This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer (raw, json) Hash identifier: z3eLFiYfVzucek8fDgv5HvrnDDToqHnRsPSguGmTQjQ= Subject key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FDC8CD6F4133C6F8EBAC97CB84332 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 109.71.152.0/22 IP: 2a0f:58c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:dc:8c:d6:f4:13:3c:6f:8e:ba:c9:7c:b8:43:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:06:cb:dd:0e:12:1b:19:63:be:01:ef:a4:1b: 98:c0:a7:55:58:72:bf:2e:06:48:9c:b7:c7:e1:cc: ff:37:b1:b8:01:e3:ee:48:32:87:9e:dc:a8:bf:c5: 37:81:b7:9b:57:11:36:a6:59:8e:ce:9a:00:24:26: 31:69:84:70:b9:f9:56:f9:a2:4c:a9:38:b5:83:20: 8b:b3:93:eb:f3:df:7c:3c:02:25:9d:dd:fd:62:02: 42:38:fb:10:5e:46:52:d5:4e:6a:36:46:23:12:c4: e8:62:c1:77:9e:40:e6:1f:07:86:41:03:20:48:92: 8a:77:26:2b:f1:39:db:3b:8e:18:c7:33:c4:30:f3: 66:e3:05:58:10:fb:c9:35:4e:2f:ed:b9:a2:93:55: 3f:8a:b2:2f:53:ba:30:27:6d:a4:c9:dc:6b:e2:45: a5:a6:8b:d5:a5:33:49:87:c8:40:3a:70:ce:7b:0c: a6:e2:6c:d1:3b:a7:e9:c4:5d:a8:5a:8d:37:cc:69: 1f:cb:3d:e0:bd:a9:f3:87:e8:6e:55:e2:2f:7a:da: 5b:89:d1:39:ad:ed:79:b9:39:61:b0:72:0a:71:01: bf:47:99:0b:e3:2f:13:8f:45:b7:5e:03:76:50:82: 34:c4:66:01:a5:be:b3:ef:73:6a:3f:e1:18:bc:e9: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.152.0/22 IPv6: 2a0f:58c0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:51:5a:7c:81:cf:8e:86:41:c2:cb:71:dd:99:c4:dc:2c:98: 7f:5a:e9:97:fb:93:b8:10:87:36:d0:31:8c:01:8b:4f:e3:24: dc:fa:f3:14:a1:11:fa:1b:9d:11:9c:1d:e7:af:57:a7:da:f0: b3:34:f3:60:ea:95:13:15:37:bb:32:d7:e8:6d:c9:98:7e:4e: 9f:8a:82:1a:5f:9b:b3:e6:a1:fc:fd:52:5d:f3:95:99:36:af: f6:7f:42:95:cd:e2:f9:34:5c:77:7c:a3:b5:02:a5:0f:a5:71: 72:bc:e7:9e:05:c6:cb:02:8f:c7:9d:c6:52:b5:5e:b8:ee:88: 67:38:e9:c6:90:c5:a0:d1:e8:10:82:51:97:2b:35:b1:59:02: e4:ba:51:77:d7:74:e6:2e:96:7c:fe:9f:2a:1f:25:50:76:bb: d2:1e:47:c8:6d:7e:e9:52:30:b3:00:c2:07:d7:81:55:c8:eb: a7:80:4f:9b:1e:85:a6:60:15:d5:96:ba:95:4b:5c:b3:a6:2c: 9c:97:8d:97:29:fd:40:7c:26:d6:72:ba:ea:58:47:ad:e5:56: ae:30:79:ac:b7:94:83:2f:0d:16:36:11:ff:e4:9f:2a:47:9b: d2:d9:6b:1a:ae:08:6d:54:b5:6b:8c:11:61:e8:01:31:bd:8b: bb:af:44:1f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8f9yM1vQTPG+Ousl8uEMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGFiZjBjOTgxNzAxYWJhOTdlNGZjZDBiZWQ0ZTRjZGI4NjkyMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QbL3Q4SGxljvgHvpBuYwKdVWHK/ LgZInLfH4cz/N7G4AePuSDKHntyov8U3gbebVxE2plmOzpoAJCYxaYRwuflW+aJM qTi1gyCLs5Pr8998PAIlnd39YgJCOPsQXkZS1U5qNkYjEsToYsF3nkDmHweGQQMg SJKKdyYr8TnbO44YxzPEMPNm4wVYEPvJNU4v7bmik1U/irIvU7owJ22kydxr4kWl povVpTNJh8hAOnDOewym4mzRO6fpxF2oWo03zGkfyz3gvanzh+huVeIvetpbidE5 re15uTlhsHIKcQG/R5kL4y8Tj0W3XgN2UII0xGYBpb6z73NqP+EYvOkxXwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFISr8MmBcBq6l+T80L7U5M24aSBHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0Lzk5NTJj OC0yZDQwLTQxZTItYmE3MC02MWJjN2VjYzQ4NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvOTk1MmM4 LTJkNDAtNDFlMi1iYTcwLTYxYmM3ZWNjNDg1Yy8xL2hLdnd5WUZ3R3JxWDVQelF2 dFRremJocElFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCbUeYMA0EAgACMAcDBQAqD1jAMA0GCSqGSIb3 DQEBCwUAA4IBAQA9UVp8gc+OhkHCy3HdmcTcLJh/WumX+5O4EIc20DGMAYtP4yTc +vMUoRH6G50RnB3nr1en2vCzNPNg6pUTFTe7MtfobcmYfk6fioIaX5uz5qH8/VJd 85WZNq/2f0KVzeL5NFx3fKO1AqUPpXFyvOeeBcbLAo/HncZStV647ohnOOnGkMWg 0egQglGXKzWxWQLkulF313TmLpZ8/p8qHyVQdrvSHkfIbX7pUjCzAMIH14FVyOun gE+bHoWmYBXVlrqVS1yzpiycl42XKf1AfCbWcrrqWEet5VauMHmst5SDLw0WNhH/ 5J8qR5vS2WsarghtVLVrjBFh6AExvYu7r0Qf -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:08 2026 by rpki-client