This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer (raw, json) Hash identifier: g/91kVh7RxUT5zY1a2BtgvgAyYpNbvQXp+KC+9+LbPk= Subject key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A36CF472B414E08CC598C746088449 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197696 IP: 31.170.8.0/21 IP: 185.236.224.0/22 IP: 2a01:9500::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6c:f4:72:b4:14:e0:8c:c5:98:c7:46:08:84:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:76:bd:eb:bf:3e:1e:74:cd:12:f6:13:0c: 68:3f:f0:6f:37:bf:b2:97:02:25:dd:86:92:a5:2d: 8f:c0:aa:1d:a4:54:8e:58:e5:72:6f:8b:dc:b2:64: 54:33:22:49:2e:34:84:2d:8c:c7:42:57:c8:11:ed: eb:3a:b7:89:dc:b2:44:e3:5e:c3:a6:73:1b:9c:26: f5:6f:f7:26:69:d1:55:15:65:70:a7:07:b6:23:4d: d5:b7:2e:55:23:88:69:49:8d:6a:e9:82:a4:87:69: e2:4b:39:8c:ef:72:39:1f:a1:92:a3:80:72:9a:c8: 3b:fb:59:1b:14:e3:2a:c8:3b:e1:87:bf:c2:d2:32: b6:cd:05:32:3b:db:46:51:3f:aa:ec:79:86:2f:f6: 84:d6:ba:33:08:65:50:49:0b:34:12:df:34:94:b0: 70:74:a5:1f:e8:3e:e1:23:03:d4:3b:42:d7:7c:6e: a2:1c:8c:f6:e8:60:28:03:16:16:ba:03:70:3f:f0: 67:e2:c6:18:12:14:3c:58:eb:65:02:81:fc:e2:e5: 51:55:2f:3d:65:91:16:4a:33:ef:49:5b:45:b9:f9: ca:89:24:ec:1c:da:ed:a5:20:e2:df:1a:3e:d3:1a: 62:e5:66:93:57:b9:0a:cd:47:c9:a3:b7:31:e3:a1: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.8.0/21 185.236.224.0/22 IPv6: 2a01:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197696 Signature Algorithm: sha256WithRSAEncryption 7b:dc:0b:16:e1:23:41:9d:79:b4:b4:75:79:c9:78:88:ea:a8: 10:9e:80:81:e8:be:f9:2f:18:34:71:f4:a6:0c:ad:08:00:bb: 4c:f0:a8:f6:6d:02:d7:86:5d:1e:8d:87:fb:1b:96:a8:27:f0: a5:3f:a9:09:ce:f5:51:ec:13:e3:7c:f6:8a:44:81:a4:34:a0: d4:3d:2a:be:4e:3f:ee:15:62:8a:c8:e5:f3:5b:42:73:8f:98: 70:b9:e1:8e:e4:b3:17:8e:39:70:46:da:af:aa:a9:4f:de:f5: f0:ba:52:7a:2c:0f:21:e3:81:cf:25:e1:21:09:40:20:b6:7c: 31:f5:69:51:a7:85:be:87:6c:7d:5d:34:96:67:f2:89:7b:41: 82:e5:e5:71:6f:00:81:08:54:37:69:3f:59:32:3a:ee:4a:24: 5e:93:65:34:39:e0:c9:5c:a7:44:60:63:21:1c:5e:a5:32:3a: bc:e3:3f:a2:4f:49:15:07:d6:02:8f:ea:89:d0:25:f0:10:1b: 46:e2:1d:af:7b:11:7b:92:d5:58:41:27:61:16:82:98:af:d5: f6:e5:5f:77:06:c0:65:a9:1e:46:97:7a:ef:2d:09:67:5b:4d: 13:c2:60:f8:d8:db:36:3e:7c:fa:5e:1d:36:7c:6f:4a:58:35: f9:b3:3c:f0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4o2z0crQU4IzFmMdGCIRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGI4N2FmNTMzNGM1YzQ1MTQxYjY2NzVhOWVkNDZlNTdiNzk3NmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi92veu/Ph50zRL2EwxoP/BvN7+y lwIl3YaSpS2PwKodpFSOWOVyb4vcsmRUMyJJLjSELYzHQlfIEe3rOreJ3LJE417D pnMbnCb1b/cmadFVFWVwpwe2I03Vty5VI4hpSY1q6YKkh2niSzmM73I5H6GSo4By msg7+1kbFOMqyDvhh7/C0jK2zQUyO9tGUT+q7HmGL/aE1rozCGVQSQs0Et80lLBw dKUf6D7hIwPUO0LXfG6iHIz26GAoAxYWugNwP/Bn4sYYEhQ8WOtlAoH84uVRVS89 ZZEWSjPvSVtFufnKiSTsHNrtpSDi3xo+0xpi5WaTV7kKzUfJo7cx46EoqwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFIS4evUzTFxFFBtmdantRuV7eXasMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2I3YmFj My1mNjJkLTQxNDItYWYzYy0yZTk4NGZiZmY4YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvYjdiYWMz LWY2MmQtNDE0Mi1hZjNjLTJlOTg0ZmJmZjhiMS8xL2hMaDY5VE5NWEVVVUcyWjFx ZTFHNVh0NWRxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDH6oIAwQCuezgMA0EAgACMAcDBQAqAZUAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMEQDANBgkqhkiG9w0BAQsFAAOCAQEAe9wL FuEjQZ15tLR1ecl4iOqoEJ6Agei++S8YNHH0pgytCAC7TPCo9m0C14ZdHo2H+xuW qCfwpT+pCc71UewT43z2ikSBpDSg1D0qvk4/7hViisjl81tCc4+YcLnhjuSzF445 cEbar6qpT9718LpSeiwPIeOBzyXhIQlAILZ8MfVpUaeFvodsfV00lmfyiXtBguXl cW8AgQhUN2k/WTI67kokXpNlNDngyVynRGBjIRxepTI6vOM/ok9JFQfWAo/qidAl 8BAbRuIdr3sRe5LVWEEnYRaCmK/V9uVfdwbAZakeRpd67y0JZ1tNE8Jg+NjbNj58 +l4dNnxvSlg1+bM88A== -----END CERTIFICATE-----Generated at Mon Jan 26 12:30:30 2026 by rpki-client