This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h87xYB8_i1Dm11QuW7u9xgO1LZI.cer File: h87xYB8_i1Dm11QuW7u9xgO1LZI.cer (raw, json) Hash identifier: SLKlXIfzI8ThIC60WFlAyVrRJduY3UHciOJaA552UNU= Subject key identifier: 87:CE:F1:60:1F:3F:8B:50:E6:D7:54:2E:5B:BB:BD:C6:03:B5:2D:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C053865EF7158C718BF327FEF4600ADD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 15:28:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201943 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:38:65:ef:71:58:c7:18:bf:32:7f:ef:46:00:ad:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 15:28:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87cef1601f3f8b50e6d7542e5bbbbdc603b52d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:7d:6c:56:09:0f:fc:6e:fe:52:2e:92:a2: e0:88:d4:0e:18:fa:fd:72:01:63:e9:b1:0a:5a:3d: 79:d3:64:55:39:0c:c6:93:7a:41:5f:06:52:6f:77: ed:0a:a6:d2:81:cd:86:50:f6:0a:03:70:df:52:69: 32:6d:e4:24:22:ae:d7:63:23:ea:df:5a:36:b5:e8: 8d:3e:52:2d:01:b1:88:1b:ce:64:cb:6e:9c:9c:cc: 38:df:05:f3:b6:8d:dc:22:7a:9d:a1:71:a4:bd:5b: 53:27:94:27:1a:02:29:b7:e8:8f:c3:ae:8f:33:3e: 3b:b2:e3:b6:1a:cf:01:d6:04:bf:9c:6a:ca:94:6f: 07:ea:20:ef:94:1d:bc:d1:f0:f5:c2:22:22:9e:e3: 1b:3a:f7:22:31:c8:b0:00:8a:04:7e:43:da:a1:8b: 9d:a5:27:fb:6d:44:12:67:08:78:f3:d1:99:69:6e: 6c:ad:08:d2:e9:ec:7c:ee:ce:a4:44:bf:2c:83:3f: 06:d6:ac:b7:4c:0c:d1:15:a2:3d:82:ea:08:40:19: 39:b8:01:54:50:8e:d1:b0:41:00:fe:ac:f0:53:5b: cb:50:b2:46:80:ed:d8:d0:74:2d:4a:75:55:aa:09: 7b:83:15:fb:ad:a4:ae:55:a6:81:d4:4c:b6:f0:f7: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CE:F1:60:1F:3F:8B:50:E6:D7:54:2E:5B:BB:BD:C6:03:B5:2D:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9e3ffc-a65d-464c-8877-d1f905f911f7/1/h87xYB8_i1Dm11QuW7u9xgO1LZI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201943 Signature Algorithm: sha256WithRSAEncryption 97:d1:16:63:5a:b1:54:a8:4e:e9:3c:12:14:d7:37:0f:7d:7c: 7f:46:4a:43:a8:50:dc:0b:af:4c:19:77:02:d4:8b:78:11:29: 36:cd:03:b6:c9:14:0d:ab:36:7b:8f:c4:e2:18:55:d2:0f:1d: df:c5:92:a3:a6:f9:8e:23:08:49:66:53:91:41:6c:57:c3:0f: 6b:aa:5e:64:5e:55:99:17:75:2f:8c:5b:74:9f:5a:e0:8f:70: 25:7b:23:d3:5b:a3:c4:3f:4e:93:b0:e5:3e:d4:b4:df:bd:60: 34:87:d0:9f:f1:b4:86:df:0d:da:1d:c5:a1:fb:5b:d4:f9:25: 55:c7:b3:af:2b:f6:87:91:6f:3d:56:a6:b5:3c:37:b4:0d:40: 55:df:73:a9:66:a4:1b:ee:df:aa:13:6a:45:95:57:81:90:b6: 9a:de:82:37:26:a4:d0:d8:5d:b2:12:33:b3:af:54:36:52:f5: 34:9a:7c:09:8f:ea:93:8e:47:f6:ee:f7:0f:be:e9:7a:cd:5c: d8:ee:a6:f7:ac:a9:ed:b5:32:07:e7:9f:20:6b:3d:a8:99:e5: 76:7a:b5:71:3f:66:de:53:47:f9:d5:7c:78:03:81:07:7a:19: 36:6f:85:5d:05:2d:36:95:01:f3:a8:42:74:6a:58:65:6e:fd: de:5d:1f:f9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZwFOGXvcVjHGL8yf+9GAK3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTUyODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2NlZjE2MDFmM2Y4YjUwZTZkNzU0MmU1YmJiYmRjNjAzYjUyZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLF9bFYJD/xu/lIukqLgiNQOGPr9 cgFj6bEKWj1502RVOQzGk3pBXwZSb3ftCqbSgc2GUPYKA3DfUmkybeQkIq7XYyPq 31o2teiNPlItAbGIG85ky26cnMw43wXzto3cInqdoXGkvVtTJ5QnGgIpt+iPw66P Mz47suO2Gs8B1gS/nGrKlG8H6iDvlB280fD1wiIinuMbOvciMciwAIoEfkPaoYud pSf7bUQSZwh489GZaW5srQjS6ex87s6kRL8sgz8G1qy3TAzRFaI9guoIQBk5uAFU UI7RsEEA/qzwU1vLULJGgO3Y0HQtSnVVqgl7gxX7raSuVaaB1Ey28Pex6wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIfO8WAfP4tQ5tdULlu7vcYDtS2SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzllM2Zm Yy1hNjVkLTQ2NGMtODg3Ny1kMWY5MDVmOTExZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvOWUzZmZj LWE2NWQtNDY0Yy04ODc3LWQxZjkwNWY5MTFmNy8xL2g4N3hZQjhfaTFEbTExUXVX N3U5eGdPMUxaSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMU1zANBgkqhkiG9w0BAQsFAAOCAQEAl9EWY1qxVKhO 6TwSFNc3D318f0ZKQ6hQ3AuvTBl3AtSLeBEpNs0DtskUDas2e4/E4hhV0g8d38WS o6b5jiMISWZTkUFsV8MPa6peZF5VmRd1L4xbdJ9a4I9wJXsj01ujxD9Ok7DlPtS0 371gNIfQn/G0ht8N2h3Foftb1PklVcezryv2h5FvPVamtTw3tA1AVd9zqWakG+7f qhNqRZVXgZC2mt6CNyak0NhdshIzs69UNlL1NJp8CY/qk45H9u73D77pes1c2O6m 96yp7bUyB+efIGs9qJnldnq1cT9m3lNH+dV8eAOBB3oZNm+FXQUtNpUB86hCdGpY ZW793l0f+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:37 2026 by rpki-client