This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer File: Hrq0DWCBM83fdsO1pvgV34H7x90.cer (raw, json) Hash identifier: CI8Lf15TZU83ForD98SikxU05LrVa/0Yb6EoRZK5JW8= Subject key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113DD0768FE4A4AFB3B2D19B7B22B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.7.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3d:d0:76:8f:e4:a4:af:b3:b2:d1:9b:7b:22:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:f7:d9:13:db:a0:10:fe:7e:5a:bf:f3:b0: a2:1d:b2:59:ce:e0:91:34:91:6f:48:2e:70:55:d4: 74:a5:cc:08:4b:1d:b3:d6:09:f7:6c:53:05:18:bf: 71:9f:38:60:7a:3f:33:a4:21:4c:c3:05:bd:97:63: 4d:a0:d0:d0:2a:96:87:1e:92:fe:ca:75:c0:59:75: 42:74:7a:d7:63:b7:2c:38:fc:92:27:48:95:ef:cc: c7:32:f1:f8:71:ff:2b:02:12:89:93:7c:54:4d:57: 27:26:82:49:07:69:46:d9:e0:ec:17:10:f2:af:33: 76:bb:45:9a:94:3a:c5:ca:67:d3:9f:a0:3e:82:6f: 76:34:cd:98:9f:01:a5:c5:fd:31:71:72:97:03:f1: 6e:27:e3:e6:1b:91:ec:e9:ff:0c:63:ad:74:a4:5e: ce:cd:97:06:33:21:0f:e2:1f:f6:91:97:3d:2a:2f: 62:a3:6b:d2:37:93:9b:c3:ca:8b:75:5e:06:55:a7: 3c:04:7b:4d:f9:09:96:3b:a3:bc:e1:4f:09:0b:ff: c9:3d:61:f0:37:a3:60:21:08:95:10:94:a2:d9:3d: e2:e6:b8:c4:93:9c:21:40:6f:11:4a:58:74:28:67: 4b:b0:89:c2:2d:1b:67:3f:04:23:33:46:ea:aa:17: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.7.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:94:fc:7a:af:0d:28:09:99:89:fc:72:58:6f:4d:3a:7e:40: 65:69:02:82:5b:90:fc:04:34:d9:cc:ff:ac:7d:29:6f:25:e0: 0e:3b:71:54:b5:b7:5a:2c:f7:55:e8:18:db:b5:0a:93:96:71: a0:e5:45:3b:e2:04:db:bd:02:44:aa:67:ae:6d:69:50:89:2b: d9:f6:ee:a0:25:dd:2e:cc:c7:a4:2a:58:a1:b9:79:9c:ca:d9: 7a:8d:24:c6:67:8a:75:09:55:24:b4:6e:83:cf:53:d2:ea:4a: f5:9e:95:42:5f:94:7e:ba:d4:39:b5:a1:8c:2e:09:29:21:51: 06:a1:61:ac:19:1f:89:8d:99:34:eb:25:3b:de:54:71:6b:50: 4f:27:1b:dd:c1:7c:db:01:9a:c3:e9:5b:a4:79:d2:da:03:11: 18:b4:d8:94:7e:cf:c3:83:8d:5c:7e:29:58:df:5b:78:da:77: 8e:10:91:e7:08:04:1c:71:72:5a:7e:eb:0b:ee:89:35:3f:09: a6:84:75:c4:4b:2d:9f:58:dc:ab:8d:7e:e0:0b:f9:7a:01:19: 66:24:50:86:ca:70:20:a2:af:ac:6a:35:af:ee:70:d9:51:fd: b2:d6:8e:90:7a:1f:c1:53:16:c9:9c:fd:58:c7:27:50:77:15: ad:23:e3:83 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ET3Qdo/kpK+zstGbeyK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWJhYjQwZDYwODEzM2NkZGY3NmMzYjVhNmY4MTVkZjgxZmJjN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNT32RPboBD+flq/87CiHbJZzuCR NJFvSC5wVdR0pcwISx2z1gn3bFMFGL9xnzhgej8zpCFMwwW9l2NNoNDQKpaHHpL+ ynXAWXVCdHrXY7csOPySJ0iV78zHMvH4cf8rAhKJk3xUTVcnJoJJB2lG2eDsFxDy rzN2u0WalDrFymfTn6A+gm92NM2YnwGlxf0xcXKXA/FuJ+PmG5Hs6f8MY610pF7O zZcGMyEP4h/2kZc9Ki9io2vSN5Obw8qLdV4GVac8BHtN+QmWO6O84U8JC//JPWHw N6NgIQiVEJSi2T3i5rjEk5whQG8RSlh0KGdLsInCLRtnPwQjM0bqqhffXQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFB66tA1ggTPN33bDtab4Fd+B+8fdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzJiMjZh Zi1lNzU0LTQwODAtOWVjOS01OWYwZjEwYjFkMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvMmIyNmFm LWU3NTQtNDA4MC05ZWM5LTU5ZjBmMTBiMWQyOS8xL0hycTBEV0NCTTgzZmRzTzFw dmdWMzRIN3g5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9EHMA0GCSqGSIb3DQEBCwUAA4IBAQA9lPx6 rw0oCZmJ/HJYb006fkBlaQKCW5D8BDTZzP+sfSlvJeAOO3FUtbdaLPdV6BjbtQqT lnGg5UU74gTbvQJEqmeubWlQiSvZ9u6gJd0uzMekKlihuXmcytl6jSTGZ4p1CVUk tG6Dz1PS6kr1npVCX5R+utQ5taGMLgkpIVEGoWGsGR+JjZk06yU73lRxa1BPJxvd wXzbAZrD6VukedLaAxEYtNiUfs/Dg41cfilY31t42neOEJHnCAQccXJafusL7ok1 PwmmhHXESy2fWNyrjX7gC/l6ARlmJFCGynAgoq+sajWv7nDZUf2y1o6Qeh/BUxbJ nP1YxydQdxWtI+OD -----END CERTIFICATE-----Generated at Mon Jan 12 10:49:26 2026 by rpki-client