This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer (raw, json) Hash identifier: ObR3tqTEVh1jO7KMkKOhb53OloFtL7Ng06OCcN6jhQg= Subject key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12426586933AFB71C343C7B41A6C5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44832 IP: 159.255.147.0/24 IP: 185.148.92.0/22 IP: 199.255.112.0/22 IP: 206.225.20.0/22 IP: 212.24.116.0/22 IP: 2a0d:d100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:42:65:86:93:3a:fb:71:c3:43:c7:b4:1a:6c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:c1:72:1e:df:90:36:ea:9f:28:9c:0e:d6: 30:17:6b:d5:11:5f:f1:33:ce:f7:a3:7a:e2:20:f6: 42:b4:cb:2e:60:ea:b6:3d:3d:0c:15:a1:d7:b1:72: 2e:9a:26:7f:e8:8c:b2:57:2d:eb:56:0a:b7:af:f4: 6b:51:10:5a:b2:e1:65:a2:53:fd:fd:d1:79:f6:e3: 56:8a:3a:ec:2d:e1:16:9c:9f:de:44:df:b1:df:11: 80:13:32:1c:f5:ad:df:d5:72:68:47:fc:ae:e4:66: 90:43:f3:6b:3d:ca:6a:17:40:ed:2d:83:0d:5b:59: bb:7e:5e:54:c5:0e:e9:4f:d9:e4:e6:56:4e:14:ac: 2d:20:d6:96:f3:f3:c4:c8:3b:55:e9:cb:da:68:a4: 6d:55:1d:5a:72:19:67:1f:e3:12:89:be:d0:f6:7a: d0:84:aa:c3:4f:07:51:4a:3c:cb:6f:16:08:6c:6d: 8e:48:18:9d:24:85:3c:3b:f7:72:94:fa:e1:d5:07: b6:82:85:35:60:f4:86:ca:a3:6c:d7:a8:e5:9e:61: 84:09:03:30:92:d6:0b:29:27:2b:9c:1f:c4:7a:18: 3f:38:c9:28:72:bb:b0:13:39:6a:56:e1:3c:9f:c1: 39:77:e5:55:57:50:cd:f5:6c:d6:cd:82:3e:ae:a4: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.147.0/24 185.148.92.0/22 199.255.112.0/22 206.225.20.0/22 212.24.116.0/22 IPv6: 2a0d:d100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44832 Signature Algorithm: sha256WithRSAEncryption 26:ee:8c:45:46:94:42:11:83:45:0a:ad:1a:aa:f8:14:17:91: 4b:21:63:10:a4:4d:24:3d:a5:92:52:05:54:68:5e:77:1b:4f: 98:80:da:49:8c:be:53:46:56:a8:ce:22:e8:b9:26:f1:40:db: f5:bc:ac:07:57:c4:88:4b:7d:49:90:31:83:3f:13:e3:85:a4: d4:bc:71:16:20:ce:67:75:7a:e6:ce:86:4a:b9:7e:5a:37:4f: b4:40:a5:d6:7f:57:26:ce:67:83:9c:73:e7:90:ae:61:b8:08: 9d:cd:06:88:75:5a:12:76:b8:6e:9e:93:62:b2:95:0f:22:d1: 11:9f:bd:30:e9:fa:ac:5c:2f:18:33:05:14:70:04:45:37:b3: 13:ad:22:4b:a0:22:75:40:c5:d2:49:ac:8f:02:c6:17:f5:91: e0:5d:92:6c:e4:f3:70:13:37:3e:d7:fb:32:15:aa:5c:90:5f: 24:ce:87:40:30:a4:86:dd:8b:6d:9f:8f:ed:13:f0:c5:99:b4: 15:60:1a:03:77:8a:7e:21:a4:e2:32:74:7b:af:24:b5:a9:74: ff:48:1d:40:b3:4a:8c:68:e8:0b:4d:f8:21:9a:31:2e:f9:83: ca:e4:2c:b8:8d:8b:4c:3e:ea:20:4e:6c:10:ed:3b:0c:ac:5a: 2f:3a:b6:b2 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8EkJlhpM6+3HDQ8e0GmxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjM2YTRlMTRhNzFkZGQ1MTAxNjRiODYzMWFkOTliYmZjNzU5NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXbBch7fkDbqnyicDtYwF2vVEV/x M873o3riIPZCtMsuYOq2PT0MFaHXsXIumiZ/6IyyVy3rVgq3r/RrURBasuFlolP9 /dF59uNWijrsLeEWnJ/eRN+x3xGAEzIc9a3f1XJoR/yu5GaQQ/NrPcpqF0DtLYMN W1m7fl5UxQ7pT9nk5lZOFKwtINaW8/PEyDtV6cvaaKRtVR1achlnH+MSib7Q9nrQ hKrDTwdRSjzLbxYIbG2OSBidJIU8O/dylPrh1Qe2goU1YPSGyqNs16jlnmGECQMw ktYLKScrnB/Eehg/OMkocruwEzlqVuE8n8E5d+VVV1DN9WzWzYI+rqSHowIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFIY2pOFKcd3VEBZLhjGtmbv8dZU6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2NkZWNh My00ZWYxLTQ1YWQtODkyMi0yZjdjZjg0NDZhMzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvY2RlY2Ez LTRlZjEtNDVhZC04OTIyLTJmN2NmODQ0NmEzMS8xL2hqYWs0VXB4M2RVUUZrdUdN YTJadV94MWxUby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQAn/+TAwQCuZRcAwQCx/9wAwQCzuEUAwQC1Bh0 MA0EAgACMAcDBQMqDdEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvIDANBgkq hkiG9w0BAQsFAAOCAQEAJu6MRUaUQhGDRQqtGqr4FBeRSyFjEKRNJD2lklIFVGhe dxtPmIDaSYy+U0ZWqM4i6Lkm8UDb9bysB1fEiEt9SZAxgz8T44Wk1LxxFiDOZ3V6 5s6GSrl+WjdPtECl1n9XJs5ng5xz55CuYbgInc0GiHVaEna4bp6TYrKVDyLREZ+9 MOn6rFwvGDMFFHAERTezE60iS6AidUDF0kmsjwLGF/WR4F2SbOTzcBM3Ptf7MhWq XJBfJM6HQDCkht2LbZ+P7RPwxZm0FWAaA3eKfiGk4jJ0e68ktal0/0gdQLNKjGjo C034IZoxLvmDyuQsuI2LTD7qIE5sEO07DKxaLzq2sg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:10 2026 by rpki-client