This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer File: hkEGVA8wqdzfjvm-cv_vi9inLlw.cer (raw, json) Hash identifier: hm+sAuQjRcgbjsJnPeccMjaWjyqaBCcmmDpMxoCu324= Subject key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8301C0F924AA9A757CC09C43FCFB3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42061 IP: 195.8.212.0/23 IP: 2001:67c:1d0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:01:c0:f9:24:aa:9a:75:7c:c0:9c:43:fc:fb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:13:0c:6e:7c:24:12:91:1d:0b:27:0c:dc: 8a:dc:bd:9b:81:ba:1b:bd:84:22:b4:c4:e4:b5:43: 27:3a:c1:b6:c7:ac:4e:18:92:e5:fe:b0:6f:7e:d4: 97:85:5e:dd:aa:0c:2f:29:d1:c1:05:21:85:55:f3: 63:d1:ab:bc:08:a3:f1:87:ad:88:df:bd:08:29:b5: 86:8b:43:5d:20:1d:b3:64:bd:5d:02:b0:5c:ca:f1: 0a:0f:73:e2:c0:32:8e:fa:66:e2:6b:bc:ba:8e:75: 65:79:5d:36:47:5a:bd:72:a3:91:6c:f2:62:19:a3: 0b:c1:e3:f8:21:99:1b:9c:ec:ce:29:b7:77:a9:de: 18:fb:d1:ee:99:6c:74:06:96:53:bd:1f:88:3e:31: b7:e4:16:2b:8c:06:4c:df:c0:76:52:d5:cb:f6:43: 07:0f:04:1c:73:9c:12:4e:5c:2b:9e:96:d8:f4:b5: ce:2f:04:f5:09:aa:7e:ea:81:f9:9e:c3:ac:8b:f1: 9a:55:bd:a6:19:f3:4b:3d:eb:24:b5:93:3e:e7:8d: 08:6d:d8:25:39:4e:79:42:b2:4f:c5:03:a6:ec:82: aa:bf:98:18:e5:f6:9f:8b:5c:cd:c6:d7:05:98:33: 20:7f:10:74:67:4e:b8:a8:64:9d:e9:cf:23:83:46: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.212.0/23 IPv6: 2001:67c:1d0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42061 Signature Algorithm: sha256WithRSAEncryption 20:8c:01:62:dd:b1:f3:d6:2b:9a:a3:db:4b:ec:41:30:c6:c9: e1:b0:46:33:32:0b:4d:cc:42:de:e5:27:d1:bd:d2:e6:a6:f9: 39:3c:7e:12:1c:c3:a9:35:1c:82:38:38:46:e7:fd:11:3c:66: c3:df:38:1b:6f:a6:3a:f9:79:a1:df:a4:18:28:4f:e8:db:ab: 3d:b6:83:be:9e:91:dd:ca:e6:53:df:a3:f0:2e:f9:34:c2:bc: 3a:82:a1:e7:17:53:50:8e:38:b3:e9:97:18:f9:54:3a:0a:5a: 0d:23:c1:5e:64:eb:71:1d:65:6b:34:14:e9:d3:0f:4b:f6:e0: 9e:23:92:9c:78:4e:1e:16:e0:77:75:59:2f:13:21:9a:e2:a1: 07:2d:78:bc:78:06:90:7a:7b:87:73:a9:ff:7d:73:d0:64:8d: cd:4f:13:e7:22:bb:e0:db:b1:e1:f5:d3:06:99:90:2b:a4:68: 5b:cf:c0:e9:37:ba:be:40:21:58:3c:52:8d:52:45:b7:a4:6f: 7f:54:e3:a2:88:4c:d1:61:70:a6:72:82:72:af:35:89:f4:fd: 0c:1b:43:c5:33:48:e5:2d:a9:6e:5f:7b:3b:3f:7c:bc:ed:77: 43:16:6e:7a:90:ae:a2:3b:d8:ab:a1:16:f9:b5:28:fc:41:dc: d1:ce:9a:b1 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt/gwHA+SSqmnV8wJxD/Ps8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjQxMDY1NDBmMzBhOWRjZGY4ZWY5YmU3MmZmZWY4YmQ4YTcyZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8YTDG58JBKRHQsnDNyK3L2bgbob vYQitMTktUMnOsG2x6xOGJLl/rBvftSXhV7dqgwvKdHBBSGFVfNj0au8CKPxh62I 370IKbWGi0NdIB2zZL1dArBcyvEKD3PiwDKO+mbia7y6jnVleV02R1q9cqORbPJi GaMLweP4IZkbnOzOKbd3qd4Y+9HumWx0BpZTvR+IPjG35BYrjAZM38B2UtXL9kMH DwQcc5wSTlwrnpbY9LXOLwT1Cap+6oH5nsOsi/GaVb2mGfNLPesktZM+540Ibdgl OU55QrJPxQOm7IKqv5gY5fafi1zNxtcFmDMgfxB0Z064qGSd6c8jg0aEJwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFIZBBlQPMKnc3475vnL/74vYpy5cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzBiZTdm Mi02MzhkLTRmNDUtYjY5Ny0zYjMxOGU0NzI3NmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMGJlN2Yy LTYzOGQtNGY0NS1iNjk3LTNiMzE4ZTQ3Mjc2ZC8xL2hrRUdWQTh3cWR6Zmp2bS1j dl92aTlpbkxsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwwjUMA8EAgACMAkDBwAgAQZ8AdAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAKRNMA0GCSqGSIb3DQEBCwUAA4IBAQAgjAFi3bHz 1iuao9tL7EEwxsnhsEYzMgtNzELe5SfRvdLmpvk5PH4SHMOpNRyCODhG5/0RPGbD 3zgbb6Y6+Xmh36QYKE/o26s9toO+npHdyuZT36PwLvk0wrw6gqHnF1NQjjiz6ZcY +VQ6CloNI8FeZOtxHWVrNBTp0w9L9uCeI5KceE4eFuB3dVkvEyGa4qEHLXi8eAaQ enuHc6n/fXPQZI3NTxPnIrvg27Hh9dMGmZArpGhbz8DpN7q+QCFYPFKNUkW3pG9/ VOOiiEzRYXCmcoJyrzWJ9P0MG0PFM0jlLaluX3s7P3y87XdDFm56kK6iO9iroRb5 tSj8QdzRzpqx -----END CERTIFICATE-----Generated at Tue Feb 10 10:13:35 2026 by rpki-client