This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer (raw, json) Hash identifier: ZZfOPFNsMEIkKSmdaPQZ3eqUgRa9YArYqq0PjzaCN0A= Subject key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78352A6BB2E8816CB0AB5EC3D286DCBF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212997 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2a:6b:b2:e8:81:6c:b0:ab:5e:c3:d2:86:dc:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8738bf1cc1381678038ef5da67642398e3d9819f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:95:9a:3e:5c:aa:40:af:b4:bb:23:1d:2d: 52:5d:a4:6c:22:16:01:eb:fb:9e:57:d0:99:3a:01: 30:ff:58:f9:d3:30:41:17:47:78:d9:a8:0a:c8:02: 7c:62:99:21:8d:0f:1b:12:3d:b0:1f:53:de:77:b4: 5c:c1:65:21:5b:59:09:59:94:12:bc:72:eb:55:dd: 14:ed:da:f9:1f:1f:53:e8:ea:65:f9:f6:f5:6e:fd: f2:1b:65:a0:9e:6c:d4:c4:71:57:2f:95:bd:e4:21: 40:01:76:40:93:b9:16:31:82:6d:8a:59:59:02:a4: f6:80:ce:0a:12:25:cc:60:2f:3a:65:ef:63:e3:38: d0:08:b0:3e:54:55:27:9e:6e:3b:51:5b:d7:90:3b: c8:65:2b:87:24:22:69:1b:d4:27:30:fe:8d:ac:9e: e4:67:d5:05:70:14:1e:66:07:1d:5d:02:45:95:0c: 61:b7:45:ec:94:9c:63:59:8f:35:df:c7:70:16:31: 27:fc:46:4c:5f:45:70:3a:bb:e2:7d:6b:2c:04:a0: 2e:49:f6:23:f2:b4:12:33:7b:09:3d:31:0d:8d:63: ee:cb:62:f2:ed:b5:f9:d9:7f:11:40:7f:e1:81:27: c2:2c:bb:a5:19:5c:39:0a:60:bb:02:fc:70:75:00: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212997 Signature Algorithm: sha256WithRSAEncryption 06:85:55:33:1e:73:39:b1:4c:44:9d:93:57:2c:14:16:62:0e: c7:73:d4:03:7a:0e:41:18:8b:ec:6b:32:5c:1d:20:02:e4:7a: 96:68:39:8b:89:30:1f:4e:e9:ad:1a:35:ba:58:a7:ab:57:14: e7:8c:e7:86:62:16:fb:42:77:6a:a2:06:38:31:1e:22:cc:40: cd:69:bd:60:1f:f2:37:96:c5:38:2c:f0:bc:a3:cd:06:f7:16: bf:7f:c6:48:84:6c:68:1c:1f:4d:08:c3:61:e1:0e:b4:43:13: c8:fc:0f:3b:35:b3:ac:84:8f:10:ab:d5:6c:6d:ff:d9:49:7c: 7c:fd:e9:d6:91:6d:88:50:79:52:12:43:3f:8e:b0:cc:f0:45: 82:d0:0a:6a:f4:0f:0a:da:f5:e8:28:f6:27:94:04:08:98:9f: dd:f7:9c:e9:4e:13:0a:e4:4e:ed:21:3a:8b:7b:f2:16:d7:41: 30:ff:e4:11:44:93:d7:2f:a4:d7:e5:07:14:de:70:12:69:66: bf:17:7b:74:86:79:a6:6b:12:42:87:4e:7d:48:e3:75:87:53: 77:f8:4d:9a:48:b7:d6:94:52:51:ff:a1:51:fe:5f:a2:78:21: ee:e9:7c:34:97:fa:80:5a:ad:56:b3:b1:2b:e0:21:34:8f:76: 4e:f4:63:13 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NSprsuiBbLCrXsPShty/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzM4YmYxY2MxMzgxNjc4MDM4ZWY1ZGE2NzY0MjM5OGUzZDk4MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaaVmj5cqkCvtLsjHS1SXaRsIhYB 6/ueV9CZOgEw/1j50zBBF0d42agKyAJ8YpkhjQ8bEj2wH1Ped7RcwWUhW1kJWZQS vHLrVd0U7dr5Hx9T6Opl+fb1bv3yG2WgnmzUxHFXL5W95CFAAXZAk7kWMYJtillZ AqT2gM4KEiXMYC86Ze9j4zjQCLA+VFUnnm47UVvXkDvIZSuHJCJpG9QnMP6NrJ7k Z9UFcBQeZgcdXQJFlQxht0XslJxjWY8138dwFjEn/EZMX0VwOrvifWssBKAuSfYj 8rQSM3sJPTENjWPuy2Ly7bX52X8RQH/hgSfCLLulGVw5CmC7AvxwdQCSDQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIc4vxzBOBZ4A4712mdkI5jj2YGfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzFiMjhl Yi1iNWFjLTQ2ZmMtODk2Yi01MWY3M2NkMTI1YmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMWIyOGVi LWI1YWMtNDZmYy04OTZiLTUxZjczY2QxMjViZi8xL2h6aV9ITUU0Rm5nRGp2WGFa MlFqbU9QWmdaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNABTANBgkqhkiG9w0BAQsFAAOCAQEABoVVMx5zObFM RJ2TVywUFmIOx3PUA3oOQRiL7GsyXB0gAuR6lmg5i4kwH07prRo1ulinq1cU54zn hmIW+0J3aqIGODEeIsxAzWm9YB/yN5bFOCzwvKPNBvcWv3/GSIRsaBwfTQjDYeEO tEMTyPwPOzWzrISPEKvVbG3/2Ul8fP3p1pFtiFB5UhJDP46wzPBFgtAKavQPCtr1 6Cj2J5QECJif3fec6U4TCuRO7SE6i3vyFtdBMP/kEUST1y+k1+UHFN5wEmlmvxd7 dIZ5pmsSQodOfUjjdYdTd/hNmki31pRSUf+hUf5fongh7ul8NJf6gFqtVrOxK+Ah NI92TvRjEw== -----END CERTIFICATE-----Generated at Thu Jan 1 18:00:34 2026 by rpki-client