This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.cer File: hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.cer (raw, json) Hash identifier: zW859q7w7VYk+XkZ8sMRx9hfLs4XBN2FqDt7n5LAreU= Subject key identifier: 84:89:4E:4F:50:E8:C2:6C:F8:AC:74:7E:99:BF:06:7E:0A:7D:45:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC2566DDFA249C6F4BE7453F7CB0D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209466 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:25:66:dd:fa:24:9c:6f:4b:e7:45:3f:7c:b0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84894e4f50e8c26cf8ac747e99bf067e0a7d45dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:ab:6d:0f:4b:1c:dd:7b:a1:1b:e6:cc:c8: 38:0f:ed:64:8d:b1:45:77:27:96:6a:e6:1c:0a:4f: ef:64:6f:f7:52:fd:ce:21:61:10:f1:60:43:f3:92: 09:3a:ec:89:23:a8:24:df:ee:89:a0:d2:b2:83:ad: a2:16:9d:4c:86:da:75:db:8c:58:88:ff:de:34:10: 8e:a2:f3:16:43:0a:d8:48:b3:62:a0:e6:c1:9c:0c: 4f:88:15:09:cd:2a:95:e7:aa:04:e0:93:35:6c:bc: f8:81:2e:ed:d6:18:30:5d:e6:76:c2:00:22:af:db: ba:88:42:0e:11:24:f1:fd:73:d2:64:06:80:bf:62: 65:cd:c8:b8:90:bd:f5:d3:09:12:f8:9b:54:2d:cf: 53:3a:3f:3c:44:57:c9:e9:8d:37:17:00:46:cc:8d: 60:65:c0:1c:19:e4:81:83:43:0c:dc:92:c1:2a:23: fd:ad:7a:2c:7e:54:84:43:7f:93:c4:95:98:56:c1: b1:26:c6:15:e6:d1:5d:bd:69:9c:84:a3:6b:f2:b8: 46:87:5c:a6:de:6d:2e:1c:34:4d:8c:16:eb:1b:86: fb:82:c2:69:7b:2b:84:79:f0:24:5d:9b:f7:0d:90: 6a:f5:a3:0f:a0:5b:4f:25:1a:e1:da:d8:2a:4e:a0: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:89:4E:4F:50:E8:C2:6C:F8:AC:74:7E:99:BF:06:7E:0A:7D:45:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/680c79-2735-4cf0-85b4-503414e9e328/1/hIlOT1Dowmz4rHR-mb8Gfgp9Rdw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209466 Signature Algorithm: sha256WithRSAEncryption 40:04:aa:d1:e5:6c:d1:9e:06:0d:b5:bb:7e:92:0d:48:18:e1: 5c:ba:c0:da:be:db:ca:6b:76:0b:d2:42:f6:c5:bf:ef:9f:69: a5:ed:b5:df:dd:33:7c:03:bf:e0:ab:3e:10:58:a5:09:1c:53: 69:fb:38:21:e2:a1:4b:da:36:bc:3a:d2:cd:51:12:93:4c:8c: 27:be:6a:bf:ee:83:54:f9:cd:41:5d:14:ac:79:6e:51:87:5f: 71:31:10:37:90:0c:be:a9:3d:2e:30:79:ff:ec:4f:fd:04:fd: 4f:74:0e:e5:ba:fb:7d:47:d4:63:43:08:8d:be:19:10:2c:7f: 7f:a7:70:ec:04:fc:43:ea:f2:a3:aa:5f:a9:4d:5a:8d:5d:06: 74:d8:05:9f:10:8c:87:6d:44:8e:8e:80:f1:15:28:4b:be:cf: 74:a4:5b:f9:1e:b0:80:e0:9b:7a:04:02:73:7c:68:46:84:d2: 00:35:28:c6:53:a5:ff:85:28:72:e0:71:6a:a5:ea:49:2f:17: ee:b6:58:35:42:6c:54:7a:13:8d:7e:d8:81:55:03:b0:85:2f: 1b:36:64:c6:41:04:ce:3e:a9:40:b5:f4:85:36:c3:7d:6e:84: bb:bb:d6:6a:32:df:f7:09:38:f7:08:77:7b:60:20:50:66:f5: 67:35:1f:4e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57CVm3foknG9L50U/fLDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDg5NGU0ZjUwZThjMjZjZjhhYzc0N2U5OWJmMDY3ZTBhN2Q0NWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFWrbQ9LHN17oRvmzMg4D+1kjbFF dyeWauYcCk/vZG/3Uv3OIWEQ8WBD85IJOuyJI6gk3+6JoNKyg62iFp1Mhtp124xY iP/eNBCOovMWQwrYSLNioObBnAxPiBUJzSqV56oE4JM1bLz4gS7t1hgwXeZ2wgAi r9u6iEIOESTx/XPSZAaAv2Jlzci4kL310wkS+JtULc9TOj88RFfJ6Y03FwBGzI1g ZcAcGeSBg0MM3JLBKiP9rXosflSEQ3+TxJWYVsGxJsYV5tFdvWmchKNr8rhGh1ym 3m0uHDRNjBbrG4b7gsJpeyuEefAkXZv3DZBq9aMPoFtPJRrh2tgqTqC+6QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFISJTk9Q6MJs+Kx0fpm/Bn4KfUXcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzY4MGM3 OS0yNzM1LTRjZjAtODViNC01MDM0MTRlOWUzMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvNjgwYzc5 LTI3MzUtNGNmMC04NWI0LTUwMzQxNGU5ZTMyOC8xL2hJbE9UMURvd216NHJIUi1t YjhHZmdwOVJkdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMyOjANBgkqhkiG9w0BAQsFAAOCAQEAQASq0eVs0Z4G DbW7fpINSBjhXLrA2r7bymt2C9JC9sW/759ppe21390zfAO/4Ks+EFilCRxTafs4 IeKhS9o2vDrSzVESk0yMJ75qv+6DVPnNQV0UrHluUYdfcTEQN5AMvqk9LjB5/+xP /QT9T3QO5br7fUfUY0MIjb4ZECx/f6dw7AT8Q+ryo6pfqU1ajV0GdNgFnxCMh21E jo6A8RUoS77PdKRb+R6wgOCbegQCc3xoRoTSADUoxlOl/4UocuBxaqXqSS8X7rZY NUJsVHoTjX7YgVUDsIUvGzZkxkEEzj6pQLX0hTbDfW6Eu7vWajLf9wk49wh3e2Ag UGb1ZzUfTg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:29 2026 by rpki-client