This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer File: hA6dA48bwAXzsJxdyoIK2BCUiz4.cer (raw, json) Hash identifier: 2/TTxz7mWH0ApiW9lj1I/2AUQq4B5zXU3nqX1C5d8tc= Subject key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13109D88300BB73602BCE75CC37942 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43576 IP: 91.197.144.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:10:9d:88:30:0b:b7:36:02:bc:e7:5c:c3:79:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ac:0b:0d:b9:d7:77:a4:1d:e2:54:84:48:86: 66:60:7c:00:27:ec:9d:7c:4b:87:73:aa:00:0d:3e: 5f:e1:76:b6:0c:b5:48:0d:e2:13:a1:fd:2d:ab:62: 01:c9:3f:8f:54:30:c6:9c:ce:4b:02:ae:6d:05:11: 8f:34:80:f9:4e:7d:38:94:66:41:ac:04:62:d8:03: e8:5e:fe:5f:d4:28:76:28:f6:9d:a6:aa:7c:be:bc: eb:67:39:29:65:18:96:6c:33:57:18:14:35:64:4b: b8:b8:de:e5:c3:b7:29:e3:99:8b:68:20:d0:32:cf: 96:93:09:63:8e:86:52:2e:32:31:42:0e:08:c7:eb: 8f:e7:bc:69:38:85:d6:73:54:de:b8:d8:8d:26:41: 3f:4b:c3:7e:52:5b:81:83:91:3c:64:36:8a:00:65: 56:d6:7b:81:5b:c9:61:c0:ed:fc:79:85:58:44:a2: f2:1b:b8:fe:45:fc:c4:36:7e:09:43:ad:de:42:68: ea:02:4d:2b:c2:f3:63:3b:51:96:38:d3:bb:f3:ad: 63:9c:12:00:b2:f5:2e:71:32:a7:b6:41:fd:77:2c: 27:27:24:f5:df:ea:26:5c:7f:96:7c:7e:69:88:09: ca:dc:7e:76:8d:6c:7c:8b:8e:9c:44:4e:ba:4f:4e: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.144.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43576 Signature Algorithm: sha256WithRSAEncryption 5c:08:9b:db:07:60:fa:44:01:52:ec:77:4e:a1:f7:78:dc:9a: 24:1b:ff:39:48:b0:8b:f3:b2:a5:73:63:46:40:ab:26:15:90: 31:11:93:6a:68:a9:26:80:98:e0:21:e7:15:1e:ef:3a:2f:d8: c7:29:a1:3b:9a:2c:82:d0:68:77:85:90:68:4c:94:e2:53:62: 7f:85:24:1c:6e:ac:c5:67:9b:01:1e:c5:47:8c:6e:1e:9b:56: da:0d:a3:54:48:2a:4b:8e:4e:47:87:fc:66:70:81:8c:11:2f: 1e:c9:0c:16:d7:84:de:ba:5b:57:5c:80:86:94:5e:37:df:82: 19:f6:9b:0d:6e:e2:f4:35:36:e9:6c:62:85:41:47:2d:8d:cb: 84:5e:44:69:aa:6b:00:bc:74:20:eb:9b:30:40:81:82:7a:c5: 08:2b:0d:6b:a7:48:2b:47:b8:4b:eb:d1:ed:45:e3:fe:72:b2: 09:48:a3:68:dd:f2:57:9b:59:97:cf:29:0e:0e:40:50:c2:82: de:fe:98:30:85:47:ac:25:2b:be:5a:c0:53:8a:8d:98:09:ba: b1:ca:ab:0f:78:b6:ae:84:18:f9:88:b4:57:3e:81:5f:48:6e: 66:8f:a4:54:94:db:fb:ee:35:c2:e7:35:a4:a9:c7:37:e6:09: c9:4a:4c:b2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8ExCdiDALtzYCvOdcw3lCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDBlOWQwMzhmMWJjMDA1ZjNiMDljNWRjYTgyMGFkODEwOTQ4YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76wLDbnXd6Qd4lSESIZmYHwAJ+yd fEuHc6oADT5f4Xa2DLVIDeITof0tq2IByT+PVDDGnM5LAq5tBRGPNID5Tn04lGZB rARi2APoXv5f1Ch2KPadpqp8vrzrZzkpZRiWbDNXGBQ1ZEu4uN7lw7cp45mLaCDQ Ms+WkwljjoZSLjIxQg4Ix+uP57xpOIXWc1TeuNiNJkE/S8N+UluBg5E8ZDaKAGVW 1nuBW8lhwO38eYVYRKLyG7j+RfzENn4JQ63eQmjqAk0rwvNjO1GWONO7861jnBIA svUucTKntkH9dywnJyT13+omXH+WfH5piAnK3H52jWx8i46cRE66T07CPQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIQOnQOPG8AF87CcXcqCCtgQlIs+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzJmMzgw ZC04NDNmLTQyZTItOGZiMy1jZTllMWI4Mjk2N2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMmYzODBk LTg0M2YtNDJlMi04ZmIzLWNlOWUxYjgyOTY3ZC8xL2hBNmRBNDhid0FYenNKeGR5 b0lLMkJDVWl6NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW8WQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCqODANBgkqhkiG9w0BAQsFAAOCAQEAXAib2wdg+kQBUux3TqH3eNyaJBv/OUiw i/OypXNjRkCrJhWQMRGTamipJoCY4CHnFR7vOi/YxymhO5osgtBod4WQaEyU4lNi f4UkHG6sxWebAR7FR4xuHptW2g2jVEgqS45OR4f8ZnCBjBEvHskMFteE3rpbV1yA hpReN9+CGfabDW7i9DU26WxihUFHLY3LhF5EaaprALx0IOubMECBgnrFCCsNa6dI K0e4S+vR7UXj/nKyCUijaN3yV5tZl88pDg5AUMKC3v6YMIVHrCUrvlrAU4qNmAm6 scqrD3i2roQY+Yi0Vz6BX0huZo+kVJTb++41wuc1pKnHN+YJyUpMsg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:14 2026 by rpki-client