This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer File: v_h00BVAcOlio8hxmCH9ucsQFuE.cer (raw, json) Hash identifier: 8ucAUJLpsrptoXDlIfsC1V+Pwe/8c8HRfLCjDpV1Etk= Subject key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3645512F3A67B384A2696B40297747 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213346 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:45:51:2f:3a:67:b3:84:a2:69:6b:40:29:77:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:c2:e4:7d:43:45:ea:12:52:df:8c:30:9a: 77:69:8a:3f:a9:2d:ba:65:8e:02:a4:ff:28:86:7d: 90:8f:40:82:2d:d3:18:2a:ad:fa:d6:d4:34:94:bc: ad:ee:56:34:ef:13:ff:6d:d7:89:f1:0b:df:24:37: 9f:63:0d:6a:7e:70:7f:d7:6f:a6:0d:c8:be:5f:b7: f0:b2:53:9a:24:95:f2:32:4e:95:a7:d0:06:a7:dd: 4a:8c:d6:e5:cb:7b:11:6c:20:5d:d0:89:94:17:f8: 70:8f:1c:e2:fb:72:4d:07:0a:cf:b5:06:c7:5a:8b: 92:af:d5:c3:7e:49:7d:13:9a:d8:49:66:a1:c9:ee: eb:dd:3d:aa:04:48:91:a6:d2:2c:6a:8f:02:bd:04: cd:86:53:2f:64:ae:9b:7a:9c:2e:08:be:af:11:02: 56:ad:e3:b2:09:bf:fa:27:cc:68:b7:81:68:83:a3: 52:87:fe:af:5c:ba:ec:dd:6f:20:22:99:b1:8d:c4: f8:5f:41:10:c3:0d:82:ea:84:6e:27:7f:a9:5a:16: 54:d0:fe:a6:ee:30:f8:e5:a5:41:dd:ee:b9:4a:e9: 35:2d:7b:8b:2c:81:88:cb:24:94:03:48:b4:5d:55: fd:71:77:8f:94:d0:57:5f:5e:9d:e7:22:a0:7f:c6: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213346 Signature Algorithm: sha256WithRSAEncryption 9f:c7:e3:be:8f:8f:d0:aa:8a:9a:44:f0:0e:20:17:8e:5d:7f: 23:31:91:56:8b:55:14:26:43:4a:d6:e1:ec:82:14:d8:de:ce: 8b:38:01:90:5a:e7:f4:44:cf:0f:e3:14:16:5e:9c:40:11:5a: 09:d6:ef:05:6e:b5:48:14:57:dc:14:e9:25:74:92:00:80:5c: bf:ec:2f:75:08:c4:d3:d6:7b:32:6a:6c:12:6f:18:2f:0e:36: a9:4a:c7:c0:66:e6:b5:be:44:b5:96:63:32:7b:07:ec:c9:65: 6a:67:52:c1:51:32:2b:85:41:df:ee:f3:6e:fa:b9:e2:f6:d2: 75:a1:ec:31:1e:5e:39:42:ac:8a:6a:34:53:f3:f9:ce:af:c8: d1:f4:be:fc:f3:2f:52:ef:34:a7:2d:93:86:4e:c9:a7:de:04: 9e:fd:06:e1:43:c9:84:f5:3a:13:f8:bf:67:eb:d3:7e:d9:c5: 57:98:d7:62:19:1f:47:af:a5:3f:1c:ec:3c:1d:84:b6:3d:64: 64:6b:72:5c:11:bc:ec:94:0e:c5:4d:74:92:b3:a3:58:ab:2d: c9:b1:ed:6e:d4:63:5a:e5:dc:3d:53:15:f1:76:45:2b:ca:1f: 15:ca:7a:fd:01:73:0a:0d:12:b7:f1:c0:4a:b6:41:bf:d6:c4: 45:1f:e4:60 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NkVRLzpns4SiaWtAKXdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmY4NzRkMDE1NDA3MGU5NjJhM2M4NzE5ODIxZmRiOWNiMTAxNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTHC5H1DReoSUt+MMJp3aYo/qS26 ZY4CpP8ohn2Qj0CCLdMYKq361tQ0lLyt7lY07xP/bdeJ8QvfJDefYw1qfnB/12+m Dci+X7fwslOaJJXyMk6Vp9AGp91KjNbly3sRbCBd0ImUF/hwjxzi+3JNBwrPtQbH WouSr9XDfkl9E5rYSWahye7r3T2qBEiRptIsao8CvQTNhlMvZK6bepwuCL6vEQJW reOyCb/6J8xot4Fog6NSh/6vXLrs3W8gIpmxjcT4X0EQww2C6oRuJ3+pWhZU0P6m 7jD45aVB3e65Suk1LXuLLIGIyySUA0i0XVX9cXePlNBXX16d5yKgf8aXOwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFL/4dNAVQHDpYqPIcZgh/bnLEBbhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2Q1YmM2 MS02YTk5LTRjNGUtODRjNC05YjIxZjMzNGQwMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZDViYzYx LTZhOTktNGM0ZS04NGM0LTliMjFmMzM0ZDAyOC8xL3ZfaDAwQlZBY09saW84aHht Q0g5dWNzUUZ1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBYjANBgkqhkiG9w0BAQsFAAOCAQEAn8fjvo+P0KqK mkTwDiAXjl1/IzGRVotVFCZDStbh7IIU2N7OizgBkFrn9ETPD+MUFl6cQBFaCdbv BW61SBRX3BTpJXSSAIBcv+wvdQjE09Z7MmpsEm8YLw42qUrHwGbmtb5EtZZjMnsH 7MllamdSwVEyK4VB3+7zbvq54vbSdaHsMR5eOUKsimo0U/P5zq/I0fS+/PMvUu80 py2Thk7Jp94Env0G4UPJhPU6E/i/Z+vTftnFV5jXYhkfR6+lPxzsPB2Etj1kZGty XBG87JQOxU10krOjWKstybHtbtRjWuXcPVMV8XZFK8ofFcp6/QFzCg0St/HASrZB v9bERR/kYA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:18 2026 by rpki-client