This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer (raw, json) Hash identifier: ew/FzzRvbDqMNerFsDrBazllAjP4ubpXIHvGWpxvF2Y= Subject key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13577F37AD3C60D66F07897AA39506 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210694 IP: 45.8.24.0 -- 45.8.26.255 IP: 45.11.52.0/22 IP: 45.11.176.0/22 IP: 45.13.108.0/22 IP: 45.14.216.0/22 IP: 45.15.196.0/22 IP: 45.82.4.0/22 IP: 45.83.240.0/22 IP: 45.85.188.0/24 IP: 45.85.190.0/23 IP: 45.88.84.0/22 IP: 45.88.184.0/22 IP: 45.91.116.0/22 IP: 45.93.149.0 -- 45.93.151.255 IP: 45.132.120.0/22 IP: 45.133.140.0/22 IP: 45.153.200.0/22 IP: 91.212.20.0/24 IP: 91.212.27.0/24 IP: 91.212.38.0/24 IP: 91.212.45.0/24 IP: 193.39.215.0/24 IP: 193.39.246.0/24 IP: 195.80.230.0/23 IP: 195.82.132.0/23 IP: 2a0e:4200::/29 IP: 2a10:2380::/29 IP: 2a10:3e40::/29 IP: 2a10:5e80::/29 IP: 2a10:5f80::/29 IP: 2a10:6080::/29 IP: 2a10:6380::/29 IP: 2a10:6480::/29 IP: 2a10:6580::/29 IP: 2a10:6680::/29 IP: 2a10:6780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:57:7f:37:ad:3c:60:d6:6f:07:89:7a:a3:95:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:4b:50:1f:4f:7b:cb:fc:57:20:80:1c:1f: 3e:42:07:f8:50:23:c4:89:62:2d:44:d4:b2:d7:af: 55:7f:9d:e1:0f:a3:8f:cd:ff:d5:31:2f:85:4d:5b: b3:f4:1c:73:50:25:4f:12:7a:d8:a3:bf:d5:2f:b0: 9c:70:ee:5b:b8:fa:7a:04:31:d4:9c:2a:65:b9:3d: 05:3a:57:9a:b0:9b:16:b7:70:cc:91:81:aa:b1:10: 21:f5:a7:20:23:38:43:0b:38:e1:3b:f1:09:71:d4: 86:1a:b3:c8:d7:65:ef:e1:8d:11:0a:b3:1c:0a:6e: a5:94:23:b4:dc:c6:23:48:01:f2:be:27:8f:0b:c3: 10:1f:c8:3a:b8:3a:da:4a:a0:01:93:7b:66:eb:02: f2:b6:00:0a:97:7f:b7:96:c9:e9:c7:2b:3b:47:c3: 0c:e9:35:b7:e8:6b:51:d2:8e:01:27:60:e3:59:c4: 50:0f:8f:08:cf:7f:78:e7:90:25:61:35:ae:17:74: 38:30:bc:7d:73:9a:7f:50:70:da:cf:fb:93:74:fd: 2c:d5:bf:2c:8a:7d:e5:0b:db:ee:f8:ad:5d:10:20: 6f:2a:d1:d4:35:57:a6:5a:04:8b:f3:2b:12:ad:51: cc:bc:10:f6:a7:2c:9f:6f:54:13:cb:e3:6d:08:d2: 14:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.24.0-45.8.26.255 45.11.52.0/22 45.11.176.0/22 45.13.108.0/22 45.14.216.0/22 45.15.196.0/22 45.82.4.0/22 45.83.240.0/22 45.85.188.0/24 45.85.190.0/23 45.88.84.0/22 45.88.184.0/22 45.91.116.0/22 45.93.149.0-45.93.151.255 45.132.120.0/22 45.133.140.0/22 45.153.200.0/22 91.212.20.0/24 91.212.27.0/24 91.212.38.0/24 91.212.45.0/24 193.39.215.0/24 193.39.246.0/24 195.80.230.0/23 195.82.132.0/23 IPv6: 2a0e:4200::/29 2a10:2380::/29 2a10:3e40::/29 2a10:5e80::/29 2a10:5f80::/29 2a10:6080::/29 2a10:6380::/29 2a10:6480::/29 2a10:6580::/29 2a10:6680::/29 2a10:6780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210694 Signature Algorithm: