This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer File: hkl2gukwfEaHk1AIFzFH0TKijGQ.cer (raw, json) Hash identifier: uxVUGdMyk844KS1Zz0BVbWiH3i/XUzmhLW9UJDIwn6A= Subject key identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834DCAEBD75FE3F4BA355D323C050E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60782 IP: 79.139.66.0/24 IP: 79.139.68.0/22 IP: 79.139.116.0/22 IP: 185.74.84.0/22 IP: 185.97.16.0/22 IP: 2a05:4900::/29 IP: 2a06:3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dc:ae:bd:75:fe:3f:4b:a3:55:d3:23:c0:50:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86497682e9307c4687935008173147d132a28c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:27:c2:5a:4a:c7:10:71:b4:62:4b:82:66: 3c:85:95:45:dc:21:8a:92:df:0b:f8:b4:96:ac:59: f5:4d:1e:d6:71:8c:ba:b1:09:2c:8b:e5:c7:77:86: 0c:a7:73:55:3a:4d:21:c5:f8:27:03:de:ba:82:6b: 70:ce:14:ad:c0:18:56:3d:67:f5:55:f7:7c:94:05: 4e:de:b8:4f:72:be:b0:88:62:6d:5d:72:50:58:28: 00:0f:c1:d2:df:56:be:35:cd:f3:70:49:14:90:60: 44:0c:e0:cd:aa:96:69:86:fe:b5:2e:1d:74:61:2f: 30:dd:96:c5:64:0c:eb:7f:11:c9:d3:78:f1:cc:01: 60:35:58:88:95:e4:f9:4b:a1:10:6e:de:2e:2e:86: 53:95:16:6e:5d:34:b8:3b:1f:62:36:b3:72:cc:aa: 93:15:28:13:69:f1:19:70:a1:7a:21:c3:c9:9b:62: ec:14:2a:ee:46:6f:c2:ca:ae:89:48:9a:1a:1f:3b: 2d:03:9e:3b:0a:38:de:f0:a6:a2:03:dc:a7:3b:18: a3:6f:79:18:d6:0f:a6:f3:87:08:a9:84:1e:9a:b4: af:36:58:14:53:0d:a8:79:a6:a0:48:3a:14:fe:2d: 24:b6:ae:3e:fa:ea:11:66:92:26:2e:70:dd:da:5e: 61:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.139.66.0/24 79.139.68.0/22 79.139.116.0/22 185.74.84.0/22 185.97.16.0/22 IPv6: 2a05:4900::/29 2a06:3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60782 Signature Algorithm: sha256WithRSAEncryption 52:60:46:6c:3e:d0:25:e0:31:69:14:ff:6d:f2:0a:28:a4:48: a4:d3:38:39:21:32:39:79:b5:50:bc:53:f2:83:b3:72:67:4a: 96:3b:64:75:9d:95:f1:2e:2c:5d:33:36:68:a3:43:ca:ba:47: 81:f7:29:cb:23:e9:ca:1f:1a:08:b3:07:9c:b3:c2:1b:2d:4d: 92:c9:46:8b:24:2d:60:a5:19:fd:69:ef:74:c9:de:4f:90:48: 23:bd:bb:f0:da:6a:ce:4e:67:4e:d2:fd:d0:b8:e5:74:8f:1a: 8f:4d:68:d5:35:c9:a8:b9:fc:c9:46:95:26:90:2a:69:18:b7: a8:99:71:ce:d0:50:a5:e4:ad:95:7c:39:4f:31:02:3f:8c:5c: da:87:4c:17:e3:e3:d3:cb:8f:26:7c:a8:fb:fc:a7:31:35:1e: a0:2a:52:c1:88:68:43:20:5f:ee:b8:52:a9:a2:58:97:2d:63: 58:ca:f7:ff:60:5e:cc:6f:e6:96:9d:09:09:29:77:46:18:45: b5:0d:54:67:41:73:61:20:d7:30:ac:80:c9:af:b9:aa:1f:39: 3d:5a:68:80:ef:9a:ad:d5:16:51:cb:10:f7:82:8f:32:86:a5: 82:8f:2a:7a:26:c6:9c:56:59:04:14:9e:7e:0a:32:b9:00:f5: a4:7e:fd:48 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt4NNyuvXX+P0ujVdMjwFDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjQ5NzY4MmU5MzA3YzQ2ODc5MzUwMDgxNzMxNDdkMTMyYTI4YzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+AnwlpKxxBxtGJLgmY8hZVF3CGK kt8L+LSWrFn1TR7WcYy6sQksi+XHd4YMp3NVOk0hxfgnA966gmtwzhStwBhWPWf1 Vfd8lAVO3rhPcr6wiGJtXXJQWCgAD8HS31a+Nc3zcEkUkGBEDODNqpZphv61Lh10 YS8w3ZbFZAzrfxHJ03jxzAFgNViIleT5S6EQbt4uLoZTlRZuXTS4Ox9iNrNyzKqT FSgTafEZcKF6IcPJm2LsFCruRm/Cyq6JSJoaHzstA547Cjje8KaiA9ynOxijb3kY 1g+m84cIqYQemrSvNlgUUw2oeaagSDoU/i0ktq4++uoRZpImLnDd2l5hewIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFIZJdoLpMHxGh5NQCBcxR9EyooxkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2MxYTc1 NC0xZjk2LTQ1MDAtODEwMi05MTE0MGYzMjllYWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYzFhNzU0 LTFmOTYtNDUwMC04MTAyLTkxMTQwZjMyOWVhYS8xL2hrbDJndWt3ZkVhSGsxQUlG ekZIMFRLaWpHUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQAT4tCAwQCT4tEAwQCT4t0AwQCuUpUAwQCuWEQ MBQEAgACMA4DBQMqBUkAAwUDKgYDwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA 7W4wDQYJKoZIhvcNAQELBQADggEBAFJgRmw+0CXgMWkU/23yCiikSKTTODkhMjl5 tVC8U/KDs3JnSpY7ZHWdlfEuLF0zNmijQ8q6R4H3Kcsj6cofGgizB5yzwhstTZLJ RoskLWClGf1p73TJ3k+QSCO9u/Daas5OZ07S/dC45XSPGo9NaNU1yai5/MlGlSaQ KmkYt6iZcc7QUKXkrZV8OU8xAj+MXNqHTBfj49PLjyZ8qPv8pzE1HqAqUsGIaEMg X+64UqmiWJctY1jK9/9gXsxv5padCQkpd0YYRbUNVGdBc2Eg1zCsgMmvuaofOT1a aIDvmq3VFlHLEPeCjzKGpYKPKnomxpxWWQQUnn4KMrkA9aR+/Ug= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:40 2026 by rpki-client