This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer File: hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer (raw, json) Hash identifier: jFCcvrC56AoLR6B9OercABPdAkhHGHanmlgo+/qo7JE= Subject key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F26F3EFB47FC334FD19337F28E0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212481 IP: 185.205.71.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f2:6f:3e:fb:47:fc:33:4f:d1:93:37:f2:8e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:70:9f:48:fb:34:2b:48:f0:ba:b7:61:d7: 67:e4:df:dd:7b:cf:2c:b0:b9:06:d2:d6:59:fb:ee: bd:68:92:49:33:23:fa:3f:fd:15:1f:3d:ac:81:7b: 84:2b:85:e1:74:be:30:83:b8:ad:17:6d:5b:be:02: 83:f5:a3:41:89:c0:79:c3:d0:88:b6:c1:fc:98:51: 63:b6:64:dd:0b:b5:8a:4c:54:d1:b4:10:67:2e:3a: 21:0f:02:df:c4:be:d6:7e:9c:60:44:d8:d0:e1:d3: 3d:a5:e6:69:2e:7a:9f:08:9f:e6:fb:53:e9:d9:10: 50:b8:dc:76:62:6d:18:f1:cf:7f:a5:1b:87:72:fd: b8:5f:03:09:ea:bd:21:db:da:30:69:37:25:38:f4: c1:b6:57:e7:bb:a0:11:5e:52:50:17:d1:bc:e6:04: 50:9a:51:5b:8d:0b:eb:3e:af:9d:b7:47:0e:3c:7c: 02:ee:a2:ef:b8:de:53:75:4f:32:67:dc:8a:af:1c: ad:61:b8:ff:2f:cc:c8:bc:2d:e1:a6:c1:7e:42:99: c8:25:3c:91:f0:26:22:d3:6b:ec:40:35:51:bd:2c: 61:b3:d0:68:61:2c:15:b9:81:60:98:34:f1:66:af: b3:75:17:78:87:8f:79:be:e7:fe:75:08:38:6f:03: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.71.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212481 Signature Algorithm: sha256WithRSAEncryption 88:48:4f:68:b7:50:0c:4c:fb:c2:2a:2f:31:1f:b3:9c:d9:d3: 02:fe:33:bf:f1:64:8c:bc:db:d8:0b:a9:52:06:e9:f6:e5:1f: d2:02:7e:67:e2:fd:c8:d6:60:a8:a2:14:5f:0b:04:68:f8:73: 79:f7:5e:1a:6c:8b:19:ed:9c:80:db:24:bb:79:9b:d2:7c:11: d7:47:32:b4:40:26:a9:2a:0b:97:5b:22:15:f9:58:6f:58:a5: 4a:fb:bb:51:ff:b8:c1:eb:b3:de:10:be:6f:97:ea:e4:cd:d6: 40:db:12:ce:52:43:f2:3f:b2:e5:04:c1:4a:59:cb:df:98:7d: e8:a8:55:aa:eb:9e:cb:a0:3a:9d:08:6e:36:4c:0c:ee:c8:72: f5:e2:37:60:3b:2d:83:4f:23:c7:eb:63:09:23:cb:8e:be:6a: 59:f8:d8:41:3b:e7:f0:71:fa:e4:65:3c:8d:42:e0:f8:18:72: 76:5d:77:8b:64:b2:53:0e:64:1c:46:37:4c:df:9b:24:c7:29: 26:58:54:d6:ad:f5:ac:59:73:20:c8:bd:24:4c:2e:75:7f:cf: 9e:5e:17:c8:1f:b7:68:be:ea:6a:de:b7:26:c3:25:4d:79:26: db:44:4e:49:33:e0:8e:7f:f0:e2:b9:47:77:0d:a7:6e:95:b9: 1a:b1:0a:3b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4ovJvPvtH/DNP0ZM38o4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGEzY2YxMTRiZTRmYTRjNGZmNzZiMjE4ZmFkNTBlNTE3MzkxNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLtwn0j7NCtI8Lq3Yddn5N/de88s sLkG0tZZ++69aJJJMyP6P/0VHz2sgXuEK4XhdL4wg7itF21bvgKD9aNBicB5w9CI tsH8mFFjtmTdC7WKTFTRtBBnLjohDwLfxL7WfpxgRNjQ4dM9peZpLnqfCJ/m+1Pp 2RBQuNx2Ym0Y8c9/pRuHcv24XwMJ6r0h29owaTclOPTBtlfnu6ARXlJQF9G85gRQ mlFbjQvrPq+dt0cOPHwC7qLvuN5TdU8yZ9yKrxytYbj/L8zIvC3hpsF+QpnIJTyR 8CYi02vsQDVRvSxhs9BoYSwVuYFgmDTxZq+zdRd4h495vuf+dQg4bwMz+wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFISjzxFL5PpMT/drIY+tUOUXORYNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzYwNWY0 Ni03ZDRjLTQ2YjgtYmFhNS01MzkzMjliZWQ0NmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvNjA1ZjQ2 LTdkNGMtNDZiOC1iYWE1LTUzOTMyOWJlZDQ2ZS8xL2hLUFBFVXZrLWt4UDkyc2hq NjFRNVJjNUZnMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuc1HMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM+ATANBgkqhkiG9w0BAQsFAAOCAQEAiEhPaLdQDEz7wiovMR+znNnTAv4zv/Fk jLzb2AupUgbp9uUf0gJ+Z+L9yNZgqKIUXwsEaPhzefdeGmyLGe2cgNsku3mb0nwR 10cytEAmqSoLl1siFflYb1ilSvu7Uf+4weuz3hC+b5fq5M3WQNsSzlJD8j+y5QTB SlnL35h96KhVquuey6A6nQhuNkwM7shy9eI3YDstg08jx+tjCSPLjr5qWfjYQTvn 8HH65GU8jULg+Bhydl13i2SyUw5kHEY3TN+bJMcpJlhU1q31rFlzIMi9JEwudX/P nl4XyB+3aL7qat63JsMlTXkm20ROSTPgjn/w4rlHdw2nbpW5GrEKOw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:00 2026 by rpki-client