This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer File: H8SSerGUrhI3_eLTvvaQOIk_DcU.cer (raw, json) Hash identifier: mqfJi2y7oaBKp1CII41WFqlQUqNTbJwsC3+yVbqcQ80= Subject key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6A545048D0125C70771DD1D35B935 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15472 IP: 62.100.64.0/19 IP: 185.193.188.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a5:45:04:8d:01:25:c7:07:71:dd:1d:35:b9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:7f:a7:4e:4c:95:2d:43:59:cf:3b:0c:32: dc:84:42:36:28:3b:3e:dc:cb:a1:f1:f1:7e:07:74: c5:17:7c:c8:3b:ed:f5:44:24:af:79:f6:5a:3a:c2: f9:42:5f:96:f9:67:98:01:2f:34:f7:aa:29:b9:a4: 58:e6:b2:78:de:b4:c4:f7:cb:8e:e3:12:04:66:08: 01:76:75:cf:6c:44:5a:df:70:a6:6b:7a:72:fd:b0: 9c:89:23:54:55:bd:89:99:88:db:34:cd:30:b6:41: ce:03:12:72:eb:5d:9e:d6:a0:50:c3:61:a9:87:0a: aa:cf:ae:a4:b2:32:a2:23:64:b2:5f:97:e9:a2:23: a2:88:0b:a1:2c:3a:0f:c4:2d:ca:cd:61:b2:85:df: 49:c5:b7:20:a2:91:30:22:10:43:35:40:17:ca:1e: ea:70:1d:57:56:20:71:c3:27:87:00:3a:3f:6f:86: 7d:0b:9d:3b:30:64:04:3f:09:9c:6f:90:2a:17:53: af:0a:fe:cd:f1:1d:48:af:e1:a7:21:6a:93:32:b0: 0b:a6:c5:89:37:ac:ad:9e:ca:dc:64:52:1c:57:11: ed:a7:ea:0b:f7:47:7c:f6:1d:50:cc:74:6e:b0:a5: 7b:30:4a:d8:e9:2f:71:49:73:e6:6f:de:1c:79:03: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.100.64.0/19 185.193.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15472 Signature Algorithm: sha256WithRSAEncryption 9c:08:40:09:a1:e9:ad:47:ec:75:68:17:5a:94:5e:6a:0a:20: 0a:a2:51:5d:9b:12:d2:de:a9:9d:2e:da:f2:2b:73:d5:f4:dd: 47:4d:33:9d:97:18:2e:37:35:d1:7b:6b:cb:11:25:1d:03:63: 08:25:c1:a9:5a:7c:0a:36:ff:cd:8e:fe:e8:32:9d:5a:eb:82: ac:5c:c5:b0:d6:b8:9e:de:49:1f:12:4b:c9:05:c8:94:31:df: d5:82:39:e0:b8:46:61:b3:84:fd:21:71:72:90:83:73:30:44: 83:20:02:1a:cf:9f:5f:9e:4a:86:4b:fc:2e:98:9c:3d:87:e0: 9a:80:a0:0f:42:31:0b:b5:1b:a3:d7:91:ee:36:8d:d8:bb:79: 44:b5:c5:bb:99:0f:e0:cf:83:54:1f:fc:1c:80:03:b1:f6:4b: 1c:d2:a9:91:fd:a1:90:d5:df:a8:05:0f:6d:58:bf:47:2a:21: b8:ee:f0:3c:39:13:26:57:79:40:c5:cd:10:4d:45:39:93:78: 50:11:72:f0:f3:ec:08:4f:d4:81:a5:f7:de:42:e6:92:b6:59: 2b:42:07:a2:47:1c:2d:36:0d:3d:4f:cb:ce:75:5c:e0:90:01: 67:2b:f2:df:15:91:ad:a0:51:1f:7c:6e:95:83:c1:95:71:73: 0b:46:52:68 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt+pqVFBI0BJccHcd0dNbk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmM0OTI3YWIxOTRhZTEyMzdmZGUyZDNiZWY2OTAzODg5M2YwZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkt/p05MlS1DWc87DDLchEI2KDs+ 3Muh8fF+B3TFF3zIO+31RCSvefZaOsL5Ql+W+WeYAS8096opuaRY5rJ43rTE98uO 4xIEZggBdnXPbERa33Cma3py/bCciSNUVb2JmYjbNM0wtkHOAxJy612e1qBQw2Gp hwqqz66ksjKiI2SyX5fpoiOiiAuhLDoPxC3KzWGyhd9JxbcgopEwIhBDNUAXyh7q cB1XViBxwyeHADo/b4Z9C507MGQEPwmcb5AqF1OvCv7N8R1Ir+GnIWqTMrALpsWJ N6ytnsrcZFIcVxHtp+oL90d89h1QzHRusKV7MErY6S9xSXPmb94ceQPv0wIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFB/EknqxlK4SN/3i0772kDiJPw3FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5Lzk0M2Q1 ZC01NjBjLTQzMTQtYWY4Mi04YjhhMDFiZDc0MTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvOTQzZDVk LTU2MGMtNDMxNC1hZjgyLThiOGEwMWJkNzQxNC8xL0g4U1NlckdVcmhJM19lTFR2 dmFRT0lrX0RjVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQFPmRAAwQCucG8MBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAjxwMA0GCSqGSIb3DQEBCwUAA4IBAQCcCEAJoemtR+x1aBdalF5qCiAK olFdmxLS3qmdLtryK3PV9N1HTTOdlxguNzXRe2vLESUdA2MIJcGpWnwKNv/Njv7o Mp1a64KsXMWw1rie3kkfEkvJBciUMd/VgjnguEZhs4T9IXFykINzMESDIAIaz59f nkqGS/wumJw9h+CagKAPQjELtRuj15HuNo3Yu3lEtcW7mQ/gz4NUH/wcgAOx9ksc 0qmR/aGQ1d+oBQ9tWL9HKiG47vA8ORMmV3lAxc0QTUU5k3hQEXLw8+wIT9SBpffe QuaStlkrQgeiRxwtNg09T8vOdVzgkAFnK/LfFZGtoFEffG6Vg8GVcXMLRlJo -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:45 2026 by rpki-client