This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer File: hJxbptQKtOTjm3tpttLZhEqiSK8.cer (raw, json) Hash identifier: UyzeDZ07GM3Z1vw1LQbzC1VzuS8URmdo7GeGcbqy05w= Subject key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14CD5FB3B0D45144BB1AF29BB9D7C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60420 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:cd:5f:b3:b0:d4:51:44:bb:1a:f2:9b:b9:d7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:40:26:ef:56:f1:d2:20:ec:da:d9:54:6a: 9a:24:85:d0:4e:96:2a:1d:81:27:9a:0e:b0:4d:95: 51:8b:b7:41:b1:c4:3e:4e:d3:57:58:b7:9a:45:18: f2:ca:1c:5b:b2:fc:8a:51:a3:fa:fc:04:f6:3a:c2: 5b:5a:05:ca:9b:f6:4f:65:39:d8:de:7a:c0:a2:b2: a7:7f:27:f8:2f:c4:60:a1:c8:ac:24:b3:30:9c:78: db:6b:63:d4:09:e3:ea:f9:96:11:af:3c:fd:5a:dc: ed:32:17:a8:1d:6f:72:05:76:7c:33:3f:8c:29:70: 92:01:b1:dd:e0:30:04:81:a3:66:7c:a1:d0:a4:ee: 5d:f4:5f:39:cb:2a:8a:78:64:3b:83:93:6e:c3:85: 5a:ae:6c:ca:3b:4a:82:2f:56:31:de:a7:5c:ca:69: d6:98:2d:c6:7c:41:0b:4c:8d:53:b6:96:2e:c1:74: 67:39:a8:e3:84:cf:cc:aa:45:bb:0a:f7:41:ad:43: 02:33:64:ef:9d:9a:45:a3:23:4a:d5:1f:d3:ac:51: 4e:d9:9c:f5:d7:60:21:88:78:06:43:08:de:a3:38: 38:8c:de:b5:3d:3b:e2:28:26:a6:00:54:14:a3:50: a1:e9:05:85:a2:97:5b:04:aa:29:a6:0e:97:90:9e: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 60420 Signature Algorithm: sha256WithRSAEncryption 33:cd:0f:94:c2:64:14:c6:9f:68:f0:83:da:73:b7:38:16:97: 54:1d:58:b9:aa:d8:87:ce:04:03:fc:a8:9a:48:d5:fd:8c:01: e0:ab:a3:a7:80:e2:84:10:67:bb:7f:af:d1:fc:2c:e0:6b:3b: e7:88:98:02:c7:e0:02:97:ba:37:da:c4:00:cb:78:28:ed:77: 34:67:6a:82:df:67:26:5f:9e:ef:b0:d8:27:32:7d:f7:7f:16: 03:2e:12:58:ee:31:9b:2c:05:15:5b:75:11:9c:04:c2:5b:53: 62:bc:d3:7b:76:e2:c1:18:83:9e:1c:6e:72:17:4f:40:7f:b6: 2f:78:1e:04:c7:43:8f:bc:31:97:85:c5:15:81:2b:5a:07:2b: 5f:b7:42:fc:21:e5:62:31:8a:57:15:c6:2a:43:52:b3:67:da: ef:43:99:19:11:d9:c0:dc:a4:57:78:75:9d:ee:a8:b8:17:4b: e1:89:73:78:30:fc:66:98:f2:0a:54:64:f0:c7:4e:74:3c:27: 65:db:38:ee:3a:a2:b7:43:fb:62:9a:15:bf:df:83:11:97:f2: c8:69:b5:64:83:83:99:b0:28:7a:75:46:e7:c7:6a:26:46:2a: 13:7a:2d:5d:f6:7e:de:16:b6:1a:39:b9:eb:b5:a1:54:be:64: 70:48:19:23 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FM1fs7DUUUS7GvKbudfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDljNWJhNmQ0MGFiNGU0ZTM5YjdiNjliNmQyZDk4NDRhYTI0OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyNAJu9W8dIg7NrZVGqaJIXQTpYq HYEnmg6wTZVRi7dBscQ+TtNXWLeaRRjyyhxbsvyKUaP6/AT2OsJbWgXKm/ZPZTnY 3nrAorKnfyf4L8RgocisJLMwnHjba2PUCePq+ZYRrzz9WtztMheoHW9yBXZ8Mz+M KXCSAbHd4DAEgaNmfKHQpO5d9F85yyqKeGQ7g5Nuw4VarmzKO0qCL1Yx3qdcymnW mC3GfEELTI1TtpYuwXRnOajjhM/MqkW7CvdBrUMCM2TvnZpFoyNK1R/TrFFO2Zz1 12AhiHgGQwjeozg4jN61PTviKCamAFQUo1Ch6QWFopdbBKoppg6XkJ7VmwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIScW6bUCrTk45t7abbS2YRKokivMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzM3YzUx NC04MjEzLTQzOGMtYTE2NC1kOTg0ODdiZGVlNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMzdjNTE0 LTgyMTMtNDM4Yy1hMTY0LWQ5ODQ4N2JkZWU0OC8xL2hKeGJwdFFLdE9Uam0zdHB0 dExaaEVxaVNLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsBDANBgkqhkiG9w0BAQsFAAOCAQEAM80PlMJkFMaf aPCD2nO3OBaXVB1YuarYh84EA/yomkjV/YwB4Kujp4DihBBnu3+v0fws4Gs754iY AsfgApe6N9rEAMt4KO13NGdqgt9nJl+e77DYJzJ9938WAy4SWO4xmywFFVt1EZwE wltTYrzTe3biwRiDnhxuchdPQH+2L3geBMdDj7wxl4XFFYErWgcrX7dC/CHlYjGK VxXGKkNSs2fa70OZGRHZwNykV3h1ne6ouBdL4YlzeDD8ZpjyClRk8MdOdDwnZds4 7jqit0P7YpoVv9+DEZfyyGm1ZIODmbAoenVG58dqJkYqE3otXfZ+3ha2Gjm567Wh VL5kcEgZIw== -----END CERTIFICATE-----Generated at Mon Jan 12 12:31:26 2026 by rpki-client