This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer (raw, json) Hash identifier: f7OHD7N0sgYVUG60sZhBft8mJOPhowyT3CQgTBMZwDg= Subject key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A324F52EF82D5C0FEF0AEA8F8D9DFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.117.236.0/22 IP: 2a06:94c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:24:f5:2e:f8:2d:5c:0f:ef:0a:ea:8f:8d:9d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84df54bdc104106cdb299e01ef08a60985ec35fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:d7:33:5b:f8:f4:b4:27:60:7c:81:01:8f: a8:2a:c2:d5:02:ce:8b:57:8d:45:15:57:31:5e:4f: c8:ab:e8:0a:7e:19:1c:6f:54:84:4b:c2:03:38:33: bd:4e:d9:c4:ad:70:a9:52:f8:21:56:44:98:a2:7e: 53:5c:b6:77:b5:44:e0:2f:d8:4c:69:66:2a:1a:21: 77:6d:53:4c:84:59:23:88:64:78:ac:ab:2a:bd:92: 29:c0:38:fc:75:fe:8e:5b:41:24:80:4e:32:74:da: 7b:9e:3b:e9:b7:5e:e0:2d:52:7c:e3:a2:60:8a:b6: f6:29:b1:3c:1d:81:fe:a5:1d:05:95:7c:ae:5b:ad: ca:71:f8:8a:d1:a6:da:12:7a:20:22:38:42:76:6e: fe:8c:0a:16:c4:98:e7:e1:20:d3:60:51:ce:ae:8c: 35:c6:ea:5f:cb:b4:d1:c8:57:cc:ba:f2:cb:87:91: 35:30:28:3f:ae:bb:1c:10:99:eb:81:22:25:6c:6c: f1:26:a6:c5:f6:3e:43:68:ad:7d:29:9d:c9:0e:49: a0:4a:53:52:0e:9c:46:2c:8b:5e:f9:81:d2:6c:79: db:ca:03:62:b8:15:92:c9:31:e9:78:87:5b:61:be: c7:51:f0:40:69:d7:64:46:ec:4e:7d:27:58:3f:bb: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.236.0/22 IPv6: 2a06:94c0::/29 Signature Algorithm: sha256WithRSAEncryption a0:d1:d7:cd:cc:ba:e8:fd:1d:79:88:3c:ba:4c:6e:22:24:43: ee:45:44:20:8a:56:1f:29:74:25:96:6d:e0:15:83:84:03:2a: 0f:da:56:c9:91:6e:ea:98:8b:d7:98:c2:99:12:01:ce:af:19: af:4b:ba:45:c3:70:9a:9b:db:02:8a:91:97:80:29:d8:4d:68: b0:97:0c:6c:72:0b:8d:9b:ac:23:dd:9f:36:23:7b:50:da:1d: 82:c7:ee:1c:53:ba:df:a6:4e:1d:10:4e:ad:cb:3d:4d:a6:82: b4:02:ef:72:ef:0e:b2:06:d6:3f:88:38:d6:24:b5:50:ae:c9: a2:fc:1b:03:72:84:9f:0e:7e:a8:91:1c:d9:db:6e:24:c0:dd: 80:39:5c:72:c9:15:a4:2f:35:2a:9e:ad:20:93:68:66:65:ae: 93:9b:f6:46:84:50:53:cf:9f:9f:fb:48:07:3b:77:ca:f4:69: ec:51:2c:97:9b:1f:b8:94:56:b8:35:09:c8:73:bf:c8:30:59: 6f:5d:d0:ac:3f:c0:ca:86:f0:53:70:6e:cb:c9:0c:16:d3:9e: 47:0a:ea:2d:2f:86:ae:9d:05:d5:e1:42:64:05:6c:3e:e4:b8: 47:31:fd:7b:50:42:50:e1:9e:19:55:bd:d2:93:e2:13:58:54: 08:77:4e:6f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4oyT1LvgtXA/vCuqPjZ36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGRmNTRiZGMxMDQxMDZjZGIyOTllMDFlZjA4YTYwOTg1ZWMzNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt3XM1v49LQnYHyBAY+oKsLVAs6L V41FFVcxXk/Iq+gKfhkcb1SES8IDODO9TtnErXCpUvghVkSYon5TXLZ3tUTgL9hM aWYqGiF3bVNMhFkjiGR4rKsqvZIpwDj8df6OW0EkgE4ydNp7njvpt17gLVJ846Jg irb2KbE8HYH+pR0FlXyuW63KcfiK0abaEnogIjhCdm7+jAoWxJjn4SDTYFHOrow1 xupfy7TRyFfMuvLLh5E1MCg/rrscEJnrgSIlbGzxJqbF9j5DaK19KZ3JDkmgSlNS DpxGLIte+YHSbHnbygNiuBWSyTHpeIdbYb7HUfBAaddkRuxOfSdYP7vbwQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFITfVL3BBBBs2ymeAe8IpgmF7DX7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2Y5M2Rh Mi0xNDU3LTRjZDktOTA3My04MDZhMzE1ZGQxZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvZjkzZGEy LTE0NTctNGNkOS05MDczLTgwNmEzMTVkZDFmZC8xL2hOOVV2Y0VFRUd6YktaNEI3 d2ltQ1lYc05mcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXXsMA0EAgACMAcDBQMqBpTAMA0GCSqGSIb3 DQEBCwUAA4IBAQCg0dfNzLro/R15iDy6TG4iJEPuRUQgilYfKXQllm3gFYOEAyoP 2lbJkW7qmIvXmMKZEgHOrxmvS7pFw3Cam9sCipGXgCnYTWiwlwxscguNm6wj3Z82 I3tQ2h2Cx+4cU7rfpk4dEE6tyz1NpoK0Au9y7w6yBtY/iDjWJLVQrsmi/BsDcoSf Dn6okRzZ224kwN2AOVxyyRWkLzUqnq0gk2hmZa6Tm/ZGhFBTz5+f+0gHO3fK9Gns USyXmx+4lFa4NQnIc7/IMFlvXdCsP8DKhvBTcG7LyQwW055HCuotL4aunQXV4UJk BWw+5LhHMf17UEJQ4Z4ZVb3Sk+ITWFQId05v -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:53 2026 by rpki-client