This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer File: hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer (raw, json) Hash identifier: 1sYXR5qqi8R+PdFZ/fxYT7Nlixfpu0EXu5UD+Z5N9ko= Subject key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2AC840D829B67FAD8C9E5AC4D00B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50627 IP: 5.42.144.0/22 IP: 178.20.32.0/21 IP: 2a12:5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:ac:84:0d:82:9b:67:fa:d8:c9:e5:ac:4d:00:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:73:89:92:0c:44:5f:fb:a9:d0:d8:49:47: 3b:ed:ac:92:b9:e8:b5:35:54:31:95:31:f3:20:3d: c2:14:70:be:cf:8c:87:0b:e4:73:43:bb:f5:76:70: 2b:3c:69:dc:ac:27:a0:94:44:1f:50:2c:f0:30:dd: 21:55:8d:3b:7a:24:b9:57:a5:f4:e1:ee:77:3e:fe: e6:ba:04:9f:6a:d2:11:ba:6e:65:dc:bb:ef:16:47: ed:08:b7:f2:23:51:05:2c:e8:7d:6d:0f:c7:9d:24: 05:32:34:7a:18:84:1a:f6:65:25:2b:54:f8:fa:f5: 5e:05:37:88:9d:8f:30:f5:53:ab:52:07:f2:20:7e: 8d:40:14:3a:8f:14:32:cc:19:77:05:14:f6:4a:47: 1b:28:47:b3:94:76:fc:27:13:bc:f0:6e:25:3b:8d: d6:65:af:6d:b5:90:05:e4:3e:29:cd:f3:7e:5f:be: df:32:3e:44:48:1e:fe:7a:77:18:a7:3a:aa:bb:25: e3:ae:6c:aa:16:ad:38:42:64:d6:93:dc:ed:33:01: 98:93:fa:6c:7d:76:8d:c9:3d:e7:02:f4:73:da:c0: d0:f7:a5:a2:c7:03:60:8b:58:06:e3:97:ac:fc:38: ff:b7:55:a1:54:00:c7:98:5f:a2:7c:a0:34:66:04: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.144.0/22 178.20.32.0/21 IPv6: 2a12:5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50627 Signature Algorithm: sha256WithRSAEncryption 73:f7:45:69:5f:19:d3:21:f2:85:57:e5:36:c2:23:48:04:87: cc:a7:c5:82:80:c9:99:ff:96:a6:67:fe:e3:bf:37:be:f9:ae: b7:5a:e1:c6:f1:05:e3:22:10:fa:79:98:ed:a2:4e:1d:8a:f5: 19:bd:e0:82:bc:bd:96:b5:33:79:79:ea:a3:fb:15:83:32:d9: 3a:a7:1d:09:d1:86:70:bd:94:25:70:d2:86:ad:e4:a2:c1:3e: 19:2e:3e:0c:2d:a3:a1:43:01:f3:ea:77:df:cd:69:c9:37:c0: 42:11:7a:eb:e0:cd:b7:8f:eb:cc:2d:d0:9d:aa:70:45:3d:4b: 95:22:17:b9:8f:47:46:86:1d:6e:36:63:0a:7f:04:4d:d4:a9: e5:0b:ac:f3:3a:87:80:cc:14:0e:38:80:b2:5b:1c:7c:c5:5a: e1:64:73:2b:1b:bf:a3:05:11:8d:70:64:ca:45:3a:6d:40:a2: ad:d2:16:85:fc:4b:88:92:3b:1a:ee:f0:c2:24:cf:eb:f6:36: 23:7e:20:94:3e:4e:21:50:08:1a:fd:ad:fe:5f:a4:b6:4d:00: 9b:9f:c0:4e:a3:8b:a6:4a:fd:20:14:2b:3e:96:42:68:69:e4: 00:7d:20:26:1a:1f:fe:b7:f5:2a:50:1e:37:a5:86:5f:89:24: 53:bb:e6:e0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/8qyEDYKbZ/rYyeWsTQC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGE0YWNhMDIwZmIyYmRjOTNhNDcyNjZlODdlYzY3Y2RjODg1N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsVziZIMRF/7qdDYSUc77aySuei1 NVQxlTHzID3CFHC+z4yHC+RzQ7v1dnArPGncrCeglEQfUCzwMN0hVY07eiS5V6X0 4e53Pv7mugSfatIRum5l3LvvFkftCLfyI1EFLOh9bQ/HnSQFMjR6GIQa9mUlK1T4 +vVeBTeInY8w9VOrUgfyIH6NQBQ6jxQyzBl3BRT2SkcbKEezlHb8JxO88G4lO43W Za9ttZAF5D4pzfN+X77fMj5ESB7+encYpzqquyXjrmyqFq04QmTWk9ztMwGYk/ps fXaNyT3nAvRz2sDQ96WixwNgi1gG45es/Dj/t1WhVADHmF+ifKA0ZgSONQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFISkrKAg+yvck6RyZuh+xnzciFfFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzZiYjIy Ny01YjM2LTRmMmEtYTFjNS05ZWYzNmQyNTE1MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvNmJiMjI3 LTViMzYtNGYyYS1hMWM1LTllZjM2ZDI1MTUxNy8xL2hLU3NvQ0Q3Szl5VHBISm02 SDdHZk55SVY4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCBSqQAwQDshQgMA0EAgACMAcDBQMqEgXAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFwzANBgkqhkiG9w0BAQsFAAOCAQEAc/dF aV8Z0yHyhVflNsIjSASHzKfFgoDJmf+Wpmf+4783vvmut1rhxvEF4yIQ+nmY7aJO HYr1Gb3ggry9lrUzeXnqo/sVgzLZOqcdCdGGcL2UJXDShq3kosE+GS4+DC2joUMB 8+p3381pyTfAQhF66+DNt4/rzC3QnapwRT1LlSIXuY9HRoYdbjZjCn8ETdSp5Qus 8zqHgMwUDjiAslscfMVa4WRzKxu/owURjXBkykU6bUCirdIWhfxLiJI7Gu7wwiTP 6/Y2I34glD5OIVAIGv2t/l+ktk0Am5/ATqOLpkr9IBQrPpZCaGnkAH0gJhof/rf1 KlAeN6WGX4kkU7vm4A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:03 2026 by rpki-client