This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer File: HG6_RlgqJDp5jt3zWrIx917Fo4I.cer (raw, json) Hash identifier: m0ChwnIq1yP22FCoAcwAnNZzTJP/P7gEIpYZKMjS1UM= Subject key identifier: 1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4F4BCE31A9A9B246B262F4622EC92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204815 IP: 203.23.255.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f4:bc:e3:1a:9a:9b:24:6b:26:2f:46:22:ec:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c6ebf46582a243a798eddf35ab231f75ec5a382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:97:2c:4f:55:36:33:8f:3d:c9:40:6e:47:5b: 7f:cf:22:c9:85:15:63:31:22:82:ec:21:92:ba:b6: d5:73:7e:cf:32:6f:26:6c:36:30:3a:61:a4:05:2b: 56:48:c6:06:0b:54:47:90:ee:eb:ec:64:2f:60:66: a7:86:44:cb:fb:a6:dc:eb:0d:32:60:1c:29:35:ae: b5:72:ac:a2:d1:70:f6:3b:f0:ae:40:ba:0f:87:ab: 58:d4:ec:fa:1e:07:38:46:ad:c8:7b:b3:62:ac:1c: cc:e9:03:f5:d9:db:01:33:3a:75:f2:a1:ce:10:54: 8c:45:46:f2:77:3f:ae:45:63:cf:d9:b9:ca:08:65: ff:43:83:29:29:fb:60:49:03:67:8f:b9:58:25:91: a8:f9:ed:37:ad:3a:80:5e:7d:f3:4c:a1:ab:2c:b8: 0a:b7:99:26:30:c3:87:66:f3:fa:ef:77:9d:94:af: 4e:17:74:14:b6:1f:82:bd:bf:32:5d:c8:f4:4d:98: 00:1b:9d:ec:f2:39:43:d7:f3:9d:8c:e3:12:ed:3c: 7f:0c:c9:5f:2e:1d:5e:6a:97:a1:54:4e:dc:50:8b: a5:7c:e6:9d:20:c4:6d:1a:31:99:43:6e:b3:4e:70: b9:d8:21:fd:6d:bf:99:39:a9:9e:59:ac:eb:1b:07: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.23.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204815 Signature Algorithm: sha256WithRSAEncryption 24:6b:84:93:79:85:63:1f:6b:41:0e:bb:df:5f:93:d1:53:e6: f8:04:2e:77:fd:38:1c:e3:59:dc:a8:a8:80:02:a3:2f:20:94: 1e:e7:d3:65:30:35:cb:b3:be:1c:55:c5:5f:82:03:ec:64:01: e8:40:20:9b:c9:a0:75:56:f1:a2:8d:25:a1:f7:ba:e1:e0:17: 2f:57:6a:51:bc:bd:79:ba:14:7b:e5:9a:f7:40:c1:dc:bc:a8: 00:15:26:24:72:f5:a1:b3:5d:ad:33:84:55:ae:8f:8c:6a:61: 0b:45:c1:fb:ae:85:08:e2:9e:45:80:ac:ce:c6:c5:88:af:9e: 5b:cf:fb:62:6c:1e:b7:88:4b:a4:8a:ee:28:ab:20:b6:5c:fd: 30:c9:bf:07:fe:2f:b1:5d:66:f3:f1:4e:00:44:e4:12:e9:00: b1:0c:a9:31:07:af:c7:d0:71:07:29:69:65:20:70:de:29:ce: 4b:c6:81:64:74:5c:27:23:fb:36:ec:7d:e3:1d:63:b2:f3:02: 8a:7f:49:f1:bd:06:ca:30:17:0a:37:2e:73:4b:24:6d:c7:79: 28:91:1b:9f:42:cd:89:2e:b8:95:fe:f6:aa:cc:68:cd:56:c2: 47:2a:38:14:cb:fe:85:7c:f1:98:c9:5e:f4:6d:c2:22:7c:55: 71:cf:c2:c1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pPS84xqamyRrJi9GIuySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzZlYmY0NjU4MmEyNDNhNzk4ZWRkZjM1YWIyMzFmNzVlYzVhMzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35csT1U2M489yUBuR1t/zyLJhRVj MSKC7CGSurbVc37PMm8mbDYwOmGkBStWSMYGC1RHkO7r7GQvYGanhkTL+6bc6w0y YBwpNa61cqyi0XD2O/CuQLoPh6tY1Oz6Hgc4Rq3Ie7NirBzM6QP12dsBMzp18qHO EFSMRUbydz+uRWPP2bnKCGX/Q4MpKftgSQNnj7lYJZGo+e03rTqAXn3zTKGrLLgK t5kmMMOHZvP673edlK9OF3QUth+Cvb8yXcj0TZgAG53s8jlD1/OdjOMS7Tx/DMlf Lh1eapehVE7cUIulfOadIMRtGjGZQ26zTnC52CH9bb+ZOameWazrGwflcwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBxuv0ZYKiQ6eY7d81qyMfdexaOCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzMwOWQz MC1iMWY2LTQ0NDItYTJkYi0yYjMzNWFjNjZhZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMzA5ZDMw LWIxZjYtNDQ0Mi1hMmRiLTJiMzM1YWM2NmFmNS8xL0hHNl9SbGdxSkRwNWp0M3pX ckl4OTE3Rm80SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAyxf/MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMgDzANBgkqhkiG9w0BAQsFAAOCAQEAJGuEk3mFYx9rQQ6731+T0VPm+AQud/04 HONZ3KiogAKjLyCUHufTZTA1y7O+HFXFX4ID7GQB6EAgm8mgdVbxoo0lofe64eAX L1dqUby9eboUe+Wa90DB3LyoABUmJHL1obNdrTOEVa6PjGphC0XB+66FCOKeRYCs zsbFiK+eW8/7Ymwet4hLpIruKKsgtlz9MMm/B/4vsV1m8/FOAETkEukAsQypMQev x9BxBylpZSBw3inOS8aBZHRcJyP7Nux94x1jsvMCin9J8b0GyjAXCjcuc0skbcd5 KJEbn0LNiS64lf72qsxozVbCRyo4FMv+hXzxmMle9G3CInxVcc/CwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:30 2026 by rpki-client