This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer File: HDotyHGc8y1ZegUekO2VAmg15Pg.cer (raw, json) Hash identifier: DhKMQonpN1SQZLpcpMn4gvy1kAmFZmuD7e7TAlcIZ4Q= Subject key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77594CAE8135106CBA7BDFC163618A2B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216425 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4c:ae:81:35:10:6c:ba:7b:df:c1:63:61:8a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:50:ba:17:cd:1e:49:d9:5a:fc:76:07:5f: a1:99:a7:c5:a8:2c:e2:cb:ec:86:b4:f6:a4:eb:67: ba:d6:5d:dd:41:42:84:9b:45:03:54:06:db:5d:81: 95:4c:cf:2c:1e:ff:cc:77:ef:42:80:1d:fb:aa:2c: 77:d9:24:8d:01:a4:ea:1e:7e:f3:ac:6e:2c:5a:e7: 5a:f2:ed:b3:29:ca:51:83:d2:2b:65:67:6b:8c:82: 7b:ad:63:9e:31:6b:8b:ed:eb:dc:d2:d7:30:b6:4f: 2e:4c:fb:83:b4:9a:c7:db:a6:99:02:e9:42:77:7b: 70:f4:20:ee:08:c3:ea:ea:00:f6:55:f4:5f:6b:ab: a1:02:6a:35:5e:f0:99:27:76:a2:50:5a:3b:6b:cd: 08:31:df:fc:40:f8:02:14:da:d0:61:18:71:32:30: 6c:4c:a5:6c:b7:7b:8c:75:a6:66:4b:ec:2b:8a:d6: 3c:47:56:59:1e:be:91:b5:10:f1:da:9d:46:6a:16: 1d:3a:ef:4b:74:74:aa:66:f9:2c:e4:7b:43:f0:4d: cf:b0:db:cd:d3:85:9a:d8:5d:a4:09:d9:6c:d9:26: 84:94:6e:1c:40:05:40:5e:ff:c1:d5:d8:47:4a:ce: b5:ff:1d:f0:92:3c:c5:9b:7d:a1:93:ae:58:1f:8d: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216425 Signature Algorithm: sha256WithRSAEncryption 1b:81:4f:58:df:e6:b8:f9:08:e2:2f:c7:95:50:ac:7c:50:f4: bd:a5:9b:bc:3f:1f:fc:23:a8:01:f1:13:ff:79:64:02:d3:51: 92:d6:06:55:0d:36:82:c3:07:c8:b5:31:19:dc:fc:f4:a8:3c: 0b:9d:c3:b8:92:e1:a0:c9:34:21:f6:17:82:65:7d:2f:e6:ae: cd:10:64:3a:94:49:f5:ff:b5:1f:50:63:79:27:2c:72:95:28: bd:b7:f3:99:b4:4e:96:17:2b:e0:e6:f9:7a:98:0a:63:7d:a6: b0:73:77:db:03:47:96:5a:6b:9c:89:a0:63:83:7a:2d:f2:f9: ad:4c:fb:2c:8e:90:bd:42:f7:e4:17:59:a0:12:c6:1b:1f:2b: f1:59:32:a5:ea:8c:6d:43:5d:a9:5d:17:86:6d:2e:83:75:c5: bf:4c:3c:b7:f1:e7:0c:78:df:ee:cf:b7:3d:55:0e:3e:70:8f: 7f:1d:68:ed:25:4d:65:42:e9:71:c3:e9:82:0f:a3:71:1e:5b: 79:ba:5f:08:64:42:fe:77:db:88:75:a6:dd:4e:33:1f:80:b9: f3:ac:ef:27:60:52:35:47:60:72:e2:57:d6:ed:b2:fa:6c:26: 61:b3:9b:7b:7c:51:be:3a:ce:60:a8:1d:24:bf:19:a8:e0:98: e6:16:80:ac -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WUyugTUQbLp738FjYYorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzNhMmRjODcxOWNmMzJkNTk3YTA1MWU5MGVkOTUwMjY4MzVlNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdRQuhfNHknZWvx2B1+hmafFqCzi y+yGtPak62e61l3dQUKEm0UDVAbbXYGVTM8sHv/Md+9CgB37qix32SSNAaTqHn7z rG4sWuda8u2zKcpRg9IrZWdrjIJ7rWOeMWuL7evc0tcwtk8uTPuDtJrH26aZAulC d3tw9CDuCMPq6gD2VfRfa6uhAmo1XvCZJ3aiUFo7a80IMd/8QPgCFNrQYRhxMjBs TKVst3uMdaZmS+writY8R1ZZHr6RtRDx2p1GahYdOu9LdHSqZvks5HtD8E3PsNvN 04Wa2F2kCdls2SaElG4cQAVAXv/B1dhHSs61/x3wkjzFm32hk65YH41vqQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFBw6LchxnPMtWXoFHpDtlQJoNeT4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2ExNGZk ZC0yZWM4LTQ0YzgtYTQ3MC1hNjY1NjUxZmNiMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvYTE0ZmRk LTJlYzgtNDRjOC1hNDcwLWE2NjU2NTFmY2IyMC8xL0hEb3R5SEdjOHkxWmVnVWVr TzJWQW1nMTVQZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNNaTANBgkqhkiG9w0BAQsFAAOCAQEAG4FPWN/muPkI 4i/HlVCsfFD0vaWbvD8f/COoAfET/3lkAtNRktYGVQ02gsMHyLUxGdz89Kg8C53D uJLhoMk0IfYXgmV9L+auzRBkOpRJ9f+1H1BjeScscpUovbfzmbROlhcr4Ob5epgK Y32msHN32wNHllprnImgY4N6LfL5rUz7LI6QvUL35BdZoBLGGx8r8VkypeqMbUNd qV0Xhm0ug3XFv0w8t/HnDHjf7s+3PVUOPnCPfx1o7SVNZULpccPpgg+jcR5bebpf CGRC/nfbiHWm3U4zH4C586zvJ2BSNUdgcuJX1u2y+mwmYbObe3xRvjrOYKgdJL8Z qOCY5haArA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:07 2026 by rpki-client