This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer File: hEWCynBHF-sMlL5NiUE_S8LYuOU.cer (raw, json) Hash identifier: MUwGJMTlxDi3iVhJH7maej3ZJWeafPIPghHOFAkQgyQ= Subject key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38141CF7CE25E7E4035CFC6DEDEAF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56335 IP: 147.78.4.0/22 IP: 2a09:19c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:14:1c:f7:ce:25:e7:e4:03:5c:fc:6d:ed:ea:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:38:94:8e:cd:42:81:d7:0c:95:09:4b:61: cb:77:17:c3:11:f8:6e:77:31:78:1c:45:c4:cd:d1: 15:11:4a:39:28:08:c9:32:e2:a0:01:53:bd:3c:d4: 3b:4c:ff:09:54:7c:b1:d5:04:ff:77:b4:f7:ce:8f: 83:27:1f:67:3a:b5:82:64:71:b8:95:6b:f4:c8:5b: 2e:88:06:09:22:01:21:8f:c4:3d:cf:ef:61:79:68: 7f:8c:62:2b:57:69:88:67:9f:ba:3e:5c:ee:ba:d0: f7:41:6b:ab:28:3d:b8:19:e5:14:45:96:97:c6:15: 57:14:8f:e9:0e:64:cb:78:2b:79:21:dd:fd:41:7d: 94:91:9e:0b:7e:04:ab:3b:0e:23:a8:28:fe:f3:63: 54:88:ed:9c:26:1d:ce:a3:1c:5f:f3:24:32:53:bf: 24:5f:35:4b:5f:c4:36:13:be:c5:56:44:bd:7c:b8: 82:9c:c7:5a:9f:b9:e2:dd:42:a3:2c:15:17:9c:1c: ae:a6:e1:00:3f:a0:af:53:15:69:eb:1b:67:9a:42: fd:ba:f6:fa:88:85:89:2d:f6:aa:a0:b7:5c:13:c3: 2b:e5:51:b4:94:92:c5:d4:c5:bf:04:a9:7d:53:43: f1:4d:a7:91:4c:87:db:83:a4:4e:de:74:0b:69:3b: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.4.0/22 IPv6: 2a09:19c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56335 Signature Algorithm: sha256WithRSAEncryption 25:2a:b1:c9:e6:99:3b:c0:0a:57:3b:4a:e2:6d:8e:37:c4:2b: 15:eb:66:66:ca:b2:50:40:71:57:06:3b:4b:1f:b5:d9:3f:d2: 44:56:74:66:24:d7:84:e8:11:b3:e3:39:46:ae:b2:61:89:2b: 5a:f5:31:f8:13:6c:dc:14:24:34:9f:91:3d:10:b0:48:4e:c8: bd:65:76:5a:8f:9c:d7:35:b7:1f:6d:27:ce:7b:5f:59:8a:82: eb:3c:0b:0e:23:2d:1e:9a:89:e8:45:15:92:7e:55:29:c6:2a: a7:dc:d9:f3:5d:b0:f7:f5:46:7f:89:7b:e3:1e:c6:70:3f:9f: 33:c2:81:7a:0d:f1:be:a4:31:d6:88:8c:17:b3:77:b7:0f:5a: ce:e9:fb:95:cd:89:85:62:4c:61:92:9c:c6:e0:9a:90:fd:7c: 3f:fd:10:2b:8c:a4:82:4d:51:9e:bd:45:1e:9a:3f:69:28:06: 79:f2:29:8c:e3:2a:10:58:1f:d8:c4:4d:0b:ae:0a:2c:2e:45: 49:c0:3c:4a:1b:6c:b7:ac:79:3f:eb:f2:bf:f1:a1:5f:45:44: 66:6e:40:bd:80:a7:fd:9f:cb:76:0b:68:31:47:37:00:23:07: 9f:81:e7:82:6c:04:d6:80:72:17:56:f5:24:cf:6a:a4:a3:4d: e5:e6:83:64 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OBQc984l5+QDXPxt7erzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDQ1ODJjYTcwNDcxN2ViMGM5NGJlNGQ4OTQxM2Y0YmMyZDhiOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/M4lI7NQoHXDJUJS2HLdxfDEfhu dzF4HEXEzdEVEUo5KAjJMuKgAVO9PNQ7TP8JVHyx1QT/d7T3zo+DJx9nOrWCZHG4 lWv0yFsuiAYJIgEhj8Q9z+9heWh/jGIrV2mIZ5+6PlzuutD3QWurKD24GeUURZaX xhVXFI/pDmTLeCt5Id39QX2UkZ4LfgSrOw4jqCj+82NUiO2cJh3Ooxxf8yQyU78k XzVLX8Q2E77FVkS9fLiCnMdan7ni3UKjLBUXnByupuEAP6CvUxVp6xtnmkL9uvb6 iIWJLfaqoLdcE8Mr5VG0lJLF1MW/BKl9U0PxTaeRTIfbg6RO3nQLaTtWowIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIRFgspwRxfrDJS+TYlBP0vC2LjlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzczNWU0 Mi1jNjA4LTQ2YjYtOGY3MC1mMjNmNjZmOGQyNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvNzM1ZTQy LWM2MDgtNDZiNi04ZjcwLWYyM2Y2NmY4ZDI0Mi8xL2hFV0N5bkJIRi1zTWxMNU5p VUVfUzhMWXVPVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCk04EMA0EAgACMAcDBQAqCRnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDcDzANBgkqhkiG9w0BAQsFAAOCAQEAJSqxyeaZO8AK VztK4m2ON8QrFetmZsqyUEBxVwY7Sx+12T/SRFZ0ZiTXhOgRs+M5Rq6yYYkrWvUx +BNs3BQkNJ+RPRCwSE7IvWV2Wo+c1zW3H20nzntfWYqC6zwLDiMtHpqJ6EUVkn5V KcYqp9zZ812w9/VGf4l74x7GcD+fM8KBeg3xvqQx1oiMF7N3tw9azun7lc2JhWJM YZKcxuCakP18P/0QK4ykgk1Rnr1FHpo/aSgGefIpjOMqEFgf2MRNC64KLC5FScA8 Shtst6x5P+vyv/GhX0VEZm5AvYCn/Z/LdgtoMUc3ACMHn4HngmwE1oByF1b1JM9q pKNN5eaDZA== -----END CERTIFICATE-----Generated at Mon Jan 5 19:12:38 2026 by rpki-client