This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer File: hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer (raw, json) Hash identifier: WlEGo15ch95Votrys37GWEjqrZzQDlzcIrJscthFg2k= Subject key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791102B2CFF20745574B7A9B87EF7A82 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42274 IP: 91.192.12.0/22 IP: 193.31.80.0/20 IP: 193.111.44.0/24 IP: 193.111.56.0/22 IP: 2001:67c:36c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:02:b2:cf:f2:07:45:57:4b:7a:9b:87:ef:7a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=869ab33046862ab58405e5e927ddf41272dfc714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e6:b1:29:25:ab:25:2c:cf:f8:ad:25:87:4b: 30:02:52:71:7a:ca:9f:d5:fc:c1:1b:85:ef:36:9f: ac:9e:c1:63:9d:09:7f:3c:62:60:4a:f5:4a:96:bb: 91:f4:97:e2:87:75:66:3d:65:18:e7:9d:7b:c4:86: b8:1d:b3:3f:45:18:8b:00:50:e5:da:54:74:b1:a3: fe:71:71:ef:44:40:77:1c:12:fb:e2:82:f3:7f:04: bb:55:86:79:66:c1:a7:46:28:14:06:e8:a1:8d:89: b7:9b:45:79:e3:79:f9:e3:63:d8:28:e9:dc:a5:c8: 81:09:f7:5b:20:cb:9b:64:18:b2:50:c8:06:69:c7: 49:00:e0:4f:34:4e:86:e5:5c:48:d0:b3:08:91:f3: 99:ce:1e:15:81:a0:5d:d0:cf:63:f2:59:3d:24:e9: 42:e7:d8:a9:25:1c:b4:bb:5e:13:d0:01:84:03:f5: 49:61:6f:f2:50:12:07:ae:bf:1c:01:ad:db:68:51: e7:55:9e:af:fd:2b:7a:35:a9:e7:04:78:a9:94:96: c0:de:4c:21:b0:26:b0:32:5a:d7:07:50:73:d0:c7: d2:54:88:ab:95:31:8f:04:c7:0a:3d:be:f0:7d:20: 3a:42:96:54:ed:4d:cc:33:22:97:36:fe:79:33:d6: b9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.12.0/22 193.31.80.0/20 193.111.44.0/24 193.111.56.0/22 IPv6: 2001:67c:36c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42274 Signature Algorithm: sha256WithRSAEncryption 5b:0c:5f:c9:c1:30:00:1c:9b:c1:a1:1c:3d:e7:aa:c1:23:1d: c6:15:0d:01:0b:42:1c:60:2f:58:bb:ad:4f:ea:8d:29:25:38: 73:56:3f:97:1f:77:08:8c:51:3c:e4:49:dd:7a:83:99:98:98: 5c:52:78:8c:ed:bf:63:9a:ef:5d:a1:e7:6c:dd:23:86:41:e9: 40:90:f5:43:ef:59:db:13:c3:cd:a8:1c:55:2f:e7:a1:fc:c5: fe:06:f9:1e:12:4f:f6:dc:a8:c3:ba:7e:27:f1:b9:5b:91:61: bf:11:a2:b3:b4:44:4e:f3:d6:b8:de:1e:a4:2b:11:1c:5a:e4: a7:27:1f:75:d9:ce:f5:f9:46:d0:0a:5e:a4:b8:0b:94:e1:57: c3:a3:64:db:a9:e5:cd:0a:0c:1e:07:08:f5:cc:e9:9f:ff:5a: dc:7b:a7:9c:8e:9d:16:38:9a:c0:7e:d7:a7:0d:95:9f:82:5e: 3e:af:68:79:3b:be:e3:bf:61:e5:fe:fa:2c:1b:ab:fa:e3:b8: 23:c9:bf:dd:aa:67:45:e5:e6:de:80:48:58:54:b0:d1:fc:79: 5a:0f:f5:7a:7d:eb:a6:e7:a8:59:55:e7:01:56:0c:dd:b3:63: 57:52:a3:ce:1a:d8:14:70:36:bc:d9:40:ff:f0:18:5d:89:66: c8:af:eb:79 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt5EQKyz/IHRVdLepuH73qCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjlhYjMzMDQ2ODYyYWI1ODQwNWU1ZTkyN2RkZjQxMjcyZGZjNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+axKSWrJSzP+K0lh0swAlJxesqf 1fzBG4XvNp+snsFjnQl/PGJgSvVKlruR9Jfih3VmPWUY5517xIa4HbM/RRiLAFDl 2lR0saP+cXHvREB3HBL74oLzfwS7VYZ5ZsGnRigUBuihjYm3m0V543n542PYKOnc pciBCfdbIMubZBiyUMgGacdJAOBPNE6G5VxI0LMIkfOZzh4VgaBd0M9j8lk9JOlC 59ipJRy0u14T0AGEA/VJYW/yUBIHrr8cAa3baFHnVZ6v/St6NannBHiplJbA3kwh sCawMlrXB1Bz0MfSVIirlTGPBMcKPb7wfSA6QpZU7U3MMyKXNv55M9a5QwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFIaaszBGhiq1hAXl6Sfd9BJy38cUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2Y4ZThl NS02OTJiLTQwYTktYjMyZi0zOTRjNDdmZjQ1YWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvZjhlOGU1 LTY5MmItNDBhOS1iMzJmLTM5NGM0N2ZmNDVhZS8xL2hwcXpNRWFHS3JXRUJlWHBK OTMwRW5MZnh4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAeBAIAATAYAwQCW8AMAwQEwR9QAwQAwW8sAwQCwW84MA8EAgAC MAkDBwAgAQZ8A2wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAKUiMA0GCSqGSIb3 DQEBCwUAA4IBAQBbDF/JwTAAHJvBoRw956rBIx3GFQ0BC0IcYC9Yu61P6o0pJThz Vj+XH3cIjFE85EndeoOZmJhcUniM7b9jmu9doeds3SOGQelAkPVD71nbE8PNqBxV L+eh/MX+BvkeEk/23KjDun4n8blbkWG/EaKztERO89a43h6kKxEcWuSnJx912c71 +UbQCl6kuAuU4VfDo2TbqeXNCgweBwj1zOmf/1rce6ecjp0WOJrAftenDZWfgl4+ r2h5O77jv2Hl/vosG6v647gjyb/dqmdF5ebegEhYVLDR/HlaD/V6feum56hZVecB Vgzds2NXUqPOGtgUcDa82UD/8BhdiWbIr+t5 -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:23 2026 by rpki-client