This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer (raw, json) Hash identifier: JxVxSG/3wOrOn2294tUOqC3UViCUSxBjiymc81OD588= Subject key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66F6F0AB64D55C216289781341881 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.10.199.0/24 IP: 2a00:8940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6f:6f:0a:b6:4d:55:c2:16:28:97:81:34:18:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:e1:79:46:e8:2a:5e:a8:ca:a0:48:48:61: 27:58:69:c5:5e:56:24:ad:d8:9c:6a:bc:fa:6d:dd: dd:13:95:bf:6d:2b:d0:de:78:69:5c:4c:7a:25:f0: f2:9e:48:7c:5d:02:f5:78:4d:d5:34:93:20:1e:27: a2:e9:8d:39:88:70:f5:58:45:d8:3e:3f:f1:91:75: 71:bf:03:1a:56:ca:de:32:b4:70:1a:92:34:86:5a: 73:85:f7:9d:a4:c3:d8:54:dd:c7:d2:7e:81:db:2d: 4c:1c:0e:77:53:4e:d1:73:57:b7:61:d9:2b:62:e8: 0c:2f:d9:3c:4a:dc:b6:16:15:b2:cd:c2:26:19:69: bf:20:f8:e4:87:92:b1:13:3d:44:d6:d0:24:fd:51: 69:a0:74:c8:c5:ca:c6:9c:a1:50:bd:b8:e4:bb:a2: 40:cd:03:8a:c5:0b:ef:27:16:eb:88:1b:6a:26:1b: 30:40:08:12:ae:23:b6:55:bd:52:a1:d8:06:7e:c3: da:c7:3d:01:10:b2:8a:44:37:e1:eb:14:d9:c0:36: f2:0c:dc:ef:08:8d:81:71:83:f5:2f:b7:38:9b:7f: 85:51:cd:09:d7:49:2c:a7:3b:54:7d:3e:65:ba:e4: dd:a1:ec:cc:40:52:a1:84:84:ff:38:b3:9f:96:26: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.199.0/24 IPv6: 2a00:8940::/29 Signature Algorithm: sha256WithRSAEncryption 55:59:20:4a:f6:25:bb:fc:80:a1:74:e3:4f:ba:cf:61:4b:78: b3:60:59:0b:d7:e1:f4:8d:2b:8f:61:f8:01:25:ba:aa:bf:85: d6:a3:b6:0e:05:88:1e:2d:0b:65:e1:95:52:8f:dd:60:0e:32: ae:b2:ff:92:8a:c1:8e:d0:51:15:2f:78:af:9f:32:0a:c2:35: 5f:db:cf:72:98:c8:ea:f3:10:d3:3f:2f:06:16:2e:05:08:a4: 0c:de:b9:8d:15:f1:b2:6f:8f:e7:28:a6:b3:17:22:ee:7b:bb: d1:b1:97:6b:2e:e9:35:6b:b5:fb:b1:93:cd:fb:44:fd:7e:e1: be:81:2b:5e:38:bf:03:6d:8e:73:c4:0d:b3:18:62:95:1c:50: 0f:44:7b:d3:ed:bb:fa:7b:8d:e5:04:cd:fb:8f:06:be:c6:eb: 20:e5:55:56:52:24:3f:33:a5:22:bf:03:d9:da:5c:f4:85:3e: 95:3c:a7:15:cd:60:13:58:6c:5d:77:6e:a5:ab:4f:a5:4c:7e: 63:9a:b7:5c:8b:82:57:8f:36:ec:a9:7c:cc:a9:64:9a:ae:f1: a9:13:9d:eb:05:4b:93:15:40:0d:94:47:96:6a:e5:7c:72:34: 11:7e:f6:99:99:73:a7:a0:4a:e1:85:94:6e:90:43:4e:32:06: 7c:b6:df:de -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xm9vCrZNVcIWKJeBNBiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmY0MTI5YWY4NjlmNmY1Yzg1YTczODg4MDhhYWQwYWMwYmE5YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRzheUboKl6oyqBISGEnWGnFXlYk rdicarz6bd3dE5W/bSvQ3nhpXEx6JfDynkh8XQL1eE3VNJMgHiei6Y05iHD1WEXY Pj/xkXVxvwMaVsreMrRwGpI0hlpzhfedpMPYVN3H0n6B2y1MHA53U07Rc1e3Ydkr YugML9k8Sty2FhWyzcImGWm/IPjkh5KxEz1E1tAk/VFpoHTIxcrGnKFQvbjku6JA zQOKxQvvJxbriBtqJhswQAgSriO2Vb1SodgGfsPaxz0BELKKRDfh6xTZwDbyDNzv CI2BcYP1L7c4m3+FUc0J10kspztUfT5luuTdoezMQFKhhIT/OLOflibfBwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIb0Epr4afb1yFpziICKrQrAupxPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzMxOTFl Yy1jZThmLTQ1NzYtYTk0MC1jYzUwMTA3ZWExNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMzE5MWVj LWNlOGYtNDU3Ni1hOTQwLWNjNTAxMDdlYTE0Ni8xL2h2UVNtdmhwOXZYSVduT0ln SXF0Q3NDNm5FOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwwrHMA0EAgACMAcDBQMqAIlAMA0GCSqGSIb3 DQEBCwUAA4IBAQBVWSBK9iW7/IChdONPus9hS3izYFkL1+H0jSuPYfgBJbqqv4XW o7YOBYgeLQtl4ZVSj91gDjKusv+SisGO0FEVL3ivnzIKwjVf289ymMjq8xDTPy8G Fi4FCKQM3rmNFfGyb4/nKKazFyLue7vRsZdrLuk1a7X7sZPN+0T9fuG+gSteOL8D bY5zxA2zGGKVHFAPRHvT7bv6e43lBM37jwa+xusg5VVWUiQ/M6UivwPZ2lz0hT6V PKcVzWATWGxdd26lq0+lTH5jmrdci4JXjzbsqXzMqWSarvGpE53rBUuTFUANlEeW auV8cjQRfvaZmXOnoErhhZRukENOMgZ8tt/e -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:12 2026 by rpki-client