This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer File: hgLiX_EiDtSqju94wzpyKrWIP40.cer (raw, json) Hash identifier: gw8hRBr6kKIYfldM4oVptQQHAnEQY/kBrfsi7cD8JEg= Subject key identifier: 86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4D12F16396E505EDAC4FF69D661D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.17.71.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d1:2f:16:39:6e:50:5e:da:c4:ff:69:d6:61:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:3f:9a:6a:dd:31:7a:db:92:0b:a4:66:38: 4d:d6:9b:6e:f2:cc:c5:b3:9b:4f:20:16:a0:f9:e5: 79:44:b6:cf:0b:1e:5f:61:25:75:62:60:f6:48:49: fe:1b:5a:ad:18:8c:8b:ae:a1:77:50:0a:ac:bb:59: b3:f8:47:5f:05:bd:b2:fd:7a:d9:08:21:66:9e:74: 54:cc:d3:7c:2f:a6:73:33:2f:cb:0d:fe:33:87:0b: 5f:1c:4d:a9:ae:41:bd:9d:4f:ab:a8:18:82:42:f6: 97:54:8d:73:d1:c2:9c:f0:4d:44:26:88:cb:c0:d2: 69:95:5c:89:4f:80:72:77:dd:3d:eb:44:f1:d7:00: 76:7c:f6:71:5a:dc:2f:c6:a4:cf:ee:2b:a0:fa:f8: 6e:ad:74:22:0c:20:a6:81:9a:9c:e7:47:93:26:9d: 43:10:25:4c:32:3c:83:de:ea:8e:7f:17:fa:e5:f8: 8f:d0:bd:23:e0:35:3d:1b:0b:39:3b:72:b4:38:9a: c6:b4:12:80:06:0f:77:74:41:4b:0c:05:2c:f6:26: 56:02:92:a9:ee:70:37:d2:af:84:7c:87:dc:7f:2d: 43:a8:ba:d1:5b:73:b9:a9:86:90:5a:b7:df:5c:24: d0:7a:e6:b0:97:10:f2:a5:f9:13:d6:bc:60:91:ae: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.71.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c4:11:0d:84:4d:e5:9e:3c:48:97:dd:14:a5:bb:03:33:6c: 3c:4a:44:dc:86:80:0f:e9:b2:41:39:bd:84:13:c8:24:46:a1: ee:ce:f0:33:05:57:67:e0:de:da:dc:d7:89:66:5a:9a:be:76: 7f:ce:3a:8b:f9:de:a4:af:5a:8d:fd:5a:7e:92:5d:fa:c4:fb: 0a:c9:e7:5d:a9:c8:7d:84:ff:18:3b:63:72:c0:03:5c:1c:56: 9c:b4:a1:ac:8c:cd:6e:8b:4d:e7:ea:f6:a4:83:77:a3:79:5c: db:b5:93:88:4d:17:32:1e:55:25:8e:29:a4:cd:3d:4f:54:6a: b5:69:95:af:d7:23:a0:0d:a9:ee:65:17:50:e8:5f:c3:33:49: 0e:e9:95:c6:e7:a8:38:29:28:53:99:81:91:2e:4c:8f:9c:c5: 21:74:a4:34:f7:21:5e:d7:f1:47:f9:00:55:0c:0f:73:7f:b7: cd:bb:a2:9f:ce:ce:6e:ce:d0:f7:62:b1:da:14:60:3e:eb:94: 1d:00:cf:56:cb:96:6d:d9:26:f0:0c:ed:6b:67:24:fe:5a:a4: fc:17:ba:a4:0f:c4:29:36:09:11:44:dd:24:37:7b:b9:88:65: 96:68:fe:98:a5:15:d5:f7:2a:6a:ea:44:6f:d8:ac:b8:e6:bb: 6b:13:07:fd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pNEvFjluUF7axP9p1mHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjAyZTI1ZmYxMjIwZWQ0YWE4ZWVmNzhjMzNhNzIyYWI1ODgzZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi4/mmrdMXrbkgukZjhN1ptu8szF s5tPIBag+eV5RLbPCx5fYSV1YmD2SEn+G1qtGIyLrqF3UAqsu1mz+EdfBb2y/XrZ CCFmnnRUzNN8L6ZzMy/LDf4zhwtfHE2prkG9nU+rqBiCQvaXVI1z0cKc8E1EJojL wNJplVyJT4Byd90960Tx1wB2fPZxWtwvxqTP7iug+vhurXQiDCCmgZqc50eTJp1D ECVMMjyD3uqOfxf65fiP0L0j4DU9Gws5O3K0OJrGtBKABg93dEFLDAUs9iZWApKp 7nA30q+EfIfcfy1DqLrRW3O5qYaQWrffXCTQeuawlxDypfkT1rxgka6WCwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIYC4l/xIg7Uqo7veMM6ciq1iD+NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2MyZTM4 MC1mOTU1LTRmZWItOWVmOC00ODFmNDU3ZTFiODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYzJlMzgw LWY5NTUtNGZlYi05ZWY4LTQ4MWY0NTdlMWI4OS8xL2hnTGlYX0VpRHRTcWp1OTR3 enB5S3JXSVA0MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRFHMA0GCSqGSIb3DQEBCwUAA4IBAQCUxBEN hE3lnjxIl90UpbsDM2w8SkTchoAP6bJBOb2EE8gkRqHuzvAzBVdn4N7a3NeJZlqa vnZ/zjqL+d6kr1qN/Vp+kl36xPsKyeddqch9hP8YO2NywANcHFactKGsjM1ui03n 6vakg3ejeVzbtZOITRcyHlUljimkzT1PVGq1aZWv1yOgDanuZRdQ6F/DM0kO6ZXG 56g4KShTmYGRLkyPnMUhdKQ09yFe1/FH+QBVDA9zf7fNu6Kfzs5uztD3YrHaFGA+ 65QdAM9Wy5Zt2SbwDO1rZyT+WqT8F7qkD8QpNgkRRN0kN3u5iGWWaP6YpRXV9ypq 6kRv2Ky45rtrEwf9 -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:51 2026 by rpki-client