This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer File: hCIIK4U0vXrmP6gAimhbZfTNJZM.cer (raw, json) Hash identifier: +yPQsbsrA6yjTiVQGXVS3GepTf75bghMAR/yuXXa5JY= Subject key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD53CD5427FBE2FEC1D47D4795D4A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214587 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d5:3c:d5:42:7f:be:2f:ec:1d:47:d4:79:5d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:4d:a5:4c:f8:a3:7a:e0:2b:b2:b7:92:70: 75:c7:af:38:90:e8:11:8e:ad:8b:ee:a8:3a:76:0e: 04:8c:87:f1:0f:1d:7f:7f:ac:e8:97:1f:39:eb:de: e6:8c:d6:fa:ed:9f:dc:e5:56:3a:ad:01:f0:a3:0a: 37:f9:17:55:49:f1:aa:3d:e7:52:2a:18:cf:04:62: ff:c3:31:70:c3:98:39:46:c8:bf:11:02:f7:05:24: 4a:60:b1:f0:f6:c2:d7:0d:b4:01:b3:91:f9:12:b1: 5e:30:ad:1b:5d:54:be:49:ce:cd:05:d4:e1:ce:41: f8:3c:da:48:36:9f:15:0f:6e:14:9e:da:87:a0:ed: df:48:53:09:e7:7e:4c:11:f0:62:45:b6:e4:95:93: c1:56:cc:b3:56:e9:4a:b1:80:26:90:ba:7c:7d:4c: 7a:26:15:2f:69:a1:e0:f8:61:39:ed:6f:f3:51:34: e2:b9:fd:e1:16:e7:8c:13:9d:dc:50:f5:54:71:d7: 38:75:7d:08:fa:8a:19:4c:b6:a2:ba:28:8a:4d:55: 4d:56:9e:f4:d1:13:93:31:1a:76:c0:d3:7d:bd:ee: a5:03:5b:4d:87:ab:71:f4:d9:4e:00:d5:3e:0b:77: ad:11:f5:04:0a:fe:71:64:ec:aa:34:ed:ac:d1:cc: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214587 Signature Algorithm: sha256WithRSAEncryption 7e:c8:ec:1f:dd:dc:13:0f:ad:90:f7:d4:69:51:6e:42:d0:0c: 11:db:02:4b:6f:22:84:05:0d:f7:61:ee:7a:d6:dd:0c:b6:ed: 9c:6e:96:2e:57:eb:92:8b:07:fa:a3:44:c5:ae:09:71:e2:e6: b1:73:a6:22:88:55:88:88:66:42:05:93:0e:84:17:86:70:d2: 6b:86:4d:fb:b9:c4:54:ec:f4:79:5b:3c:cf:52:8e:52:9a:a8: 13:dd:ef:73:99:af:d5:46:f4:12:a2:f1:c8:7c:3a:0f:14:25: 1c:68:c1:ea:9b:63:dc:2e:60:da:5b:49:25:d8:e0:6d:7f:0a: 6a:47:f7:5d:55:2d:23:20:53:7c:a3:fe:fa:18:95:03:98:42: 3d:3c:0e:93:8b:6f:57:ff:da:26:e0:9e:c0:a6:32:c9:4d:19: aa:73:fc:a3:f2:0e:22:25:b4:18:10:1e:5e:bf:aa:64:30:12: 85:a4:8c:f3:3f:ce:8f:c9:5d:96:22:a0:ba:ad:9b:02:55:fe: 83:e8:ad:3d:ec:71:cb:15:69:f6:46:4d:36:d7:11:ca:3e:0f: b0:a3:0f:5d:d8:c7:32:a8:ae:cb:24:48:8d:98:ef:3a:d8:d0: 79:79:e2:40:59:71:ab:48:54:dc:3e:7e:5e:3a:db:a6:e5:5e: 2e:15:72:d0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9ytU81UJ/vi/sHUfUeV1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDIyMDgyYjg1MzRiZDdhZTYzZmE4MDA4YTY4NWI2NWY0Y2QyNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRxNpUz4o3rgK7K3knB1x684kOgR jq2L7qg6dg4EjIfxDx1/f6zolx85697mjNb67Z/c5VY6rQHwowo3+RdVSfGqPedS KhjPBGL/wzFww5g5Rsi/EQL3BSRKYLHw9sLXDbQBs5H5ErFeMK0bXVS+Sc7NBdTh zkH4PNpINp8VD24UntqHoO3fSFMJ535MEfBiRbbklZPBVsyzVulKsYAmkLp8fUx6 JhUvaaHg+GE57W/zUTTiuf3hFueME53cUPVUcdc4dX0I+ooZTLaiuiiKTVVNVp70 0ROTMRp2wNN9ve6lA1tNh6tx9NlOANU+C3etEfUECv5xZOyqNO2s0czZ2QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIQiCCuFNL165j+oAIpoW2X0zSWTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzA5NGRi My1lMzg5LTQ0NjEtYjUwZS01ODE2OWZiZWNkZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvMDk0ZGIz LWUzODktNDQ2MS1iNTBlLTU4MTY5ZmJlY2RmYS8xL2hDSUlLNFUwdlhybVA2Z0Fp bWhiWmZUTkpaTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGOzANBgkqhkiG9w0BAQsFAAOCAQEAfsjsH93cEw+t kPfUaVFuQtAMEdsCS28ihAUN92HuetbdDLbtnG6WLlfrkosH+qNExa4JceLmsXOm IohViIhmQgWTDoQXhnDSa4ZN+7nEVOz0eVs8z1KOUpqoE93vc5mv1Ub0EqLxyHw6 DxQlHGjB6ptj3C5g2ltJJdjgbX8Kakf3XVUtIyBTfKP++hiVA5hCPTwOk4tvV//a JuCewKYyyU0ZqnP8o/IOIiW0GBAeXr+qZDAShaSM8z/Oj8ldliKguq2bAlX+g+it PexxyxVp9kZNNtcRyj4PsKMPXdjHMqiuyyRIjZjvOtjQeXniQFlxq0hU3D5+Xjrb puVeLhVy0A== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:32 2026 by rpki-client