This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer File: 4HUznawWU11FeuiGK1NbzlHhIg8.cer (raw, json) Hash identifier: vRtAIMCWowoyaWVxoD1gqIsSPdp6bmCsrGF6qx7okjg= Subject key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD813E66171983BDC3B7837542D84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208792 IP: 45.85.28.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d8:13:e6:61:71:98:3b:dc:3b:78:37:54:2d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e075339dac16535d457ae8862b535bce51e1220f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2d:07:27:8e:53:89:a3:9f:f7:d9:54:5e:63: f1:61:bc:d4:f2:9a:b5:c0:8c:2a:4f:d6:17:22:78: d4:6a:19:30:67:88:19:ad:7a:a8:05:78:7b:db:f3: 26:96:31:8d:d7:fc:32:9f:6f:86:e7:e1:fc:43:ae: c4:03:35:0c:d0:30:8d:76:56:6e:e0:14:97:8e:0e: b4:d1:32:f2:d8:cd:b2:8f:04:3d:e4:8f:c2:29:6f: 31:5e:77:ab:c3:52:5b:98:56:1c:87:87:06:10:40: b4:a7:41:14:f5:ab:f6:65:61:1f:cd:73:87:b3:93: 36:55:ef:fd:c6:b6:c2:00:69:8c:0e:50:a3:30:6a: 3b:19:b5:63:67:33:35:bb:0a:d8:26:58:5c:91:f5: f6:22:e4:ee:45:9e:8d:7a:40:4a:9f:37:a0:b2:d5: 15:4d:fb:ff:fe:d9:03:a6:e1:f7:37:29:17:f1:c7: ca:f9:0d:f8:01:c7:0b:7b:e5:fb:50:a4:58:1a:fc: 4c:81:f0:7a:3f:0f:cb:7a:73:41:18:4b:72:73:5a: 5e:12:f5:ab:20:14:01:aa:a3:f4:60:da:c1:7c:05: 3e:86:f0:52:09:78:d0:5d:5c:33:89:42:1f:50:75: dc:56:f8:48:91:84:5e:ca:28:12:83:c8:5f:ea:a5: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208792 Signature Algorithm: sha256WithRSAEncryption 5e:cc:a1:d3:96:56:c5:95:75:6d:ca:52:f9:23:85:63:5b:a8: 80:e1:bb:ae:78:89:99:af:36:ec:79:02:9f:9c:a2:65:31:a6: 1a:b6:fa:80:d3:77:e8:8d:76:20:e3:a0:88:73:97:9d:35:b3: d4:31:cc:f6:d9:58:c7:1a:65:59:a3:eb:30:db:8f:62:47:a1: 91:f2:4f:4e:9a:03:93:af:9f:a4:7f:dc:4a:71:d2:62:d8:08: b2:ca:ef:d8:37:bf:e4:e7:3d:83:aa:55:77:ca:ac:fe:b4:93: 1e:1e:96:f7:3f:35:68:4f:29:78:dc:c0:7d:d7:da:9e:89:91: a1:72:f3:1a:ac:f1:5e:91:6a:6a:a3:ec:5e:12:7d:48:c0:6d: 1d:d8:69:02:ae:00:e7:c7:bd:3e:82:53:47:1e:2c:a7:b6:60: ff:63:8d:4d:b6:57:5e:3e:42:79:d0:3b:1e:55:04:80:92:bc: a4:bd:53:85:7b:70:1b:77:ab:47:ee:91:a2:2c:71:c4:48:88: 20:1e:f2:48:77:26:48:e9:67:47:c3:ef:5f:5b:88:fb:a9:f4: ea:4a:67:a0:50:58:0d:83:a7:69:6b:cf:fc:38:b2:c8:bb:77: dd:86:07:f6:6f:90:31:70:2c:e6:56:35:f6:3a:04:74:70:99: 8d:2a:d4:ec -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fdgT5mFxmDvcO3g3VC2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDc1MzM5ZGFjMTY1MzVkNDU3YWU4ODYyYjUzNWJjZTUxZTEyMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC0HJ45TiaOf99lUXmPxYbzU8pq1 wIwqT9YXInjUahkwZ4gZrXqoBXh72/MmljGN1/wyn2+G5+H8Q67EAzUM0DCNdlZu 4BSXjg600TLy2M2yjwQ95I/CKW8xXnerw1JbmFYch4cGEEC0p0EU9av2ZWEfzXOH s5M2Ve/9xrbCAGmMDlCjMGo7GbVjZzM1uwrYJlhckfX2IuTuRZ6NekBKnzegstUV Tfv//tkDpuH3NykX8cfK+Q34AccLe+X7UKRYGvxMgfB6Pw/LenNBGEtyc1peEvWr IBQBqqP0YNrBfAU+hvBSCXjQXVwziUIfUHXcVvhIkYReyigSg8hf6qXsqQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOB1M52sFlNdRXrohitTW85R4SIPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzMzZDYz OS00OWMyLTQzMDEtYjZjMy1iYjZjNmM0NTc4MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvMzNkNjM5 LTQ5YzItNDMwMS1iNmMzLWJiNmM2YzQ1NzgxNy8xLzRIVXpuYXdXVTExRmV1aUdL MU5iemxIaElnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVUcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMvmDANBgkqhkiG9w0BAQsFAAOCAQEAXsyh05ZWxZV1bcpS+SOFY1uogOG7rniJ ma827HkCn5yiZTGmGrb6gNN36I12IOOgiHOXnTWz1DHM9tlYxxplWaPrMNuPYkeh kfJPTpoDk6+fpH/cSnHSYtgIssrv2De/5Oc9g6pVd8qs/rSTHh6W9z81aE8peNzA fdfanomRoXLzGqzxXpFqaqPsXhJ9SMBtHdhpAq4A58e9PoJTRx4sp7Zg/2ONTbZX Xj5CedA7HlUEgJK8pL1ThXtwG3erR+6RoixxxEiIIB7ySHcmSOlnR8PvX1uI+6n0 6kpnoFBYDYOnaWvP/DiyyLt33YYH9m+QMXAs5lY19joEdHCZjSrU7A== -----END CERTIFICATE-----Generated at Fri Jan 9 16:02:06 2026 by rpki-client