sha256WithRSAEncryption 1a:63:04:a1:48:cf:1e:a9:01:a8:0a:d1:ad:92:de:df:cb:53: 6a:f1:8d:e9:08:f1:3d:66:ad:1f:b6:92:23:8f:0e:27:bf:bb: 84:17:63:9a:aa:4a:3e:07:8b:58:25:e2:9b:b9:f8:8f:e2:d9: bc:5d:1e:b7:77:97:9e:f0:ba:fb:ab:23:11:ec:a1:90:d8:8c: b8:57:94:37:f5:11:e5:45:15:65:ae:dd:80:81:84:58:97:f2: 3f:45:9c:b7:fc:12:ef:a2:26:00:50:9b:6a:fc:86:4d:dd:da: 7d:ce:4f:4d:85:7f:59:89:be:a1:07:f8:0d:55:d4:b9:e8:e5: 77:36:40:04:8f:3d:bc:f3:ce:d6:57:27:ec:87:8a:63:02:99: 55:7d:30:41:88:4c:64:9d:b0:b1:86:ee:e8:28:9a:58:36:d1: 5d:12:83:0c:90:47:fc:d7:6c:06:85:b3:ac:50:df:2b:bf:27: 79:6d:27:76:be:de:42:74:d2:be:81:56:c0:19:a7:c6:b2:ac: 1c:a5:e0:46:09:43:01:af:2e:29:21:37:c3:00:a9:e7:4f:9e: 17:72:6c:da:54:f9:bb:a9:0c:19:0d:0a:ef:39:b7:5f:ad:96: 40:e3:cf:5f:c4:ae:d8:8c:a4:b3:2e:e3:c9:c5:0f:42:dc:7f: 7a:48:a4:2d -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgISAZt8E1d/N608YNZvB4l6o5UGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTFjMTE2NThkMjA0MWVhZjI1MDJmZTU0MDhlZDQ5M2JiZDRmMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFdLUB9Pe8v8VyCAHB8+Qgf4UCPE iWItRNSy169Vf53hD6OPzf/VMS+FTVuz9BxzUCVPEnrYo7/VL7CccO5buPp6BDHU nCpluT0FOleasJsWt3DMkYGqsRAh9acgIzhDCzjhO/EJcdSGGrPI12Xv4Y0RCrMc Cm6llCO03MYjSAHyviePC8MQH8g6uDraSqABk3tm6wLytgAKl3+3lsnpxys7R8MM 6TW36GtR0o4BJ2DjWcRQD48Iz39455AlYTWuF3Q4MLx9c5p/UHDaz/uTdP0s1b8s in3lC9vu+K1dECBvKtHUNVemWgSL8ysSrVHMvBD2pyyfb1QTy+NtCNIUZQIDAQAB o4IDnTCCA5kwHQYDVR0OBBYEFI4cEWWNIEHq8lAv5UCO1JO71PMYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzcwYmY4 Yi1kOGM0LTQwYzMtOTAyMi02MzM0OGNkYmYwMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNzBiZjhi LWQ4YzQtNDBjMy05MDIyLTYzMzQ4Y2RiZjAyNC8xL2pod1JaWTBnUWVyeVVDX2xR STdVazd2VTh4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBGgYIKwYB BQUHAQcBAf8EggEJMIIBBTCBrQQCAAEwgaYwDAMEAy0IGAMEAC0IGgMEAi0LNAME Ai0LsAMEAi0NbAMEAi0O2AMEAi0PxAMEAi1SBAMEAi1T8AMEAC1VvAMEAS1VvgME Ai1YVAMEAi1YuAMEAi1bdDAMAwQALV2VAwQDLV2QAwQCLYR4AwQCLYWMAwQCLZnI AwQAW9QUAwQAW9QbAwQAW9QmAwQAW9QtAwQAwSfXAwQAwSf2AwQBw1DmAwQBw1KE MFMEAgACME0DBQMqDkIAAwUDKhAjgAMFAyoQPkADBQMqEF6AAwUDKhBfgAMFAyoQ YIADBQMqEGOAAwUDKhBkgAMFAyoQZYADBQMqEGaAAwUDKhBngDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMDNwYwDQYJKoZIhvcNAQELBQADggEBABpjBKFIzx6pAagK 0a2S3t/LU2rxjekI8T1mrR+2kiOPDie/u4QXY5qqSj4Hi1gl4pu5+I/i2bxdHrd3 l57wuvurIxHsoZDYjLhXlDf1EeVFFWWu3YCBhFiX8j9FnLf8Eu+iJgBQm2r8hk3d 2n3OT02Ff1mJvqEH+A1V1Lno5Xc2QASPPbzzztZXJ+yHimMCmVV9MEGITGSdsLGG 7ugomlg20V0SgwyQR/zXbAaFs6xQ3yu/J3ltJ3a+3kJ00r6BVsAZp8ayrByl4EYJ QwGvLikhN8MAqedPnhdybNpU+bupDBkNCu85t1+tlkDjz1/ErtiMpLMu48nFD0Lc f3pIpC0= -----END CERTIFICATE-----Generated at Wed Jan 7 09:37:03 2026 by rpki-client