This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer File: hbc7mIsBRCjrr2ehj30Zmbojxk0.cer (raw, json) Hash identifier: Vy824PhpADMZxBN7fohzVv8jC0RaQHkUlgFbJ0Au0hQ= Subject key identifier: 85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C70DCD2993C9F6414CF28DBC2DBB7D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208139 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0d:cd:29:93:c9:f6:41:4c:f2:8d:bc:2d:bb:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85b73b988b014428ebaf67a18f7d1999ba23c64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:32:74:85:3e:80:cd:b6:f2:d7:0f:40:d3: 07:e8:cf:7c:0d:07:64:de:bf:10:7a:42:6c:a4:d8: ea:49:ee:90:fd:a1:ef:eb:31:f3:09:31:fe:35:a1: 85:8a:f8:49:65:c9:36:f3:82:33:c1:31:7a:35:62: c4:4e:d8:8d:f5:1f:34:cd:bb:15:f7:07:f7:3c:50: eb:cf:ac:ed:af:83:ba:db:10:74:c0:5d:b3:8f:74: ae:7a:c6:1e:cc:0d:68:71:f0:d2:58:a7:f4:61:85: e2:d0:08:c9:d8:d8:56:d4:3f:11:da:71:7a:bc:c8: e9:cd:a5:3b:21:a3:c3:4b:02:fe:bc:81:5f:c4:52: 9a:cf:11:70:f3:af:0d:a0:85:bb:9e:6a:55:cb:b5: 6f:25:dc:70:8b:ab:c4:53:b1:0a:7f:38:3e:53:78: a8:9c:46:34:8d:74:10:bb:66:f1:b3:6e:0a:b5:0f: 96:e7:99:80:44:e7:44:7e:f3:5c:62:80:50:33:7e: de:75:b1:01:ae:f6:d6:5e:1b:1e:7e:1b:be:e9:85: cc:87:18:e4:6f:de:88:8f:ef:64:3b:04:78:6e:bb: e7:7b:f3:38:42:ff:5b:27:43:6f:cd:69:39:b0:40: 7b:55:88:d7:f4:ef:87:65:22:39:19:d8:9e:8d:ba: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208139 Signature Algorithm: sha256WithRSAEncryption 30:f9:ed:9e:c4:65:cf:f8:53:85:ee:87:58:ec:46:ea:32:fa: 80:96:3c:4c:88:10:d6:4d:b0:5d:f1:29:26:97:15:b2:0d:c0: 99:5c:79:93:eb:b4:7f:44:7c:fb:6b:f2:9c:11:72:db:07:97: 98:40:f5:84:19:06:13:5a:d8:7a:ed:b4:28:d8:9b:55:fe:79: 6f:d1:20:1c:1a:6d:98:2f:8e:30:b1:42:9b:c3:27:a9:0a:46: 3f:c7:81:b2:90:55:81:f7:5c:d7:21:d1:00:b7:af:58:19:c4: 78:65:3b:b1:87:96:c7:c1:28:f0:93:80:49:06:cd:55:2e:ae: d5:57:16:66:0d:c1:00:a5:5d:61:d6:6b:2e:6f:39:e8:03:46: 04:a0:7e:b2:94:f3:95:30:c3:f7:8b:d1:df:fd:75:68:87:41: f2:5e:9f:e1:40:8b:4a:11:5d:8e:2b:ef:31:14:0f:3e:a0:03: f1:cf:1d:14:7f:35:fb:f7:49:ca:b3:c1:16:f9:9a:56:1e:24: b9:20:c5:fd:7a:03:20:be:3d:b4:c9:e3:b7:97:98:16:98:0b: a7:6e:e8:b1:68:a2:64:51:67:a0:6b:56:3c:cd:f4:ea:da:5a: 2c:34:af:79:8d:d6:aa:17:f7:53:92:3f:57:97:a7:4a:39:ca: 06:a0:63:4c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xw3NKZPJ9kFM8o28Lbt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWI3M2I5ODhiMDE0NDI4ZWJhZjY3YTE4ZjdkMTk5OWJhMjNjNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc4ydIU+gM228tcPQNMH6M98DQdk 3r8QekJspNjqSe6Q/aHv6zHzCTH+NaGFivhJZck284IzwTF6NWLETtiN9R80zbsV 9wf3PFDrz6ztr4O62xB0wF2zj3SuesYezA1ocfDSWKf0YYXi0AjJ2NhW1D8R2nF6 vMjpzaU7IaPDSwL+vIFfxFKazxFw868NoIW7nmpVy7VvJdxwi6vEU7EKfzg+U3io nEY0jXQQu2bxs24KtQ+W55mAROdEfvNcYoBQM37edbEBrvbWXhsefhu+6YXMhxjk b96Ij+9kOwR4brvne/M4Qv9bJ0NvzWk5sEB7VYjX9O+HZSI5GdiejbpUPQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIW3O5iLAUQo669noY99GZm6I8ZNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2I4NTBk ZS0wYzZiLTRkYzItYWQ5ZS1jZmVkZTA5MDA3YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvYjg1MGRl LTBjNmItNGRjMi1hZDllLWNmZWRlMDkwMDdhYS8xL2hiYzdtSXNCUkNqcnIyZWhq MzBabWJvanhrMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtCzANBgkqhkiG9w0BAQsFAAOCAQEAMPntnsRlz/hT he6HWOxG6jL6gJY8TIgQ1k2wXfEpJpcVsg3AmVx5k+u0f0R8+2vynBFy2weXmED1 hBkGE1rYeu20KNibVf55b9EgHBptmC+OMLFCm8MnqQpGP8eBspBVgfdc1yHRALev WBnEeGU7sYeWx8Eo8JOASQbNVS6u1VcWZg3BAKVdYdZrLm856ANGBKB+spTzlTDD 94vR3/11aIdB8l6f4UCLShFdjivvMRQPPqAD8c8dFH81+/dJyrPBFvmaVh4kuSDF /XoDIL49tMnjt5eYFpgLp27osWiiZFFnoGtWPM306tpaLDSveY3Wqhf3U5I/V5en SjnKBqBjTA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:29 2026 by rpki-client