This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer File: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer (raw, json) Hash identifier: 02D3ymXYdEqCI4fWtc7QChDX7TzU8j6jIqwDeRSn6Zs= Subject key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA1DCD849045ABAA13FB050CBBB09BE52 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 15:23:16 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 206218 IP: 74.209.165.0/24 IP: 2001:678:bc4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:dc:d8:49:04:5a:ba:a1:3f:b0:50:cb:bb:09:be:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 15:23:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=842e1583c6d2b94878c5a9839ef67f56144b8565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:f7:e7:d8:bc:be:62:5c:aa:de:75:68:97: 3d:1c:4d:46:6b:b7:f8:0f:85:b9:51:21:ec:ff:a1: e5:fe:dd:72:ee:71:18:23:bf:02:cb:fc:3e:d0:42: 4a:55:67:59:67:36:ac:51:86:c2:bf:62:75:dc:65: e6:d6:44:22:82:e1:2a:b6:06:a0:e6:cf:48:89:00: ac:9d:3c:ff:5e:e1:ea:68:6b:b3:f9:f9:92:02:88: b2:ce:7f:b4:5d:8b:1b:4f:f8:ac:59:e5:ed:2a:bd: 09:65:51:09:6f:d8:b9:16:69:1a:cb:b4:de:f5:65: 49:eb:8a:2a:fe:39:cc:50:4e:3d:d6:45:b8:2c:b4: 09:b0:19:5a:1a:91:0f:12:21:af:61:2c:b9:52:9d: b7:cc:7f:69:65:6c:c7:1a:f1:49:20:15:0d:06:9b: 9f:bc:6f:a3:1b:f6:bc:4c:cc:df:19:35:47:9e:57: cc:33:1f:ae:46:11:37:73:21:52:7c:ac:de:03:f5: b9:4a:0f:d6:5b:6c:41:03:72:c4:3a:08:e9:ff:7a: cd:ee:2e:ea:5a:38:dd:ae:60:41:ee:19:a8:a2:39: f7:f5:70:0e:fd:04:ba:7e:4c:e8:8a:9f:b7:32:fd: 47:82:d8:f4:c1:51:91:73:69:a5:9a:44:df:e6:dc: ba:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.209.165.0/24 IPv6: 2001:678:bc4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206218 Signature Algorithm: sha256WithRSAEncryption 73:f2:b2:f9:63:32:62:b4:d1:c8:e1:44:0f:a7:1d:e3:98:d2: 22:e2:42:88:77:90:7e:b8:fe:29:e7:2a:e0:80:06:27:cb:5d: 66:ca:f1:38:d6:99:cc:89:b1:d6:e1:97:60:a2:99:dd:06:10: ab:b7:2d:85:53:c2:fe:23:ea:38:b2:a4:41:b6:ce:c6:1c:24: c4:91:ac:f2:91:59:b9:89:11:6b:03:a7:4c:ed:a1:36:e9:2f: 04:a8:30:90:b2:70:74:6b:3b:96:b7:e6:8e:d3:df:ac:2c:bd: b0:d1:66:83:0b:2e:a9:7f:14:bf:80:e1:90:9a:c0:b3:17:58: 6a:3a:9d:ed:64:d2:b5:89:2d:0c:53:b5:04:4b:54:dd:db:84: 77:ed:fc:e0:c5:c0:90:7b:96:f4:47:ae:77:74:f8:3b:c9:38: 26:03:1a:fd:f2:71:02:2c:e5:35:9d:1b:a5:30:3d:d2:f5:9e: 4e:18:6a:b4:11:13:32:b2:98:66:2f:79:87:16:a0:d4:0d:9a: 99:f6:4c:da:c3:a9:82:c3:13:b6:22:da:58:e2:bc:b4:5c:c6: 68:6f:0f:da:f6:79:7d:ef:ec:a3:a5:5c:66:af:0f:19:67:96: ab:98:30:e4:d4:3a:68:2d:54:9f:0b:6d:e9:e1:a6:54:1c:cd: ae:df:f5:92 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZqh3NhJBFq6oT+wUMu7Cb5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTUyMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDJlMTU4M2M2ZDJiOTQ4NzhjNWE5ODM5ZWY2N2Y1NjE0NGI4NTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd3359i8vmJcqt51aJc9HE1Ga7f4 D4W5USHs/6Hl/t1y7nEYI78Cy/w+0EJKVWdZZzasUYbCv2J13GXm1kQiguEqtgag 5s9IiQCsnTz/XuHqaGuz+fmSAoiyzn+0XYsbT/isWeXtKr0JZVEJb9i5Fmkay7Te 9WVJ64oq/jnMUE491kW4LLQJsBlaGpEPEiGvYSy5Up23zH9pZWzHGvFJIBUNBpuf vG+jG/a8TMzfGTVHnlfMMx+uRhE3cyFSfKzeA/W5Sg/WW2xBA3LEOgjp/3rN7i7q WjjdrmBB7hmoojn39XAO/QS6fkzoip+3Mv1Hgtj0wVGRc2mlmkTf5ty6WQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFIQuFYPG0rlIeMWpg572f1YUS4VlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzlkNGVl OS1hMjljLTQ4NTktODE5YS04Y2NlZWVkNjJjZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvOWQ0ZWU5 LWEyOWMtNDg1OS04MTlhLThjY2VlZWQ2MmNkNS8xL2hDNFZnOGJTdVVoNHhhbURu dlpfVmhSTGhXVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAStGlMA8EAgACMAkDBwAgAQZ4C8QwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAyWKMA0GCSqGSIb3DQEBCwUAA4IBAQBz8rL5YzJi tNHI4UQPpx3jmNIi4kKId5B+uP4p5yrggAYny11myvE41pnMibHW4ZdgopndBhCr ty2FU8L+I+o4sqRBts7GHCTEkazykVm5iRFrA6dM7aE26S8EqDCQsnB0azuWt+aO 09+sLL2w0WaDCy6pfxS/gOGQmsCzF1hqOp3tZNK1iS0MU7UES1Td24R37fzgxcCQ e5b0R653dPg7yTgmAxr98nECLOU1nRulMD3S9Z5OGGq0ERMysphmL3mHFqDUDZqZ 9kzaw6mCwxO2ItpY4ry0XMZobw/a9nl97+yjpVxmrw8ZZ5armDDk1DpoLVSfC23p 4aZUHM2u3/WS -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:14 2025 by rpki-client