This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer File: 1-hskeN_g8zonixP0LdMZYB1jeKg.cer (raw, json) Hash identifier: RcMc43cWuRmERWiY0PSaeRLT+2FNDgEWvm+RQl0n4Cc= Subject key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B071D6911E1CDF92E79B48589A16970A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 07:15:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 207647 IP: 87.239.8.0/21 IP: 2001:678:be4::/48 IP: 2a13:da40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:1d:69:11:e1:cd:f9:2e:79:b4:85:89:a1:69:70:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 07:15:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:72:51:4c:ba:03:4b:15:00:f9:55:f3:c5:da: 0e:01:04:05:ba:e6:35:87:1f:55:15:cb:42:57:f0: a2:23:2a:89:10:cc:42:13:4c:5b:11:69:5e:f5:5f: 4c:d4:26:e2:ca:46:ea:b1:27:53:e3:98:50:08:84: 10:02:4e:59:68:40:f3:8c:c3:34:20:b1:44:74:00: 09:69:a9:30:80:0d:18:ea:c1:d8:a7:58:fc:72:84: d8:0a:66:72:c7:b5:4e:28:02:c9:40:ac:f3:6a:aa: a9:1b:b0:17:d2:96:71:08:43:9b:2f:34:30:0b:95: 8b:76:07:ba:67:be:1f:32:30:35:df:58:67:09:1a: 1d:43:ec:56:42:aa:ac:d4:9e:d2:31:8f:38:81:87: 15:61:92:d7:4d:1e:f5:12:da:b4:72:b2:16:6b:1b: 32:4c:87:20:84:19:44:1b:d6:8b:81:7d:50:7b:a8: 3a:c7:9c:7f:51:ef:5c:e7:f8:1f:d0:52:08:b6:03: a3:f4:59:26:88:02:18:5e:55:d5:50:2b:58:8d:ab: 66:3f:c2:42:a8:72:9f:69:7d:69:d4:25:08:fa:69: c3:00:9d:68:3f:4c:f8:24:02:da:5f:10:48:b1:c1: 86:ca:82:9c:6a:00:61:fb:62:81:0d:8f:4f:f1:5b: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.8.0/21 IPv6: 2001:678:be4::/48 2a13:da40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207647 Signature Algorithm: sha256WithRSAEncryption 62:4a:0d:6f:ae:c6:d5:19:c9:b1:db:71:9a:7d:81:ad:a2:18: e6:cf:b9:85:a3:ec:69:91:aa:da:3d:c4:f7:50:7e:a8:08:81: f1:d7:98:c0:c3:bf:fb:fa:85:05:2d:ed:84:ec:eb:4b:ad:fb: 23:6d:da:e2:45:95:d5:c4:41:1e:7f:28:7e:74:b6:08:49:f7: f5:7f:56:da:89:78:42:04:dd:8a:1c:98:09:b9:bf:14:5b:b1: cc:d6:df:e7:3d:93:52:6d:26:b7:cc:3f:91:7a:c9:09:e2:f0: 68:1e:9d:13:1f:3d:b4:7e:5b:19:c1:55:dd:ce:b5:60:47:14: 4c:42:ea:e4:19:0c:63:55:38:16:75:1c:fe:da:1b:c0:30:de: 94:15:b3:ee:74:d8:3d:e5:c8:a3:b7:2f:2b:fc:3e:b9:cd:11: 3b:00:1f:7e:3f:ac:cb:9e:85:b1:d0:fd:3e:99:05:c8:ac:84: c5:16:2c:1c:49:27:d5:22:75:40:85:a5:ac:59:67:e7:80:c4: 8e:15:57:84:8d:1a:7c:10:69:b2:8a:cd:36:eb:b7:17:ed:74: 70:a2:8b:f8:13:22:26:e0:85:86:34:7b:42:d1:b0:b5:4c:d5: 35:15:82:ff:ac:21:80:4c:4b:8c:b3:9b:cd:82:47:8d:22:db: 08:98:e6:04 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZsHHWkR4c35Lnm0hYmhaXCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMDcxNTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTFiMjQ3OGRmZTBmMzNhMjc4YjEzZjQyZGQzMTk2MDFkNjM3OGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnJRTLoDSxUA+VXzxdoOAQQFuuY1 hx9VFctCV/CiIyqJEMxCE0xbEWle9V9M1CbiykbqsSdT45hQCIQQAk5ZaEDzjMM0 ILFEdAAJaakwgA0Y6sHYp1j8coTYCmZyx7VOKALJQKzzaqqpG7AX0pZxCEObLzQw C5WLdge6Z74fMjA131hnCRodQ+xWQqqs1J7SMY84gYcVYZLXTR71Etq0crIWaxsy TIcghBlEG9aLgX1Qe6g6x5x/Ue9c5/gf0FIItgOj9FkmiAIYXlXVUCtYjatmP8JC qHKfaX1p1CUI+mnDAJ1oP0z4JALaXxBIscGGyoKcagBh+2KBDY9P8VudoQIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFPobJHjf4PM6J4sT9C3TGWAdY3ioMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzA4YTlj OC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJjNjUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4 LTRiZTMtNDY4Mi1hZjgyLTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAw TGRNWllCMWplS2cubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEF BQcBBwEB/wQoMCYwDAQCAAEwBgMEA1fvCDAWBAIAAjAQAwcAIAEGeAvkAwUDKhPa QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDKx8wDQYJKoZIhvcNAQELBQADggEB AGJKDW+uxtUZybHbcZp9ga2iGObPuYWj7GmRqto9xPdQfqgIgfHXmMDDv/v6hQUt 7YTs60ut+yNt2uJFldXEQR5/KH50tghJ9/V/VtqJeEIE3YocmAm5vxRbsczW3+c9 k1JtJrfMP5F6yQni8GgenRMfPbR+WxnBVd3OtWBHFExC6uQZDGNVOBZ1HP7aG8Aw 3pQVs+502D3lyKO3Lyv8PrnNETsAH34/rMuehbHQ/T6ZBcishMUWLBxJJ9UidUCF paxZZ+eAxI4VV4SNGnwQabKKzTbrtxftdHCii/gTIibghYY0e0LRsLVM1TUVgv+s IYBMS4yzm82CR40i2wiY5gQ= -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:48 2025 by rpki-client