This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer (raw, json) Hash identifier: G70buUb8M6xikQK1/kVnVNo9/68hyNqbi46w/+etaBQ= Subject key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59CA709CDDC1B752B4E4AB4D0C4DFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215389 IP: 2001:67c:280::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:ca:70:9c:dd:c1:b7:52:b4:e4:ab:4d:0c:4d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:7d:2f:20:56:55:87:78:0b:fd:7e:fe:9c: 10:05:2b:e6:9f:b6:c8:5a:a5:17:34:81:f4:02:ac: 52:ef:7d:13:98:a6:81:4f:1a:9c:9f:80:ef:7e:e5: 42:95:82:04:1f:53:6d:72:c8:f7:8f:a2:94:f8:6b: 21:45:a3:01:63:93:ef:c6:41:7f:6c:92:8b:19:0d: 54:4a:eb:05:cf:72:92:82:11:2c:16:96:6a:48:d6: 0d:d5:9f:16:5b:c7:8b:16:0d:57:c1:6c:36:d7:11: 35:40:6a:b3:a2:36:4b:d0:b4:9f:de:14:ae:49:42: fe:fc:00:6b:7d:3b:1e:ba:07:c6:80:58:9e:fd:43: e0:f7:d5:4a:41:3f:6a:63:5f:c9:a7:4b:03:de:64: 9a:10:e1:6c:31:ed:0c:f3:ad:89:25:4b:cb:39:d8: a3:14:01:d4:9e:55:e3:a2:23:5a:5a:12:16:78:d2: ac:40:68:f4:6f:81:6c:1c:8c:6c:87:02:43:52:8f: 2d:32:dd:aa:8d:53:f8:22:1a:fe:b2:d6:e8:64:7d: 64:10:e9:32:e7:2b:68:47:9a:57:72:f9:3a:e2:2b: b7:8b:b5:25:0c:6e:5a:9f:71:af:44:88:10:1f:a1: f3:d9:62:3c:12:8e:d5:36:30:69:df:29:d6:fc:f9: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:280::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215389 Signature Algorithm: sha256WithRSAEncryption 98:7f:43:15:4e:ef:29:eb:f7:9f:40:f2:36:56:5d:ee:5a:cc: 97:d4:74:cf:22:ab:e3:a6:5b:fa:9e:f8:fd:14:60:22:1e:17: 92:23:0f:de:7c:a8:10:02:84:93:ad:99:72:5d:c6:18:e5:12: 67:00:e0:fa:7a:55:20:37:8c:36:d5:ac:44:6a:f1:33:dd:f5: d6:38:26:ff:78:6b:91:27:87:f9:c5:7c:47:9f:3c:74:eb:c7: d7:25:e2:e0:c8:6f:a6:cc:0f:36:fa:26:1e:6e:d3:32:04:f7: 16:3f:b4:2e:71:d6:d2:e7:c9:a4:d6:ff:7a:9e:64:9d:5f:d7: 9f:b5:99:5b:be:25:7b:fd:e3:72:3c:99:53:9d:6b:29:a9:93: 6a:85:9c:86:76:7a:88:d2:9f:22:bf:ae:a5:22:f6:53:80:89: e5:07:ad:e6:60:3b:e6:af:ae:c3:6e:a4:89:67:2d:3a:13:d5: 83:bf:26:22:71:94:96:24:8f:16:65:0e:ca:a4:34:4e:12:9a: 5b:55:8e:db:27:d0:7c:4e:13:e1:fe:e0:99:c9:9e:44:e3:af: 02:0c:3c:1c:78:bb:72:57:df:0c:d6:83:1d:ab:36:0d:91:55: 24:e1:08:a0:a1:f8:ba:03:31:3e:2f:d1:7c:3e:c0:87:21:f8: c5:96:50:0e -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6WcpwnN3Bt1K05KtNDE3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGViM2ZhYTgzODg1NDliNTVjYjNmM2FiZDRjNmMxNTEwNmNmNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZV9LyBWVYd4C/1+/pwQBSvmn7bI WqUXNIH0AqxS730TmKaBTxqcn4DvfuVClYIEH1Ntcsj3j6KU+GshRaMBY5PvxkF/ bJKLGQ1USusFz3KSghEsFpZqSNYN1Z8WW8eLFg1XwWw21xE1QGqzojZL0LSf3hSu SUL+/ABrfTseugfGgFie/UPg99VKQT9qY1/Jp0sD3mSaEOFsMe0M862JJUvLOdij FAHUnlXjoiNaWhIWeNKsQGj0b4FsHIxshwJDUo8tMt2qjVP4Ihr+stboZH1kEOky 5ytoR5pXcvk64iu3i7UlDG5an3GvRIgQH6Hz2WI8Eo7VNjBp3ynW/PkwmwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFB3rP6qDiFSbVcs/Or1MbBUQbPU7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzZjNDEz MS0zNjVjLTRjMTQtOWUwYi01MDJhOTU3ZmRhZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNmM0MTMx LTM2NWMtNGMxNC05ZTBiLTUwMmE5NTdmZGFmOC8xL0hlc19xb09JVkp0Vnl6ODZ2 VXhzRlJCczlUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAKAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNJXTANBgkqhkiG9w0BAQsFAAOCAQEAmH9DFU7vKev3n0DyNlZd7lrMl9R0 zyKr46Zb+p74/RRgIh4XkiMP3nyoEAKEk62Zcl3GGOUSZwDg+npVIDeMNtWsRGrx M9311jgm/3hrkSeH+cV8R588dOvH1yXi4MhvpswPNvomHm7TMgT3Fj+0LnHW0ufJ pNb/ep5knV/Xn7WZW74le/3jcjyZU51rKamTaoWchnZ6iNKfIr+upSL2U4CJ5Qet 5mA75q+uw26kiWctOhPVg78mInGUliSPFmUOyqQ0ThKaW1WO2yfQfE4T4f7gmcme ROOvAgw8HHi7clffDNaDHas2DZFVJOEIoKH4ugMxPi/RfD7AhyH4xZZQDg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:54 2026 by rpki-client