This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer File: hCVmomcjm6WlPmRH7GrdFiM38NM.cer (raw, json) Hash identifier: wBtA4K+bTYD7CPmazecmwfj5sIDt8o/rdv/PegZTYjU= Subject key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A328685FB0C9E4348D891B80D603C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51893 IP: 91.220.38.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:28:68:5f:b0:c9:e4:34:8d:89:1b:80:d6:03:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=842566a267239ba5a53e6447ec6add162337f0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:99:27:25:f8:94:5e:c4:49:80:76:eb:5c: f3:4a:b4:2b:79:cb:34:cf:0f:48:3f:b5:c2:5c:99: a2:85:12:8b:c1:a2:e9:4b:1c:41:cc:b3:2e:53:06: 82:da:e8:19:e0:71:a0:1b:a4:42:4f:00:f5:83:3a: 39:bc:e8:7d:2d:c6:30:77:db:b6:15:d2:d9:eb:0c: 77:d3:a9:a2:ae:45:d0:d6:64:4b:5f:a1:b6:6a:4f: df:bd:c0:ce:e2:64:9f:b0:bb:14:9f:f1:40:49:3a: b9:0c:68:37:82:cd:1f:5a:23:65:72:d5:f4:dd:13: a7:46:0f:8e:b2:e0:fc:c3:9e:6b:37:f3:b6:cf:71: a2:14:25:06:3c:84:e6:ef:f4:d1:e6:72:07:9c:7a: a7:7d:fd:35:17:5f:5c:f1:5d:7f:2b:45:f3:00:04: c7:63:fa:06:b5:a9:58:6b:59:3e:8c:a6:5c:75:3b: 16:02:75:69:cc:6b:40:5c:f4:b6:25:4b:2e:6d:1a: 8b:b7:48:e2:a8:c8:c7:08:d4:58:ae:b7:b5:19:e5: 29:2f:50:94:df:94:a1:c5:c3:d6:9c:20:96:a6:bc: 79:4d:d7:69:da:b5:68:11:3f:9b:08:06:50:9d:2b: ab:2c:e7:48:40:18:21:f2:10:10:d2:cb:f1:6b:72: 3c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.38.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51893 Signature Algorithm: sha256WithRSAEncryption 9b:0c:fa:41:57:30:d0:fb:d0:71:07:08:36:fe:9f:50:11:84: 42:03:83:66:73:56:7b:de:3e:1b:42:dd:23:53:6a:11:cf:32: 57:98:a5:11:f0:b9:51:37:99:a0:f4:f1:73:12:85:55:23:fa: 98:a3:f2:cb:19:76:54:3b:c7:fd:9c:06:89:cd:7f:e4:5b:ca: 38:9c:b9:7f:d4:8c:7b:e9:fc:3f:d8:12:8d:99:da:83:6e:6d: 79:a6:de:01:23:fa:f1:2f:eb:28:be:d2:94:53:b0:79:ef:03: 3c:88:ec:9c:78:e0:11:47:9b:b2:d7:82:b3:3d:4b:84:9a:9c: e0:c9:35:8a:40:61:73:8d:7b:ad:e6:55:fe:76:cd:19:f6:57: 28:1d:5b:14:66:ab:0a:95:51:a4:67:f2:c6:52:33:b9:21:c1: a8:93:50:d1:5f:36:2d:38:b3:93:42:71:c0:31:1e:98:6b:40: 2e:cb:72:69:7a:f4:79:89:d5:8f:b5:a1:e6:af:d6:d9:25:33: aa:a8:56:1b:20:66:32:5a:fa:3d:50:e9:39:5a:d4:34:8f:51: 31:42:92:41:53:50:f2:65:76:f5:7b:e2:1b:c7:ae:d9:10:d6: bf:75:ca:6b:a3:a2:cb:df:c0:e7:e0:5b:2b:23:98:aa:e1:4c: 7b:82:3d:9f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4oyhoX7DJ5DSNiRuA1gPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDI1NjZhMjY3MjM5YmE1YTUzZTY0NDdlYzZhZGQxNjIzMzdmMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBiZJyX4lF7ESYB261zzSrQrecs0 zw9IP7XCXJmihRKLwaLpSxxBzLMuUwaC2ugZ4HGgG6RCTwD1gzo5vOh9LcYwd9u2 FdLZ6wx306mirkXQ1mRLX6G2ak/fvcDO4mSfsLsUn/FASTq5DGg3gs0fWiNlctX0 3ROnRg+OsuD8w55rN/O2z3GiFCUGPITm7/TR5nIHnHqnff01F19c8V1/K0XzAATH Y/oGtalYa1k+jKZcdTsWAnVpzGtAXPS2JUsubRqLt0jiqMjHCNRYrre1GeUpL1CU 35ShxcPWnCCWprx5Tddp2rVoET+bCAZQnSurLOdIQBgh8hAQ0svxa3I8jQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIQlZqJnI5ulpT5kR+xq3RYjN/DTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzZkMmNm Mi04MGFjLTQzOGItOGI0MC02YjFlZDZiMDhjNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNmQyY2Yy LTgwYWMtNDM4Yi04YjQwLTZiMWVkNmIwOGM1OC8xL2hDVm1vbWNqbTZXbFBtUkg3 R3JkRmlNMzhOTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9wmMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDKtTANBgkqhkiG9w0BAQsFAAOCAQEAmwz6QVcw0PvQcQcINv6fUBGEQgODZnNW e94+G0LdI1NqEc8yV5ilEfC5UTeZoPTxcxKFVSP6mKPyyxl2VDvH/ZwGic1/5FvK OJy5f9SMe+n8P9gSjZnag25teabeASP68S/rKL7SlFOwee8DPIjsnHjgEUebsteC sz1LhJqc4Mk1ikBhc417reZV/nbNGfZXKB1bFGarCpVRpGfyxlIzuSHBqJNQ0V82 LTizk0JxwDEemGtALstyaXr0eYnVj7Wh5q/W2SUzqqhWGyBmMlr6PVDpOVrUNI9R MUKSQVNQ8mV29XviG8eu2RDWv3XKa6Oiy9/A5+BbKyOYquFMe4I9nw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:32 2026 by rpki-client