This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer File: hhxnvbbYwjD820J6n3G4ATWHL8I.cer (raw, json) Hash identifier: Gp0354JRrrdHwprmj/amfENw5Oc4uLAeQiAhoYDXRBU= Subject key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E254F866A861400DADD35E6CE7817 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57485 IP: 185.17.60.0/22 IP: 185.238.52.0/22 IP: 185.241.76.0/22 IP: 193.221.114.0/24 IP: 195.140.240.0/22 IP: 2a03:e0c0::/32 IP: 2a0c:2680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:25:4f:86:6a:86:14:00:da:dd:35:e6:ce:78:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:4c:c2:03:f6:0f:5c:4c:6f:c7:9a:e9:ac: 19:d4:08:31:8c:78:37:9e:96:f9:85:ef:3a:1a:e6: 95:a6:c8:99:10:ee:14:9d:da:6f:d3:50:92:2c:c4: 2d:85:83:47:d1:e4:96:36:c3:c6:7e:df:86:1c:d1: 6a:a9:4c:3d:b8:61:eb:41:ae:8a:11:7c:22:81:54: 4e:bc:69:b8:5c:88:bf:3a:13:4a:1c:4c:3d:0c:3d: 56:a6:26:be:ed:e8:fc:4c:ae:18:cd:8d:ca:dd:50: fa:69:7d:04:b6:79:fa:48:09:ae:eb:55:a9:8a:be: e8:df:5a:e9:38:ba:77:27:4b:07:0a:c7:78:27:2f: 99:e8:f1:11:24:84:a6:2d:e4:a7:35:51:88:fe:5e: b2:7a:af:7e:f4:dd:89:21:22:29:4f:5d:da:14:3d: ae:ef:d6:72:80:bd:34:c1:21:39:f8:0b:7b:57:e4: d5:0c:37:ad:57:b7:3e:33:9c:e2:26:be:a0:53:2c: ac:1e:87:5b:d2:26:e7:e3:48:46:84:b2:57:ac:d3: 64:a9:62:d9:ca:30:e4:c0:65:23:30:90:0e:b5:d5: e7:5f:fe:8a:8b:e2:23:ae:5c:89:ff:c4:67:0e:72: ec:57:88:da:8b:17:1b:26:d7:50:40:33:1a:ec:a8: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.60.0/22 185.238.52.0/22 185.241.76.0/22 193.221.114.0/24 195.140.240.0/22 IPv6: 2a03:e0c0::/32 2a0c:2680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57485 Signature Algorithm: sha256WithRSAEncryption 82:5b:28:fe:5c:6b:44:ea:56:6b:04:af:b1:84:55:ec:a9:e4: 59:6c:ce:5e:90:32:0a:59:77:65:57:6d:b9:f3:f1:16:e6:f1: 8b:2c:85:b0:a4:ec:b5:98:69:e2:be:8f:0f:34:62:3d:82:20: 2c:e7:2b:29:32:06:30:df:c6:4d:16:b1:bc:b5:2f:42:8b:f9: 9e:e6:a5:43:31:e3:5f:b3:27:77:28:a9:0f:dd:39:ba:99:b8: 17:5b:a5:52:0d:17:cc:84:cb:b4:a4:bb:81:4a:82:a6:39:c2: 4d:eb:ee:7c:cf:35:4d:5b:7c:6b:af:cd:49:aa:4f:04:3d:e8: 5c:06:84:c8:45:0f:00:3d:3b:3e:43:58:85:51:c2:39:1b:7d: 75:92:1d:59:67:e9:16:6d:4c:f2:25:12:bd:5f:6c:cf:1f:a3: 73:5d:ec:e3:04:17:08:cb:56:b0:74:23:5e:3d:7e:df:0c:4d: 76:26:29:2e:44:79:39:fa:f1:36:3e:88:d5:53:d1:d1:04:25: 26:ba:94:16:21:77:93:28:b2:cf:aa:7f:1d:88:4e:42:3f:58: 73:1e:f3:85:43:4c:6e:31:96:52:ef:28:02:1d:26:a1:4a:f4: 66:5b:d1:d0:7f:57:97:f1:4a:e3:78:29:f4:84:f2:7d:0e:da: e5:bb:95:c8 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt5fiVPhmqGFADa3TXmzngXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjFjNjdiZGI2ZDhjMjMwZmNkYjQyN2E5ZjcxYjgwMTM1ODcyZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRRMwgP2D1xMb8ea6awZ1AgxjHg3 npb5he86GuaVpsiZEO4Undpv01CSLMQthYNH0eSWNsPGft+GHNFqqUw9uGHrQa6K EXwigVROvGm4XIi/OhNKHEw9DD1Wpia+7ej8TK4YzY3K3VD6aX0Etnn6SAmu61Wp ir7o31rpOLp3J0sHCsd4Jy+Z6PERJISmLeSnNVGI/l6yeq9+9N2JISIpT13aFD2u 79ZygL00wSE5+At7V+TVDDetV7c+M5ziJr6gUyysHodb0ibn40hGhLJXrNNkqWLZ yjDkwGUjMJAOtdXnX/6Ki+IjrlyJ/8RnDnLsV4jaixcbJtdQQDMa7KgMfQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFIYcZ7222MIw/NtCep9xuAE1hy/CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzhhMTE1 Yi0zODU5LTQ3NTktODVhZS1mYjg1M2M2NTMzNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvOGExMTVi LTM4NTktNDc1OS04NWFlLWZiODUzYzY1MzM0YS8xL2hoeG52YmJZd2pEODIwSjZu M0c0QVRXSEw4SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQCuRE8AwQCue40AwQCufFMAwQAwd1yAwQCw4zw MBQEAgACMA4DBQAqA+DAAwUDKgwmgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA 4I0wDQYJKoZIhvcNAQELBQADggEBAIJbKP5ca0TqVmsEr7GEVeyp5Flszl6QMgpZ d2VXbbnz8Rbm8YsshbCk7LWYaeK+jw80Yj2CICznKykyBjDfxk0Wsby1L0KL+Z7m pUMx41+zJ3coqQ/dObqZuBdbpVINF8yEy7Sku4FKgqY5wk3r7nzPNU1bfGuvzUmq TwQ96FwGhMhFDwA9Oz5DWIVRwjkbfXWSHVln6RZtTPIlEr1fbM8fo3Nd7OMEFwjL VrB0I149ft8MTXYmKS5EeTn68TY+iNVT0dEEJSa6lBYhd5Moss+qfx2ITkI/WHMe 84VDTG4xllLvKAIdJqFK9GZb0dB/V5fxSuN4KfSE8n0O2uW7lcg= -----END CERTIFICATE-----Generated at Tue Jan 27 01:28:54 2026 by rpki-client