This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer File: hjT51JOsy2gJAPRHofLJ97KzWKw.cer (raw, json) Hash identifier: NjxAgV2VPCHSpAn6zrkA3pzq26ljU9cZYPuXHQ+ArT8= Subject key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB6BC4C85076FC4A41E7966E33C1FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204038 IP: 85.204.39.0/24 IP: 185.115.176.0/22 IP: 2a02:74a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6b:c4:c8:50:76:fc:4a:41:e7:96:6e:33:c1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:b3:1a:67:20:68:54:82:ea:54:a5:85:63: bd:f9:b5:0d:7f:3e:f1:d9:b3:18:a6:e9:d8:2a:61: 98:6a:e9:06:1d:05:0a:86:62:74:62:4c:ec:19:fd: 5e:19:42:42:ce:f9:c8:80:11:00:0c:5f:3a:0b:88: 59:f8:18:9c:bd:a6:6e:3b:e9:53:31:19:ac:73:27: 00:cc:18:0d:47:a1:f9:77:53:26:95:0a:35:a2:7d: 91:e1:fa:56:ce:ce:c4:64:6b:ea:11:40:73:89:2b: 3e:07:91:24:b9:37:56:01:22:fc:14:d5:17:b6:54: 61:81:a9:1d:7b:0d:ec:91:1b:f8:f2:ff:49:f8:cc: 10:5f:ea:06:e4:8d:dd:f7:d1:f8:f1:b5:d5:72:ae: 99:1d:dd:ce:ef:77:5c:37:cd:80:34:8e:dd:69:88: 79:3e:be:73:b7:a6:01:7c:0e:f5:57:0a:9b:d9:d4: 26:c9:82:46:e3:d5:89:0a:60:81:85:74:90:62:ed: 1b:d4:ac:ea:47:b5:5d:e1:9e:84:b6:bc:00:c5:85: a3:70:35:9a:e7:54:75:f8:f0:8f:58:cc:a9:69:3a: 8d:4e:7d:07:3e:03:0c:24:79:e8:bd:41:c3:47:de: 9b:7a:e2:f2:09:77:2f:37:5e:16:ed:0c:f1:29:0a: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.39.0/24 185.115.176.0/22 IPv6: 2a02:74a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204038 Signature Algorithm: sha256WithRSAEncryption 70:ea:ab:ab:e8:35:63:47:66:99:47:4d:68:1f:c2:b8:14:4c: c7:53:6b:73:a7:51:a6:11:70:2f:c2:4f:68:fc:c5:83:3b:e7: 0d:b4:a7:97:b4:33:04:4e:68:6d:b4:31:4f:95:ad:af:e7:ee: 2b:a1:17:13:c9:0c:00:1b:61:97:8b:2b:bc:e1:24:74:5d:69: a8:a4:7d:bb:5f:22:04:3a:bf:30:5e:d7:ad:8c:e4:7d:a5:d9: 29:f6:31:76:9e:1f:c4:49:83:d5:a5:e6:4e:bb:07:b6:29:b9: c9:4e:57:94:91:44:ac:22:61:9b:3d:39:32:4c:04:29:7a:bc: e9:3d:46:e8:20:2b:2f:3d:9c:57:5d:1f:ab:82:74:f4:02:65: e4:f0:5f:d0:21:5a:50:5f:cd:a3:3d:c4:2c:ff:d3:a8:d0:de: 23:0b:20:7f:82:10:d2:dc:c7:32:e4:ff:fe:4c:00:89:58:fb: 5f:f8:48:fe:ee:b8:60:92:21:cb:7f:4f:32:36:70:96:2f:d1: 4b:2c:e5:a1:cf:ad:dc:20:17:b3:ec:6f:35:aa:65:d4:6b:1e: c0:ee:ce:e1:f1:84:46:46:44:df:bd:27:96:0a:e3:33:74:2e: 49:2f:5f:f4:61:9e:aa:1d:aa:f9:0b:09:49:d3:57:56:f7:b8: d0:73:51:ca -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt262vEyFB2/EpB55ZuM8H/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjM0ZjlkNDkzYWNjYjY4MDkwMGY0NDdhMWYyYzlmN2IyYjM1OGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH2zGmcgaFSC6lSlhWO9+bUNfz7x 2bMYpunYKmGYaukGHQUKhmJ0YkzsGf1eGUJCzvnIgBEADF86C4hZ+BicvaZuO+lT MRmscycAzBgNR6H5d1MmlQo1on2R4fpWzs7EZGvqEUBziSs+B5EkuTdWASL8FNUX tlRhgakdew3skRv48v9J+MwQX+oG5I3d99H48bXVcq6ZHd3O73dcN82ANI7daYh5 Pr5zt6YBfA71Vwqb2dQmyYJG49WJCmCBhXSQYu0b1KzqR7Vd4Z6EtrwAxYWjcDWa 51R1+PCPWMypaTqNTn0HPgMMJHnovUHDR96beuLyCXcvN14W7QzxKQpxzQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIY0+dSTrMtoCQD0R6Hyyfeys1isMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzUzMDI1 NS1iNmU1LTQ1ZmMtYjc3Ni1iNDMwYmQyMWEyOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvNTMwMjU1 LWI2ZTUtNDVmYy1iNzc2LWI0MzBiZDIxYTI5Yi8xL2hqVDUxSk9zeTJnSkFQUkhv ZkxKOTdLeldLdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAVcwnAwQCuXOwMA0EAgACMAcDBQAqAnSgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdBjANBgkqhkiG9w0BAQsFAAOCAQEAcOqr q+g1Y0dmmUdNaB/CuBRMx1Nrc6dRphFwL8JPaPzFgzvnDbSnl7QzBE5obbQxT5Wt r+fuK6EXE8kMABthl4srvOEkdF1pqKR9u18iBDq/MF7XrYzkfaXZKfYxdp4fxEmD 1aXmTrsHtim5yU5XlJFErCJhmz05MkwEKXq86T1G6CArLz2cV10fq4J09AJl5PBf 0CFaUF/Noz3ELP/TqNDeIwsgf4IQ0tzHMuT//kwAiVj7X/hI/u64YJIhy39PMjZw li/RSyzloc+t3CAXs+xvNapl1GsewO7O4fGERkZE370nlgrjM3QuSS9f9GGeqh2q +QsJSdNXVve40HNRyg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:37 2026 by rpki-client