This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer (raw, json) Hash identifier: rErHYHuZW9XzbN+OTgXIE2WpUjyOXIO2VeNY7TiRbhk= Subject key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA512876C0ABC2C1A2658CDDBAE746E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203322 IP: 185.138.172.0/22 IP: 2a07:fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:12:87:6c:0a:bc:2c:1a:26:58:cd:db:ae:74:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:15:c2:af:10:c6:2d:d8:1c:25:a3:e1:b6: 1b:48:99:9e:d1:cf:f4:8b:45:3d:85:8b:d1:8e:36: 21:1c:80:4b:89:bb:90:1d:43:1f:8b:f1:36:09:0c: 97:5c:d2:f7:4e:b0:fe:21:00:1e:a4:d5:b2:b7:1f: 7e:c8:99:2a:cf:99:e7:c4:29:60:19:97:a7:7c:10: e0:70:56:19:2e:5d:d6:53:d9:b4:09:ac:ca:f1:c6: 54:89:40:db:7a:5b:ee:51:3d:29:fb:c7:3d:20:83: f7:6e:0d:f0:a3:4e:23:bf:b2:e2:6a:03:59:1b:da: 63:81:9e:1e:be:2a:87:4a:93:20:6a:c7:42:aa:ce: 22:df:2c:0f:25:e4:32:f0:c3:9e:56:e9:2f:b9:cd: 98:86:cb:1e:2e:6c:29:a0:af:7a:55:29:4a:5c:d5: 28:6e:79:8b:da:e1:c7:4d:94:94:4a:c6:26:20:46: 99:ec:2e:ac:37:a3:36:c8:7d:01:73:36:78:2b:a2: 48:0f:3a:e6:7c:ef:5c:2e:02:29:0b:a2:36:29:f5: a5:d4:ae:77:c6:aa:a2:1a:b1:b1:85:9b:01:34:e0: 42:88:78:0e:f4:80:ef:64:57:e3:00:ae:53:a9:5c: 1b:ba:f1:d5:f8:8a:3b:d9:11:87:a2:c6:e8:03:db: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.172.0/22 IPv6: 2a07:fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203322 Signature Algorithm: sha256WithRSAEncryption 5a:2d:f1:e0:de:0a:09:12:ae:7d:5a:38:58:58:54:50:19:a8: c2:12:57:1f:75:14:c3:0e:02:69:08:2b:9f:37:18:ca:d5:49: 6a:e2:99:2d:00:c0:9d:fc:21:c1:fd:6c:4f:63:6d:eb:3a:b4: 2a:5e:39:cd:a1:09:df:8a:37:eb:51:1d:3a:f4:c7:94:12:3e: 56:39:7c:0a:b2:76:63:25:a5:c2:e4:b4:e6:c1:9a:5e:ab:18: 57:46:4f:0d:c0:d8:66:34:7b:76:69:87:4f:8f:b5:03:1b:eb: a0:90:19:40:f7:0e:bc:20:7e:00:79:70:f4:b1:5d:18:a5:25: 57:46:33:1b:6c:6a:a2:d8:9c:ce:58:5a:af:21:99:82:6d:9b: 93:23:f0:cd:ce:22:48:83:9a:98:4f:e9:bf:5f:c6:84:07:3e: ab:7c:e8:55:8d:d0:29:13:cd:3c:97:45:08:c5:09:e1:35:78: 53:e2:52:16:46:4f:55:93:0f:cb:41:a4:4b:6b:c4:1e:7a:6f: b5:20:3d:44:9e:a8:28:89:42:df:2f:21:93:52:11:e3:60:a6: 38:93:c8:3c:5c:79:c4:62:6f:b8:aa:d9:05:b7:b5:42:fe:f4: 92:d7:15:eb:51:76:89:89:71:5b:22:13:a3:7d:94:b7:02:63: ce:b2:5b:e3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pRKHbAq8LBomWM3brnRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmM4NmM4YzJkNDk1YzllYmU0MjY2NWExNTEzZGU2OWE5YmY2NTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj4Vwq8Qxi3YHCWj4bYbSJme0c/0 i0U9hYvRjjYhHIBLibuQHUMfi/E2CQyXXNL3TrD+IQAepNWytx9+yJkqz5nnxClg GZenfBDgcFYZLl3WU9m0CazK8cZUiUDbelvuUT0p+8c9IIP3bg3wo04jv7LiagNZ G9pjgZ4eviqHSpMgasdCqs4i3ywPJeQy8MOeVukvuc2YhsseLmwpoK96VSlKXNUo bnmL2uHHTZSUSsYmIEaZ7C6sN6M2yH0BczZ4K6JIDzrmfO9cLgIpC6I2KfWl1K53 xqqiGrGxhZsBNOBCiHgO9IDvZFfjAK5TqVwbuvHV+Io72RGHosboA9sVOQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOvIbIwtSVyevkJmWhUT3mmpv2VTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzBiMjUy ZC1kYjRjLTQyNTYtYWIwNi0wNmQxNGNmMGE0NmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvMGIyNTJk LWRiNGMtNDI1Ni1hYjA2LTA2ZDE0Y2YwYTQ2Yi8xLzY4aHNqQzFKWEo2LVFtWmFG UlBlYWFtX1pWTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYqsMA0EAgACMAcDBQMqBw/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMaOjANBgkqhkiG9w0BAQsFAAOCAQEAWi3x4N4KCRKu fVo4WFhUUBmowhJXH3UUww4CaQgrnzcYytVJauKZLQDAnfwhwf1sT2Nt6zq0Kl45 zaEJ34o361EdOvTHlBI+Vjl8CrJ2YyWlwuS05sGaXqsYV0ZPDcDYZjR7dmmHT4+1 AxvroJAZQPcOvCB+AHlw9LFdGKUlV0YzG2xqoticzlharyGZgm2bkyPwzc4iSIOa mE/pv1/GhAc+q3zoVY3QKRPNPJdFCMUJ4TV4U+JSFkZPVZMPy0GkS2vEHnpvtSA9 RJ6oKIlC3y8hk1IR42CmOJPIPFx5xGJvuKrZBbe1Qv70ktcV61F2iYlxWyITo32U twJjzrJb4w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:35 2026 by rpki-client