This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer File: HcHvY3SZioToDl4w2gmmn0_-qJI.cer (raw, json) Hash identifier: Z2bvNJPZvRWO04aa2oytBUzyXdNeysvNU1vY05yrpd8= Subject key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC44EF81EE71D791C3F43240B4C73DA9B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 27 Nov 2025 07:55:01 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213768 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:4e:f8:1e:e7:1d:79:1c:3f:43:24:0b:4c:73:da:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 27 07:55:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:af:5a:fa:a3:f1:c0:be:21:ac:cf:5c:3e: fc:ea:b4:1a:58:50:c8:3b:d4:81:87:36:8d:f8:ed: d8:c4:89:09:46:42:c9:89:b5:73:96:ac:58:12:48: a6:39:1a:fa:0c:fe:5d:76:3e:01:c8:76:45:89:79: fe:6a:de:bb:63:9d:be:19:05:b1:69:c8:f1:08:03: 9c:e1:4b:3c:c0:11:a5:f5:52:be:e2:29:87:3e:54: bd:a4:13:b8:4f:f1:3d:92:24:d7:89:b5:aa:74:98: 73:9c:52:55:af:dc:ca:e7:40:00:7b:83:04:5a:45: 5d:f8:0e:c9:8f:9c:7b:50:66:96:e4:a6:93:df:b5: e5:21:05:fe:66:b0:32:e3:a9:1a:6c:eb:63:8c:ad: 0f:49:ba:59:00:0c:c1:2b:51:0a:b8:93:e2:77:5d: 46:60:b2:48:cb:02:7c:6d:13:c3:fa:ae:d2:e0:55: 7b:c7:2d:33:65:3a:15:e8:1c:78:18:8c:c3:54:ba: 8d:30:44:f2:1a:ca:cb:f7:65:93:73:b6:25:7b:b3: 8d:33:92:b0:f8:a6:3c:88:dc:04:d0:0d:a5:c1:fb: 06:05:3e:40:b8:8a:4a:f9:ce:93:23:31:d0:d0:3f: d7:76:22:d5:54:bb:0b:66:47:be:3a:2b:82:be:20: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213768 Signature Algorithm: sha256WithRSAEncryption 9a:70:72:3e:68:74:86:6f:50:e3:5b:8c:f2:e1:1a:36:9a:4a: b4:b7:03:a2:11:80:00:5b:7d:b4:f0:7a:70:03:66:ab:0f:82: dc:25:8e:d0:6e:7e:a6:04:e8:1f:89:08:2f:26:3d:d6:29:86: 8a:58:de:3c:b3:19:74:7b:85:59:7f:30:11:6a:bf:3e:a6:1c: 64:54:be:f2:50:ae:f4:84:a3:2c:1c:c0:2b:5b:00:da:54:6e: ea:b5:68:75:7e:fe:22:bf:d5:85:0a:6d:32:1d:0a:6b:6c:ea: 86:7b:4f:ac:c9:df:7b:0b:10:06:1f:c6:63:63:95:3e:a4:aa: 18:06:64:85:45:5e:8f:e7:ef:f1:75:b7:c3:8b:20:90:a7:87: 66:7c:98:34:90:2a:aa:b0:7d:43:5c:73:86:08:a4:3e:2c:b7: 45:be:de:35:c5:e2:c0:51:45:21:d1:92:d5:12:88:ea:6e:c7: 22:56:fd:84:ff:d5:8f:15:ed:3d:a8:17:df:a5:57:21:98:bc: 1c:95:b1:c9:b1:76:97:02:3c:12:d8:25:93:fd:97:10:b1:da: 26:c3:5f:59:e2:3b:bd:81:a1:3b:59:ac:f0:8f:27:eb:d6:56: f7:97:07:2e:0a:ff:22:63:1a:57:72:c4:95:39:9f:f4:38:20: d7:b5:3f:ba -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZrETvge5x15HD9DJAtMc9qbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI3MDc1NTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGMxZWY2Mzc0OTk4YTg0ZTgwZTVlMzBkYTA5YTY5ZjRmZmVhODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYevWvqj8cC+IazPXD786rQaWFDI O9SBhzaN+O3YxIkJRkLJibVzlqxYEkimORr6DP5ddj4ByHZFiXn+at67Y52+GQWx acjxCAOc4Us8wBGl9VK+4imHPlS9pBO4T/E9kiTXibWqdJhznFJVr9zK50AAe4ME WkVd+A7Jj5x7UGaW5KaT37XlIQX+ZrAy46kabOtjjK0PSbpZAAzBK1EKuJPid11G YLJIywJ8bRPD+q7S4FV7xy0zZToV6Bx4GIzDVLqNMETyGsrL92WTc7Yle7ONM5Kw +KY8iNwE0A2lwfsGBT5AuIpK+c6TIzHQ0D/XdiLVVLsLZke+OiuCviD8twIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFB3B72N0mYqE6A5eMNoJpp9P/qiSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5Lzk2NDM4 MS0xZTVkLTRmZjctYWUyZC0xNDZjOTQ3M2I2Y2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvOTY0Mzgx LTFlNWQtNGZmNy1hZTJkLTE0NmM5NDczYjZjYi8xL0hjSHZZM1NaaW9Ub0RsNHcy Z21tbjBfLXFKSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNDCDANBgkqhkiG9w0BAQsFAAOCAQEAmnByPmh0hm9Q 41uM8uEaNppKtLcDohGAAFt9tPB6cANmqw+C3CWO0G5+pgToH4kILyY91imGilje PLMZdHuFWX8wEWq/PqYcZFS+8lCu9ISjLBzAK1sA2lRu6rVodX7+Ir/VhQptMh0K a2zqhntPrMnfewsQBh/GY2OVPqSqGAZkhUVej+fv8XW3w4sgkKeHZnyYNJAqqrB9 Q1xzhgikPiy3Rb7eNcXiwFFFIdGS1RKI6m7HIlb9hP/VjxXtPagX36VXIZi8HJWx ybF2lwI8Etglk/2XELHaJsNfWeI7vYGhO1ms8I8n69ZW95cHLgr/ImMaV3LElTmf 9Dgg17U/ug== -----END CERTIFICATE-----Generated at Fri Dec 5 19:34:10 2025 by rpki-client