This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer File: cHSIc9gyAihk-skAZdUdjie0Pl0.cer (raw, json) Hash identifier: 1zdORPZg9Do002oDGLZJ/dwJGa0+Z9UIZ63Hb3GNUNQ= Subject key identifier: 70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA53A13F03753127A49C5485F6870DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 38952 IP: 185.17.116.0/22 IP: 194.79.52.0/22 IP: 2a02:4f0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3a:13:f0:37:53:12:7a:49:c5:48:5f:68:70:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70748873d832022864fac90065d51d8e27b43e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:20:3b:fe:63:3f:02:fa:15:93:9e:37:7d: 0f:ea:fd:ba:21:fc:7d:83:26:6c:0b:09:00:5d:4d: 5f:9d:7a:40:f2:c1:33:35:34:19:8d:dd:2f:3b:73: cd:2e:54:08:c9:10:d1:e4:17:68:ac:28:39:b7:e4: e2:63:a3:81:eb:b4:39:30:8d:46:f0:21:3c:88:17: bb:1b:e4:38:32:90:c0:c6:2a:e4:e9:c8:be:49:ac: 1d:17:d4:7a:5e:f4:38:61:64:aa:c2:ce:0d:b5:b6: 17:64:53:69:e3:5a:4f:83:b4:1f:6d:62:f5:d3:06: de:52:63:70:ce:a2:23:30:c9:e7:fa:c7:e0:2c:ef: 99:07:be:ba:43:05:97:2b:8e:36:7d:d3:9c:13:9c: 03:66:83:4d:f4:8c:c8:81:2e:80:6f:88:90:8e:bd: d5:ef:86:23:df:a9:21:6c:aa:02:89:7c:e9:99:32: 9a:70:78:4a:15:f6:6f:b4:45:f5:af:63:1a:c9:97: 08:6e:3f:cf:87:ed:2f:3f:5a:7e:1c:ab:d3:88:94: 95:cd:60:33:59:3c:94:85:2a:ad:bc:45:8e:fa:b8: 21:ac:df:52:25:01:a4:26:ba:58:76:3f:03:45:31: 90:20:9f:86:e4:1d:5d:29:76:1a:0b:59:a7:94:ea: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.116.0/22 194.79.52.0/22 IPv6: 2a02:4f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38952 Signature Algorithm: sha256WithRSAEncryption a8:49:b0:a0:8d:05:91:53:a2:07:50:75:21:e3:bb:7e:97:ff: 47:27:05:fb:d6:dd:b2:38:87:eb:7b:6f:d7:e2:7e:7c:cb:ab: fb:38:74:a7:c1:6a:72:3b:49:09:ee:ad:32:9d:f9:d7:9d:50: 0e:0c:bc:9b:92:bc:56:e6:79:17:f8:ae:f5:46:db:08:98:93: 58:c8:2a:54:4f:31:19:b1:51:66:f3:d6:ad:1d:49:80:5e:e0: ee:1d:99:b7:a8:c7:e7:51:54:40:1b:4e:6b:94:e0:bd:66:01: 8b:a6:96:29:71:4f:52:60:36:a4:54:10:64:62:5a:79:b8:a6: e4:60:57:5c:0f:1f:cc:8e:60:69:6a:30:90:70:d2:bd:6c:85: dd:13:59:d7:61:a3:ac:bd:60:7b:f0:58:fb:e1:f4:56:8f:0f: 12:31:50:88:97:22:11:76:f0:4d:86:b6:38:83:f9:6b:ed:02: 50:9d:08:df:e0:72:0e:48:1b:b7:4a:c9:e2:3b:9b:7c:ac:1f: 21:3c:85:66:e0:90:7a:d2:86:2d:29:18:63:38:3b:b7:f6:e7: bf:ec:a9:be:32:21:40:e2:30:e1:42:b1:8e:85:41:ed:42:66: 17:49:af:21:3c:05:1b:47:ba:5f:b6:26:f9:c1:7e:6d:e5:60: 5e:08:c7:76 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pToT8DdTEnpJxUhfaHDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDc0ODg3M2Q4MzIwMjI4NjRmYWM5MDA2NWQ1MWQ4ZTI3YjQzZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08UgO/5jPwL6FZOeN30P6v26Ifx9 gyZsCwkAXU1fnXpA8sEzNTQZjd0vO3PNLlQIyRDR5BdorCg5t+TiY6OB67Q5MI1G 8CE8iBe7G+Q4MpDAxirk6ci+SawdF9R6XvQ4YWSqws4NtbYXZFNp41pPg7QfbWL1 0wbeUmNwzqIjMMnn+sfgLO+ZB766QwWXK442fdOcE5wDZoNN9IzIgS6Ab4iQjr3V 74Yj36khbKoCiXzpmTKacHhKFfZvtEX1r2MayZcIbj/Ph+0vP1p+HKvTiJSVzWAz WTyUhSqtvEWO+rghrN9SJQGkJrpYdj8DRTGQIJ+G5B1dKXYaC1mnlOrDzwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHB0iHPYMgIoZPrJAGXVHY4ntD5dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2FhMzM1 MC1hYTJhLTQ0NzctOWZjZC1hNjBiMmNjOGQwODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYWEzMzUw LWFhMmEtNDQ3Ny05ZmNkLWE2MGIyY2M4ZDA4MC8xL2NIU0ljOWd5QWloay1za0Fa ZFVkamllMFBsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuRF0AwQCwk80MA0EAgACMAcDBQAqAgTwMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYKDANBgkqhkiG9w0BAQsFAAOCAQEAqEmw oI0FkVOiB1B1IeO7fpf/RycF+9bdsjiH63tv1+J+fMur+zh0p8FqcjtJCe6tMp35 151QDgy8m5K8VuZ5F/iu9UbbCJiTWMgqVE8xGbFRZvPWrR1JgF7g7h2Zt6jH51FU QBtOa5TgvWYBi6aWKXFPUmA2pFQQZGJaebim5GBXXA8fzI5gaWowkHDSvWyF3RNZ 12GjrL1ge/BY++H0Vo8PEjFQiJciEXbwTYa2OIP5a+0CUJ0I3+ByDkgbt0rJ4jub fKwfITyFZuCQetKGLSkYYzg7t/bnv+ypvjIhQOIw4UKxjoVB7UJmF0mvITwFG0e6 X7Ym+cF+beVgXgjHdg== -----END CERTIFICATE-----Generated at Fri Jan 9 07:48:05 2026 by rpki-client