This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer File: HCQvLpRcanLuKPjIDoDUiEM-N6M.cer (raw, json) Hash identifier: gZHg4aMHeY3GIiG1c/CI4S6z383WJx1Xuwt+am9ye+k= Subject key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35572ADCFA74B80B368B9400CA3A3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207024 IP: 195.14.104.0/24 IP: 2a12:b1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:57:2a:dc:fa:74:b8:0b:36:8b:94:00:ca:3a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c4:db:ee:8c:04:94:56:3c:ea:c2:a0:d4:68: d8:5c:0e:32:70:ed:b6:88:29:e9:22:66:d6:dc:f0: 1d:b0:5c:02:5d:5c:2c:c2:4c:f0:39:ae:45:c9:2a: 80:cb:8b:e6:eb:59:9f:98:98:ce:cd:75:13:b7:17: 93:de:70:8c:0d:2b:97:54:ff:47:1c:57:d1:03:a5: 0a:76:da:0c:bd:96:b2:31:09:0f:44:7a:b3:57:b5: af:43:f4:b5:ea:28:f1:40:b5:ef:89:cd:01:06:1c: cb:97:0f:fe:5e:0d:9a:cb:c5:ba:ba:1f:7a:00:35: 45:2b:0b:49:72:02:b7:85:fb:b8:3a:81:13:2c:2e: ad:d1:d8:76:26:06:f4:d6:1d:ca:f2:9a:76:e7:42: 3f:2c:d6:fc:03:2a:c1:ed:c5:be:3d:df:5f:47:7b: 99:2e:d4:fe:b9:fc:7f:9f:91:84:32:bf:a8:c7:07: 6a:08:d5:0c:7d:20:6a:e1:32:c2:54:a8:bb:f5:23: 45:46:6f:4e:fe:2a:39:35:4b:21:ba:d8:9b:ff:ca: 66:ff:ed:de:0d:6f:73:ec:da:08:63:39:f5:a5:d8: f2:44:d2:71:5c:10:c1:87:22:1b:6f:71:a7:83:5b: e9:1f:e6:8d:c0:ea:13:24:df:5c:d5:18:52:7d:ad: 28:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.14.104.0/24 IPv6: 2a12:b1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207024 Signature Algorithm: sha256WithRSAEncryption 3d:e0:cb:f6:10:e4:54:db:98:47:b4:50:0e:35:05:e4:ef:e5: fe:97:e6:70:35:b5:ce:cb:69:e2:57:6c:46:32:37:54:49:d3: c9:45:f6:27:25:f0:55:d2:c0:d5:f1:4f:14:40:5d:57:8a:f9: 65:14:2a:eb:2b:fc:98:fe:bc:78:45:a5:da:3e:fb:40:15:e7: 50:29:a2:69:68:4f:a8:73:46:06:c9:ed:5d:1b:18:95:50:8c: 7e:e0:a3:4b:ee:b9:3d:f7:ec:4b:45:c8:7b:f7:07:4b:ce:1d: 7f:c1:37:5b:69:c3:e6:a6:4a:f0:f8:f9:9e:b7:c9:3b:07:96: 79:4c:e3:45:c3:7f:a3:50:80:49:27:7b:50:d7:14:be:e4:b8: 40:4f:29:2c:ec:d1:8b:20:d9:e8:6d:87:12:7b:44:75:dc:a7: 7a:49:83:0d:63:ca:ba:4c:d2:07:81:79:42:18:6f:db:11:bf: c7:9a:93:eb:d1:4f:b1:af:89:df:2a:4c:e8:dc:7a:f8:56:88: 69:fc:69:5c:0f:65:41:b2:91:94:20:da:f9:89:70:56:3b:b2: 87:72:3d:10:1d:9e:50:89:21:6e:8a:71:c4:1d:8d:37:06:b1: 3c:31:03:5a:b2:79:c1:c3:48:55:86:f8:44:b4:71:c8:ae:b7: 26:6d:92:f8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NVcq3Pp0uAs2i5QAyjo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzI0MmYyZTk0NWM2YTcyZWUyOGY4YzgwZTgwZDQ4ODQzM2UzN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MTb7owElFY86sKg1GjYXA4ycO22 iCnpImbW3PAdsFwCXVwswkzwOa5FySqAy4vm61mfmJjOzXUTtxeT3nCMDSuXVP9H HFfRA6UKdtoMvZayMQkPRHqzV7WvQ/S16ijxQLXvic0BBhzLlw/+Xg2ay8W6uh96 ADVFKwtJcgK3hfu4OoETLC6t0dh2Jgb01h3K8pp250I/LNb8AyrB7cW+Pd9fR3uZ LtT+ufx/n5GEMr+oxwdqCNUMfSBq4TLCVKi79SNFRm9O/io5NUshutib/8pm/+3e DW9z7NoIYzn1pdjyRNJxXBDBhyIbb3Gng1vpH+aNwOoTJN9c1RhSfa0o8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFBwkLy6UXGpy7ij4yA6A1IhDPjejMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2IzNDQ5 Yi0yN2NiLTQwZDEtYjdhYS1jYTc4ZWY1ODI2Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYjM0NDli LTI3Y2ItNDBkMS1iN2FhLWNhNzhlZjU4MjZjYS8xL0hDUXZMcFJjYW5MdUtQaklE b0RVaUVNLU42TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAww5oMA0EAgACMAcDBQMqErHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMosDANBgkqhkiG9w0BAQsFAAOCAQEAPeDL9hDkVNuY R7RQDjUF5O/l/pfmcDW1zstp4ldsRjI3VEnTyUX2JyXwVdLA1fFPFEBdV4r5ZRQq 6yv8mP68eEWl2j77QBXnUCmiaWhPqHNGBsntXRsYlVCMfuCjS+65PffsS0XIe/cH S84df8E3W2nD5qZK8Pj5nrfJOweWeUzjRcN/o1CASSd7UNcUvuS4QE8pLOzRiyDZ 6G2HEntEddynekmDDWPKukzSB4F5Qhhv2xG/x5qT69FPsa+J3ypM6Nx6+FaIafxp XA9lQbKRlCDa+YlwVjuyh3I9EB2eUIkhbopxxB2NNwaxPDEDWrJ5wcNIVYb4RLRx yK63Jm2S+A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:42 2026 by rpki-client