This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer File: rHI58-_bN5H1vlVSmbXYFpfz0BI.cer (raw, json) Hash identifier: lL17sIXOImKf69rBWIDSUloywQ62hl7Cg4Zsp7pAGzo= Subject key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED2203A1073F79362B7A53D7E4F0ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39291 AS: 50681 AS: 60991 IP: 185.86.156.0/22 IP: 185.141.148.0/22 IP: 2a05:b940::/29 IP: 2a07:2540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:22:03:a1:07:3f:79:36:2b:7a:53:d7:e4:f0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac7239f3efdb3791f5be555299b5d81697f3d012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:80:58:ff:49:94:a9:98:6c:d5:1c:d5:e4: 13:9f:de:42:db:84:b5:31:59:2d:43:88:99:92:c3: 31:5f:62:9d:9e:64:08:fa:39:f5:48:3e:e8:7a:d9: 19:49:99:4c:48:00:b4:7c:f0:3e:e7:ce:0c:49:44: 6f:a0:6e:98:58:31:c8:35:38:04:74:d7:21:bc:d9: 74:e8:46:8b:ea:e8:03:1f:97:85:ec:85:86:0a:db: 9f:e9:3a:7c:53:6d:3e:29:ca:26:c2:f4:51:f5:36: 0c:ce:54:86:2a:d6:a1:d8:b9:55:66:cf:5f:d5:aa: 6f:ca:c5:bd:31:e2:0e:fe:dd:76:5c:45:14:c7:a5: e7:8f:07:a8:81:05:32:bf:d6:6d:43:7d:4d:bf:00: 40:9e:a0:c8:b9:36:bb:b6:1e:b2:c5:2e:64:e5:a1: 56:a0:fc:dc:4a:9c:ab:ee:df:0e:bb:1c:fc:ce:a3: 9e:e3:f7:57:5d:14:b6:c3:b2:4e:4d:6c:d7:63:5b: cc:44:47:a4:64:51:ea:aa:45:2c:e1:a2:7a:29:6a: 0c:8d:de:6c:46:db:82:bd:2d:a4:b4:be:0e:0c:a5: d5:c5:b6:36:ad:50:57:a6:ff:c1:0e:98:55:59:93: 06:48:ce:e4:e0:bb:ae:3b:af:73:7d:8a:6a:ed:73: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.156.0/22 185.141.148.0/22 IPv6: 2a05:b940::/29 2a07:2540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39291 50681 60991 Signature Algorithm: sha256WithRSAEncryption b0:ef:01:2b:27:bc:e5:6a:98:88:cd:eb:94:4e:12:36:e2:2e: 5e:af:e0:7b:c9:f5:11:44:9b:7a:db:e0:d1:f4:62:a5:a9:ef: 0b:45:c3:23:de:43:50:5e:23:50:94:b8:5c:23:3c:2e:77:25: 71:3e:8e:1b:77:dd:86:c3:00:3e:88:4a:1f:5c:f2:23:15:bb: 38:e2:88:7f:6e:ee:19:4e:cf:9f:e4:54:cc:80:f4:83:46:85: 5d:c2:50:16:74:75:91:66:08:a2:2b:c3:c5:6c:df:d7:17:93: 0d:9d:f8:34:31:7b:bb:85:d7:cf:0b:9d:5b:71:bc:67:c9:b8: 5c:8a:e2:be:e6:17:ee:41:a3:8c:d7:fc:8e:73:97:db:3c:48: 4e:ee:19:26:92:97:0e:43:5c:73:91:81:37:5b:c4:62:77:54: ec:bf:49:d0:c2:0b:11:c6:13:62:5d:5a:87:de:e6:9e:a9:c0: 5d:0b:44:48:cc:b9:9a:3e:86:0b:d0:4c:dc:f8:61:fc:0f:fa: 4f:23:e0:e5:f8:0f:14:fd:c9:79:ec:61:74:a3:55:43:bd:84: 43:2c:55:8f:ec:7e:b4:8d:f1:b1:70:af:c8:bc:c3:70:78:4d: 4a:cf:4b:75:6f:79:c3:c6:0d:9b:53:ba:96:15:88:85:81:3c: 7c:a6:e9:e1 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt57SIDoQc/eTYrelPX5PDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzcyMzlmM2VmZGIzNzkxZjViZTU1NTI5OWI1ZDgxNjk3ZjNkMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2SAWP9JlKmYbNUc1eQTn95C24S1 MVktQ4iZksMxX2KdnmQI+jn1SD7oetkZSZlMSAC0fPA+584MSURvoG6YWDHINTgE dNchvNl06EaL6ugDH5eF7IWGCtuf6Tp8U20+KcomwvRR9TYMzlSGKtah2LlVZs9f 1apvysW9MeIO/t12XEUUx6XnjweogQUyv9ZtQ31NvwBAnqDIuTa7th6yxS5k5aFW oPzcSpyr7t8Ouxz8zqOe4/dXXRS2w7JOTWzXY1vMREekZFHqqkUs4aJ6KWoMjd5s RtuCvS2ktL4ODKXVxbY2rVBXpv/BDphVWZMGSM7k4LuuO69zfYpq7XOPhQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFKxyOfPv2zeR9b5VUpm12BaX89ASMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlL2M4OTBm Yy0yY2Y4LTQwNzUtODc1ZC1jY2ZjN2YwN2I5Y2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvYzg5MGZj LTJjZjgtNDA3NS04NzVkLWNjZmM3ZjA3YjljYi8xL3JISTU4LV9iTjVIMXZsVlNt YlhZRnBmejBCSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuVacAwQCuY2UMBQEAgACMA4DBQMqBblAAwUD KgclQDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMAmXsCAwDF+QIDAO4/MA0GCSqG SIb3DQEBCwUAA4IBAQCw7wErJ7zlapiIzeuUThI24i5er+B7yfURRJt62+DR9GKl qe8LRcMj3kNQXiNQlLhcIzwudyVxPo4bd92GwwA+iEofXPIjFbs44oh/bu4ZTs+f 5FTMgPSDRoVdwlAWdHWRZgiiK8PFbN/XF5MNnfg0MXu7hdfPC51bcbxnybhciuK+ 5hfuQaOM1/yOc5fbPEhO7hkmkpcOQ1xzkYE3W8Rid1Tsv0nQwgsRxhNiXVqH3uae qcBdC0RIzLmaPoYL0Ezc+GH8D/pPI+Dl+A8U/cl57GF0o1VDvYRDLFWP7H60jfGx cK/IvMNweE1Kz0t1b3nDxg2bU7qWFYiFgTx8punh -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:22 2026 by rpki-client