This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer File: hvblJPwVqtxInul1gVo3KG3ku1I.cer (raw, json) Hash identifier: mRpaCAz1FByAXiPinYpoJ94RmhuZHbCTQE+T0kH6brw= Subject key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35B8FAD5BDAC85E4A44E632ED7B458 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212672 IP: 185.39.77.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b8:fa:d5:bd:ac:85:e4:a4:4e:63:2e:d7:b4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86f6e524fc15aadc489ee975815a37286de4bb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:b8:e6:30:6a:7f:00:96:e6:7b:07:cb:43: 61:72:cc:eb:c5:eb:f5:f1:58:c1:a5:cb:39:1b:72: 08:38:fe:f6:ba:08:59:9e:c3:09:ee:da:e1:85:05: 8a:46:c3:48:e0:ba:a3:7c:6e:29:53:dd:ac:61:05: b5:8f:37:ce:a9:53:f5:96:32:61:f3:47:43:7e:aa: b4:79:56:7f:59:20:91:27:bd:93:a5:93:d2:f1:eb: b7:70:c7:cb:7c:6f:12:6b:c0:18:19:b9:e6:e5:3b: aa:b9:f5:02:84:b2:91:46:e3:ae:d1:30:09:14:81: 9b:c8:8f:05:09:de:2e:97:f6:3b:98:49:98:e8:41: d5:ee:82:c7:04:46:e1:f4:f5:d7:68:c8:b9:83:85: 49:48:a9:d4:25:39:bc:2f:d7:04:78:18:22:84:43: 33:13:44:8c:3c:eb:8f:55:e3:6b:c4:85:7d:32:9c: bb:e2:2a:35:7e:39:2b:91:c1:02:47:8f:44:b5:b4: d4:74:38:47:3b:3c:a4:ba:87:eb:3d:1a:55:20:5d: 4c:e7:04:f3:69:bc:59:ff:ca:05:bb:b0:38:37:31: 7a:66:df:67:6a:cc:ec:83:38:8a:e5:4a:50:54:78: 81:59:90:d9:91:0f:19:7c:ae:a0:22:3d:99:66:08: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.77.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212672 Signature Algorithm: sha256WithRSAEncryption ab:ad:12:0b:57:1e:6d:8d:ea:28:46:93:ca:3a:a8:c2:d0:4e: cb:b9:b3:db:05:cb:5f:98:2c:4b:17:e2:f0:61:74:a6:69:d3: 52:55:13:9c:45:16:d2:d3:aa:1b:6c:e1:30:3f:48:6d:55:62: 1c:17:87:6d:75:f2:3f:ce:c0:7f:9f:01:0c:f3:00:28:8f:f3: ef:00:da:44:55:4d:d9:e3:d2:77:2b:a7:0e:1f:93:f5:e6:ef: 03:72:32:74:c4:1a:ce:61:55:2d:2d:86:7a:28:28:ef:f9:d4: 9c:a7:b9:08:cf:24:c7:0e:a4:03:6c:7f:bf:b6:9b:4b:e0:b3: 6f:0e:e3:4e:2a:87:09:07:50:21:e5:d0:a9:89:29:12:0f:ae: 3c:da:97:83:3d:64:c5:2f:4c:46:5f:ec:a3:3a:37:c1:d7:c6: c6:69:12:cd:4e:a7:47:2d:c4:4c:62:b3:ce:fc:bb:f2:2f:9d: 4b:cc:4d:15:83:df:04:22:96:ba:45:16:9f:5c:29:66:66:4f: 89:b1:59:a7:42:b1:c0:81:84:e8:51:e6:de:69:51:4e:7e:88: 67:9f:cb:3e:86:f3:88:56:e4:39:4c:9e:1d:ab:36:5a:06:2f: 9c:da:49:a3:37:1d:94:ae:8e:b6:b7:52:82:93:68:8a:9d:ca: 64:cf:c0:85 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7Nbj61b2sheSkTmMu17RYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmY2ZTUyNGZjMTVhYWRjNDg5ZWU5NzU4MTVhMzcyODZkZTRiYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHK45jBqfwCW5nsHy0Nhcszrxev1 8VjBpcs5G3IIOP72ughZnsMJ7trhhQWKRsNI4LqjfG4pU92sYQW1jzfOqVP1ljJh 80dDfqq0eVZ/WSCRJ72TpZPS8eu3cMfLfG8Sa8AYGbnm5TuqufUChLKRRuOu0TAJ FIGbyI8FCd4ul/Y7mEmY6EHV7oLHBEbh9PXXaMi5g4VJSKnUJTm8L9cEeBgihEMz E0SMPOuPVeNrxIV9Mpy74io1fjkrkcECR49EtbTUdDhHOzykuofrPRpVIF1M5wTz abxZ/8oFu7A4NzF6Zt9naszsgziK5UpQVHiBWZDZkQ8ZfK6gIj2ZZgjmFQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIb25ST8FarcSJ7pdYFaNyht5LtSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2M0M2Ux Yy1iNjc2LTQ4YzYtODYzZi05YWRlMzk2ZjdjNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvYzQzZTFj LWI2NzYtNDhjNi04NjNmLTlhZGUzOTZmN2M0Yy8xL2h2YmxKUHdWcXR4SW51bDFn Vm8zS0cza3UxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuSdNMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM+wDANBgkqhkiG9w0BAQsFAAOCAQEAq60SC1cebY3qKEaTyjqowtBOy7mz2wXL X5gsSxfi8GF0pmnTUlUTnEUW0tOqG2zhMD9IbVViHBeHbXXyP87Af58BDPMAKI/z 7wDaRFVN2ePSdyunDh+T9ebvA3IydMQazmFVLS2Geigo7/nUnKe5CM8kxw6kA2x/ v7abS+Czbw7jTiqHCQdQIeXQqYkpEg+uPNqXgz1kxS9MRl/sozo3wdfGxmkSzU6n Ry3ETGKzzvy78i+dS8xNFYPfBCKWukUWn1wpZmZPibFZp0KxwIGE6FHm3mlRTn6I Z5/LPobziFbkOUyeHas2WgYvnNpJozcdlK6OtrdSgpNoip3KZM/AhQ== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:17 2026 by rpki-client