This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer (raw, json) Hash identifier: JZvcFyizL3Dz6/4LRpJc0aw9QdOFMk9BRxn4y8bXJhI= Subject key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB0A7923CBDF30E1C8D892E2C5C9B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205945 IP: 185.201.92.0/22 IP: 2a0a:c040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0a:79:23:cb:df:30:e1:c8:d8:92:e2:c5:c9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8466a5dde27f911da8be73c261ff55b5881198a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:2b:75:77:9b:76:e9:3d:ed:1a:0a:63:5d: f4:24:99:87:4e:63:60:b5:9a:d7:be:e6:18:0d:6c: c6:e6:7e:b1:40:92:c1:14:f7:82:fd:6f:b1:c3:64: 0e:89:d5:6c:1e:74:28:4b:34:d9:76:3e:78:51:30: b7:95:e3:8d:78:e6:a1:10:24:85:2a:d9:b6:ce:ed: 2c:cb:6e:01:7e:97:51:1a:83:6f:7c:61:9e:f3:01: 3b:11:1e:66:4e:73:c2:2d:8a:69:ca:76:70:26:3e: f4:70:81:40:14:d0:34:2b:2a:6c:ad:a6:10:5a:48: 6d:91:e6:12:3a:93:9d:07:fc:d0:70:6e:bf:a1:67: a4:a1:9d:62:45:f1:21:be:b0:9e:48:31:29:43:50: 2a:46:eb:cb:bf:e7:7b:57:f5:54:8b:13:71:58:8f: ff:ef:ba:09:4b:ae:db:f4:37:12:0a:f4:34:e7:d6: b6:b1:cc:34:5b:9e:e5:d3:34:e4:58:2d:fc:d7:7b: 73:89:bf:2f:4b:b2:dc:b9:69:d3:f4:66:6e:01:4e: 6e:7a:5a:eb:8e:73:e1:e0:2b:46:c4:1a:6b:f0:18: 1a:65:5d:26:16:53:55:b6:2b:2f:bc:71:22:e1:6e: 77:82:7a:1a:22:82:21:36:72:07:68:84:69:98:08: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.92.0/22 IPv6: 2a0a:c040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205945 Signature Algorithm: sha256WithRSAEncryption 7a:9c:d4:0a:8d:66:23:7d:6e:49:1b:52:47:a6:02:00:29:2e: 70:f8:d9:62:49:13:f4:08:07:74:b9:b7:84:79:30:e9:3e:da: 1a:6b:02:e7:a7:95:69:41:be:46:6a:05:b1:43:20:7e:8c:39: fd:9c:56:0e:58:ca:90:57:50:3d:be:1c:da:22:bc:c8:64:24: 6d:a2:fc:c6:be:14:d2:9e:8f:4d:ec:e2:86:1a:cf:6d:1b:ab: 1d:60:0d:92:26:75:75:f7:8c:0a:ea:de:4f:da:76:fd:7b:7c: 04:ce:23:c8:99:05:55:16:8a:af:4b:8a:b2:02:80:ec:59:71: 3a:0c:ce:32:17:7d:55:6e:a3:65:45:81:d1:b8:2b:50:7b:0b: 16:4e:13:43:aa:c6:e3:e3:47:a4:54:65:da:01:38:e2:20:b0: 17:99:ef:92:28:9d:ac:f8:da:b0:ce:8d:ba:5e:20:63:9e:27: f2:ac:d3:c3:fa:4e:36:7e:07:12:3b:3f:c5:db:26:1f:39:25: 8e:40:9d:31:03:14:27:08:5f:6d:26:bf:3c:d0:25:cf:e1:b5: 3f:e6:ab:95:84:9d:ba:97:c7:ca:53:f0:20:92:4e:d8:a0:93: 6b:98:0f:41:19:38:79:35:d2:a5:82:17:5b:e4:13:ae:05:45: cf:26:cf:d5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26wp5I8vfMOHI2JLixcmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDY2YTVkZGUyN2Y5MTFkYThiZTczYzI2MWZmNTViNTg4MTE5OGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ugrdXebduk97RoKY130JJmHTmNg tZrXvuYYDWzG5n6xQJLBFPeC/W+xw2QOidVsHnQoSzTZdj54UTC3leONeOahECSF Ktm2zu0sy24BfpdRGoNvfGGe8wE7ER5mTnPCLYppynZwJj70cIFAFNA0KypsraYQ WkhtkeYSOpOdB/zQcG6/oWekoZ1iRfEhvrCeSDEpQ1AqRuvLv+d7V/VUixNxWI// 77oJS67b9DcSCvQ059a2scw0W57l0zTkWC3813tzib8vS7LcuWnT9GZuAU5uelrr jnPh4CtGxBpr8BgaZV0mFlNVtisvvHEi4W53gnoaIoIhNnIHaIRpmAi1gwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIRmpd3if5EdqL5zwmH/VbWIEZipMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzcyNmI2 MC04YWE3LTQ2MWYtOWNkOS03Y2NiYjQ1ZGNhNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNzI2YjYw LThhYTctNDYxZi05Y2Q5LTdjY2JiNDVkY2E1MS8xL2hHYWwzZUpfa1Iyb3ZuUENZ ZjlWdFlnUm1Lay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuclcMA0EAgACMAcDBQMqCsBAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkeTANBgkqhkiG9w0BAQsFAAOCAQEAepzUCo1mI31u SRtSR6YCACkucPjZYkkT9AgHdLm3hHkw6T7aGmsC56eVaUG+RmoFsUMgfow5/ZxW DljKkFdQPb4c2iK8yGQkbaL8xr4U0p6PTezihhrPbRurHWANkiZ1dfeMCureT9p2 /Xt8BM4jyJkFVRaKr0uKsgKA7FlxOgzOMhd9VW6jZUWB0bgrUHsLFk4TQ6rG4+NH pFRl2gE44iCwF5nvkiidrPjasM6Nul4gY54n8qzTw/pONn4HEjs/xdsmHzkljkCd MQMUJwhfbSa/PNAlz+G1P+arlYSdupfHylPwIJJO2KCTa5gPQRk4eTXSpYIXW+QT rgVFzybP1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:47 2026 by rpki-client