz8lYHAwjVPlv8r1Uq2lfFdyAYhDqoYW/73r4oc dQ/xU0JujDaFKfroxFjAufTpDFZtVFyR+m50jFKxR9ekRUF+kqRzf1ynkKdRrPc3 +HUkec+nW4zUBrPlStFhdcvBFqKTJ9lEpz2SDPsjOszitCmASAnjFw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:15 2026 by rpki-client