This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer File: hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer (raw, json) Hash identifier: /FXwRUlIJpRoMfQ8S2kL/QRZ2gXUF2srRL3mcKD+SHc= Subject key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE9C5ADD0BA4FD3FBD0DB0BBE4F00A9CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 14:30:37 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 50627 IP: 5.42.144.0/22 IP: 178.20.32.0/21 IP: 2a12:5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:c5:ad:d0:ba:4f:d3:fb:d0:db:0b:be:4f:00:a9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 14:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:73:89:92:0c:44:5f:fb:a9:d0:d8:49:47: 3b:ed:ac:92:b9:e8:b5:35:54:31:95:31:f3:20:3d: c2:14:70:be:cf:8c:87:0b:e4:73:43:bb:f5:76:70: 2b:3c:69:dc:ac:27:a0:94:44:1f:50:2c:f0:30:dd: 21:55:8d:3b:7a:24:b9:57:a5:f4:e1:ee:77:3e:fe: e6:ba:04:9f:6a:d2:11:ba:6e:65:dc:bb:ef:16:47: ed:08:b7:f2:23:51:05:2c:e8:7d:6d:0f:c7:9d:24: 05:32:34:7a:18:84:1a:f6:65:25:2b:54:f8:fa:f5: 5e:05:37:88:9d:8f:30:f5:53:ab:52:07:f2:20:7e: 8d:40:14:3a:8f:14:32:cc:19:77:05:14:f6:4a:47: 1b:28:47:b3:94:76:fc:27:13:bc:f0:6e:25:3b:8d: d6:65:af:6d:b5:90:05:e4:3e:29:cd:f3:7e:5f:be: df:32:3e:44:48:1e:fe:7a:77:18:a7:3a:aa:bb:25: e3:ae:6c:aa:16:ad:38:42:64:d6:93:dc:ed:33:01: 98:93:fa:6c:7d:76:8d:c9:3d:e7:02:f4:73:da:c0: d0:f7:a5:a2:c7:03:60:8b:58:06:e3:97:ac:fc:38: ff:b7:55:a1:54:00:c7:98:5f:a2:7c:a0:34:66:04: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.144.0/22 178.20.32.0/21 IPv6: 2a12:5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50627 Signature Algorithm: sha256WithRSAEncryption 5f:c6:78:18:c6:e5:1b:e8:f3:f9:58:74:4b:7c:e0:db:df:9c: 0f:ef:25:0c:6f:a5:c0:a4:13:78:ac:e4:df:52:b6:85:66:77: 30:62:6b:6c:ca:71:ed:6d:02:62:5a:3f:be:0a:b0:68:96:a1: 31:b4:a9:0e:72:72:76:b1:65:1c:9a:29:ce:65:c5:fa:a6:4a: d0:d2:f7:b6:c1:3b:6e:34:7b:ce:dc:ac:bd:f9:f0:4a:84:6a: bc:08:1c:bf:98:93:27:67:ff:4f:3a:e0:c6:48:f3:f6:3d:c5: 04:df:a9:86:c4:8b:ea:26:e7:b2:65:03:81:49:73:f8:da:c8: 79:df:8e:29:b0:a5:4c:7b:94:60:9d:49:f2:e6:a1:5a:1c:b4: cd:22:0b:90:8e:26:da:a0:a4:64:36:de:5f:82:2c:87:53:44: ba:33:77:7a:a8:d5:b1:da:17:34:77:ec:41:9a:60:0c:3e:fe: 25:ac:39:de:50:5b:5f:aa:42:68:6e:a6:d7:7f:a7:80:a1:68: 49:cd:c2:64:a8:8e:76:ed:a0:c0:66:2c:d1:4f:92:2d:af:ba: bf:ce:67:14:be:89:2f:34:d6:33:10:a7:24:63:d3:f3:67:62: bf:89:ec:0b:4d:07:0b:76:77:b9:6d:97:50:a3:8b:f6:69:f1: 0b:cb:f0:cc -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZrpxa3Quk/T+9DbC75PAKnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTQzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGE0YWNhMDIwZmIyYmRjOTNhNDcyNjZlODdlYzY3Y2RjODg1N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsVziZIMRF/7qdDYSUc77aySuei1 NVQxlTHzID3CFHC+z4yHC+RzQ7v1dnArPGncrCeglEQfUCzwMN0hVY07eiS5V6X0 4e53Pv7mugSfatIRum5l3LvvFkftCLfyI1EFLOh9bQ/HnSQFMjR6GIQa9mUlK1T4 +vVeBTeInY8w9VOrUgfyIH6NQBQ6jxQyzBl3BRT2SkcbKEezlHb8JxO88G4lO43W Za9ttZAF5D4pzfN+X77fMj5ESB7+encYpzqquyXjrmyqFq04QmTWk9ztMwGYk/ps fXaNyT3nAvRz2sDQ96WixwNgi1gG45es/Dj/t1WhVADHmF+ifKA0ZgSONQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFISkrKAg+yvck6RyZuh+xnzciFfFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzZiYjIy Ny01YjM2LTRmMmEtYTFjNS05ZWYzNmQyNTE1MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvNmJiMjI3 LTViMzYtNGYyYS1hMWM1LTllZjM2ZDI1MTUxNy8xL2hLU3NvQ0Q3Szl5VHBISm02 SDdHZk55SVY4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCBSqQAwQDshQgMA0EAgACMAcDBQMqEgXAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFwzANBgkqhkiG9w0BAQsFAAOCAQEAX8Z4 GMblG+jz+Vh0S3zg29+cD+8lDG+lwKQTeKzk31K2hWZ3MGJrbMpx7W0CYlo/vgqw aJahMbSpDnJydrFlHJopzmXF+qZK0NL3tsE7bjR7ztysvfnwSoRqvAgcv5iTJ2f/ Tzrgxkjz9j3FBN+phsSL6ibnsmUDgUlz+NrIed+OKbClTHuUYJ1J8uahWhy0zSIL kI4m2qCkZDbeX4Ish1NEujN3eqjVsdoXNHfsQZpgDD7+Jaw53lBbX6pCaG6m13+n gKFoSc3CZKiOdu2gwGYs0U+SLa+6v85nFL6JLzTWMxCnJGPT82div4nsC00HC3Z3 uW2XUKOL9mnxC8vwzA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:42:27 2025 by rpki-client