This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer File: its62HX3YlxjkjZZ8UKVjbeHijI.cer (raw, json) Hash identifier: q1evg/d+mGBoRo2htL0TVwxrsSb20+UFOhHcDw0csJM= Subject key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12C2C5AFC1B9B8FAFAA8328A656E02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.117.48.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c2:c5:af:c1:b9:b8:fa:fa:a8:32:8a:65:6e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8adb3ad875f7625c63923659f142958db7878a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:b8:ae:9c:fa:5b:7e:c2:64:83:2d:06:63: e8:80:b4:d7:39:6f:29:51:3c:4d:ae:8e:2b:f0:04: 46:fa:77:4c:74:7d:7f:72:02:3d:7b:fa:fb:38:c2: f8:57:4b:41:39:c4:40:bc:0c:b1:db:5d:b0:16:75: 95:18:9c:51:2b:ff:3f:11:ac:60:c5:f7:90:2c:85: ad:c3:28:8a:c3:02:2d:27:f3:48:36:35:fb:aa:06: 7d:90:13:d4:61:5a:f7:b2:4b:c5:12:31:23:2e:d0: 7f:70:d3:b8:f6:2f:f3:06:ab:ac:21:be:ba:26:7e: 03:80:a0:2c:1f:5c:d9:c0:61:9c:a1:04:5a:b1:93: 77:5d:50:ba:e7:a6:ec:b7:cd:8b:ee:42:69:38:f5: 77:bb:6f:32:e7:42:6b:43:72:3f:6d:49:78:fb:9a: 76:9e:ce:cf:a7:f2:48:03:d0:de:4d:b5:f8:4d:50: d2:45:af:a3:be:95:78:2f:7b:0e:5f:e9:8e:0f:d9: cc:19:24:d1:55:57:4a:8c:e0:17:ca:9f:59:37:e2: b0:34:a3:ea:e1:ce:63:e4:fe:a0:13:2e:e1:7c:fb: 77:8b:3c:35:ba:ea:07:9e:05:7c:2f:db:0d:ba:4d: 69:e1:82:3a:df:90:1f:80:27:6f:bc:33:b7:3b:86: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.48.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:5e:bb:83:3a:b2:2a:b0:f4:5b:2f:99:f0:6e:6c:24:3c:c8: d3:c6:3f:11:06:06:58:2a:66:4d:88:52:d0:fd:ef:c4:cd:bf: a9:8c:10:a3:10:e0:2c:ca:51:dd:9a:4d:af:0b:eb:bc:b6:81: f3:51:3f:c5:57:56:73:3c:82:b3:50:37:5a:1f:cb:73:b7:5e: 50:56:aa:03:f5:b3:68:c0:5c:34:32:36:7d:0e:46:ee:60:63: 45:50:3d:64:28:a5:da:f0:6b:e3:24:18:ca:a9:6c:d4:d7:df: 8f:67:09:51:db:7b:7a:ca:f0:07:41:d6:c4:e2:00:fb:60:3a: f1:75:1f:8e:e6:19:5b:e3:14:17:0e:f2:c9:b4:1f:86:37:17: bd:76:57:9f:84:db:4d:a2:9f:fb:c2:9a:28:dc:d4:43:ac:c7: e3:98:44:77:87:bb:aa:6b:a6:83:04:65:a5:c5:19:00:b5:e1: a0:76:dd:e6:9e:fe:d1:91:6f:f3:88:23:09:58:70:2b:1a:30: be:53:48:b8:4a:77:da:a9:29:4f:c9:d7:42:12:73:d0:d0:bd: 48:ff:3d:23:fe:95:de:c4:32:c6:f1:9c:a7:80:68:76:8b:0c: a7:58:ae:f6:35:9b:97:83:50:2d:30:45:ec:aa:2d:20:f0:bd: 37:0a:17:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EsLFr8G5uPr6qDKKZW4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWRiM2FkODc1Zjc2MjVjNjM5MjM2NTlmMTQyOTU4ZGI3ODc4YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v24rpz6W37CZIMtBmPogLTXOW8p UTxNro4r8ARG+ndMdH1/cgI9e/r7OML4V0tBOcRAvAyx212wFnWVGJxRK/8/Eaxg xfeQLIWtwyiKwwItJ/NINjX7qgZ9kBPUYVr3skvFEjEjLtB/cNO49i/zBqusIb66 Jn4DgKAsH1zZwGGcoQRasZN3XVC656bst82L7kJpOPV3u28y50JrQ3I/bUl4+5p2 ns7Pp/JIA9DeTbX4TVDSRa+jvpV4L3sOX+mOD9nMGSTRVVdKjOAXyp9ZN+KwNKPq 4c5j5P6gEy7hfPt3izw1uuoHngV8L9sNuk1p4YI635AfgCdvvDO3O4ZOpQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIrbOth192JcY5I2WfFClY23h4oyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzE4N2Yw Yi00YmU5LTQ3NGEtYjQzNS04ODViYzU0ZGNlNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvMTg3ZjBi LTRiZTktNDc0YS1iNDM1LTg4NWJjNTRkY2U2Mi8xL2l0czYySFgzWWx4amtqWlo4 VUtWamJlSGlqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXUwMA0GCSqGSIb3DQEBCwUAA4IBAQBaXruD OrIqsPRbL5nwbmwkPMjTxj8RBgZYKmZNiFLQ/e/Ezb+pjBCjEOAsylHdmk2vC+u8 toHzUT/FV1ZzPIKzUDdaH8tzt15QVqoD9bNowFw0MjZ9DkbuYGNFUD1kKKXa8Gvj JBjKqWzU19+PZwlR23t6yvAHQdbE4gD7YDrxdR+O5hlb4xQXDvLJtB+GNxe9dlef hNtNop/7wpoo3NRDrMfjmER3h7uqa6aDBGWlxRkAteGgdt3mnv7RkW/ziCMJWHAr GjC+U0i4SnfaqSlPyddCEnPQ0L1I/z0j/pXexDLG8ZyngGh2iwynWK72NZuXg1At MEXsqi0g8L03Chdp -----END CERTIFICATE-----Generated at Sun Jan 11 18:17:13 2026 by rpki-client