This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer File: hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer (raw, json) Hash identifier: fwYW2HNbsZ2mXPGya/iwPkCEONw7co+8sHBzUlvwfTA= Subject key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82E0F403D8878CA6BE7C6CD48FA015 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56992 IP: 185.153.112.0/22 IP: 2a07:8680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e0:f4:03:d8:87:8c:a6:be:7c:6c:d4:8f:a0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8618b054d20dfdc9c5493c52c86234774904be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:97:35:a8:42:af:75:5a:26:1a:c7:ab:82: 74:44:6a:91:ed:13:6e:cc:d5:c6:e2:5a:ab:03:57: fc:5e:a7:65:b2:78:9b:c1:27:dc:05:47:e6:ae:c2: 5b:94:4f:19:9f:2b:93:b7:dc:1f:cb:de:ec:be:35: 6b:85:ca:3e:54:46:8c:8a:10:87:2a:1e:b3:d1:03: f7:a5:87:db:f9:33:46:2e:8e:8c:75:17:a9:d8:e7: 6d:56:44:c2:89:ff:88:31:96:bf:a2:9b:da:14:f2: 03:73:f0:5b:6c:08:a5:02:a1:4b:86:0b:dd:e7:8a: ee:c1:45:bc:03:73:9f:c4:ab:c9:81:6a:3e:b8:57: 2b:3b:4e:db:13:a0:b2:6c:80:91:69:35:a8:67:e4: 24:a5:42:67:bb:89:4b:33:dc:cd:e4:bc:76:48:c4: 8c:6c:a9:63:f8:b3:fe:52:fc:da:17:5c:07:c0:2d: 8d:7d:d7:35:7b:d2:33:e5:aa:d6:06:f6:7b:0d:14: 1e:f5:ff:7d:4f:97:b3:94:b4:a0:cf:2f:c7:90:09: c4:6a:62:bd:89:0a:72:47:58:64:f9:18:86:af:5e: e2:9e:32:0f:d3:e9:22:ac:6a:4e:92:9e:58:14:70: f5:3d:15:5d:0e:47:72:95:36:67:fe:6b:f7:49:32: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.112.0/22 IPv6: 2a07:8680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56992 Signature Algorithm: sha256WithRSAEncryption a6:ef:cc:08:c2:2d:67:75:4e:b5:47:61:6a:99:87:6c:1c:30: f5:2b:0a:3c:6d:19:fa:53:93:49:3b:f3:1d:93:f3:9e:fb:52: b2:bc:d6:5f:b9:20:bb:0b:2a:8e:10:a5:e5:e4:a2:a7:4a:61: 80:cd:ef:81:69:df:79:eb:d2:44:1f:11:da:28:6f:c3:69:37: 31:28:99:4e:b1:e2:b5:86:04:48:46:ad:ca:c3:23:f8:64:e4: c5:8d:ac:5e:94:3a:d0:30:cf:13:4b:f2:34:b8:d3:a3:c4:99: 5b:c7:9d:47:4d:ae:9c:c2:5f:d9:6c:05:3f:df:f4:ae:44:ca: 29:68:0e:b7:71:10:fb:0b:60:2f:f7:86:fc:4f:5e:a9:0f:79: cc:fa:ed:29:b9:a6:26:0d:88:79:e4:58:93:46:75:88:85:e4: aa:7c:66:b2:8e:d4:3c:1d:fe:38:e8:f9:cb:7e:de:3f:4c:1a: a6:87:04:9a:82:94:0a:cd:d4:4b:d4:64:0d:3f:3a:25:ff:22: 6e:7a:5a:71:15:8b:95:46:9b:64:b6:22:39:34:88:4c:3a:b2: 0d:73:e4:0a:e9:4f:11:aa:5e:44:7b:02:55:ad:a4:63:6c:24: 09:d7:b6:6e:13:34:0d:95:80:af:b2:db:34:0e:75:ad:a5:38: 5b:cb:f8:0c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/guD0A9iHjKa+fGzUj6AVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjE4YjA1NGQyMGRmZGM5YzU0OTNjNTJjODYyMzQ3NzQ5MDRiZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpKXNahCr3VaJhrHq4J0RGqR7RNu zNXG4lqrA1f8XqdlsnibwSfcBUfmrsJblE8ZnyuTt9wfy97svjVrhco+VEaMihCH Kh6z0QP3pYfb+TNGLo6MdRep2OdtVkTCif+IMZa/opvaFPIDc/BbbAilAqFLhgvd 54ruwUW8A3OfxKvJgWo+uFcrO07bE6CybICRaTWoZ+QkpUJnu4lLM9zN5Lx2SMSM bKlj+LP+UvzaF1wHwC2Nfdc1e9Iz5arWBvZ7DRQe9f99T5ezlLSgzy/HkAnEamK9 iQpyR1hk+RiGr17injIP0+kirGpOkp5YFHD1PRVdDkdylTZn/mv3STJnSQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIYYsFTSDf3JxUk8UshiNHdJBL53MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkL2Y3ZjE3 Yy1jMjdkLTQwOGYtOTljMS1jNDczNmNhNWMyNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvZjdmMTdj LWMyN2QtNDA4Zi05OWMxLWM0NzM2Y2E1YzI1YS8xL2hoaXdWTklOX2NuRlNUeFN5 R0kwZDBrRXZuYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZlwMA0EAgACMAcDBQMqB4aAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDeoDANBgkqhkiG9w0BAQsFAAOCAQEApu/MCMItZ3VO tUdhapmHbBww9SsKPG0Z+lOTSTvzHZPznvtSsrzWX7kguwsqjhCl5eSip0phgM3v gWnfeevSRB8R2ihvw2k3MSiZTrHitYYESEatysMj+GTkxY2sXpQ60DDPE0vyNLjT o8SZW8edR02unMJf2WwFP9/0rkTKKWgOt3EQ+wtgL/eG/E9eqQ95zPrtKbmmJg2I eeRYk0Z1iIXkqnxmso7UPB3+OOj5y37eP0wapocEmoKUCs3US9RkDT86Jf8ibnpa cRWLlUabZLYiOTSITDqyDXPkCulPEapeRHsCVa2kY2wkCde2bhM0DZWAr7LbNA51 raU4W8v4DA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:36 2026 by rpki-client