This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer File: hVvB1897acjrUdDG1U9_-t94DKc.cer (raw, json) Hash identifier: 8eJH3Y1vPKdPNMXGo10R4Axzfqwk8JQqm1pz/ZCrIqw= Subject key identifier: 85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7385E0C6B4279A6A1AC474CC15E4C593 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 15:25:45 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 204624 IP: 109.71.186.0/23 IP: 2a0e:f640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:85:e0:c6:b4:27:9a:6a:1a:c4:74:cc:15:e4:c5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 15:25:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:d4:6e:97:f4:5b:94:da:51:b1:f6:21:29: 47:02:77:e1:55:6d:f8:3f:cf:c2:d5:17:7b:9b:7e: c1:eb:37:e4:e9:8a:04:cd:5a:1a:07:79:99:e4:bf: 72:7a:57:0c:d9:2d:13:dd:82:1a:9b:d4:94:c6:13: ed:17:a0:34:3d:d4:a3:02:e8:6d:d6:06:7e:eb:ca: 23:f9:cc:f8:a0:10:29:e0:36:39:03:13:db:32:c1: 81:5f:ba:2e:42:5e:de:47:a0:db:28:10:35:e2:85: 2f:af:1f:c4:5f:48:70:33:ef:1c:12:21:5c:f9:d1: c7:0e:c6:d2:02:a2:d5:02:2e:99:28:ee:43:67:83: 12:bf:45:fa:7f:2a:c2:1d:73:8e:a6:11:34:4e:bd: db:9b:7d:24:0c:fd:c5:37:5f:24:00:6b:7a:72:c7: e0:0f:dc:fa:a0:08:5c:0d:8e:76:92:cf:fb:81:56: b4:22:c2:e8:d7:31:e1:37:5b:e9:58:48:a7:30:84: 10:d1:ec:74:45:3c:08:25:d7:41:e1:07:a8:29:08: 02:5c:cb:0f:cf:6c:74:3d:a4:d3:50:76:79:07:0c: c7:90:a3:c2:d2:fe:83:e8:7b:34:34:da:14:0b:52: 67:d0:94:a1:c8:e6:10:27:7d:35:b8:8d:f0:e9:a0: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.186.0/23 IPv6: 2a0e:f640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204624 Signature Algorithm: sha256WithRSAEncryption 44:08:ec:98:e5:29:1c:d7:0d:17:d4:f9:71:1b:61:06:e6:f4: f0:d4:2f:6c:f8:33:c3:3b:69:6f:49:1f:8b:01:98:91:d3:d9: 92:08:c0:cd:be:37:47:3e:47:5d:59:4a:13:c7:5a:5a:ef:6d: e3:fa:bb:c1:ce:77:9f:58:91:64:ad:3d:8f:34:96:6d:ed:63: f9:88:94:37:f9:fc:49:f7:f7:48:30:ef:84:f7:8c:84:5a:46: 2f:7e:fd:82:11:08:ba:d2:1e:a3:75:cf:2e:20:3e:3d:d8:54: 56:9f:9e:e6:c0:4b:c7:04:63:a7:59:5a:ad:db:ee:48:95:d3: 5d:64:05:92:12:dd:08:4c:89:59:e4:98:d8:82:ad:6a:ab:3e: 47:28:14:3b:6f:95:d7:00:8e:73:15:0e:1d:b8:71:39:b6:7c: 6c:b9:27:6e:4b:56:71:7f:ca:7a:f9:37:30:47:fb:46:dc:e7: d6:14:7f:99:0a:f2:31:2b:09:fc:ea:a0:2b:e0:ad:7c:db:bd: 24:dc:3c:51:15:58:39:a6:1d:ae:e6:e0:21:93:92:a1:65:27: 37:d9:40:dc:a7:42:7c:5e:df:20:9a:3b:22:96:9e:f4:d3:69: db:1c:86:83:bc:11:81:22:3f:70:43:70:70:26:eb:1c:d9:63: 07:54:ec:2a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZpzheDGtCeaahrEdMwV5MWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMTUyNTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTViYzFkN2NmN2I2OWM4ZWI1MWQwYzZkNTRmN2ZmYWRmNzgwY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyerUbpf0W5TaUbH2ISlHAnfhVW34 P8/C1Rd7m37B6zfk6YoEzVoaB3mZ5L9yelcM2S0T3YIam9SUxhPtF6A0PdSjAuht 1gZ+68oj+cz4oBAp4DY5AxPbMsGBX7ouQl7eR6DbKBA14oUvrx/EX0hwM+8cEiFc +dHHDsbSAqLVAi6ZKO5DZ4MSv0X6fyrCHXOOphE0Tr3bm30kDP3FN18kAGt6csfg D9z6oAhcDY52ks/7gVa0IsLo1zHhN1vpWEinMIQQ0ex0RTwIJddB4QeoKQgCXMsP z2x0PaTTUHZ5BwzHkKPC0v6D6Hs0NNoUC1Jn0JShyOYQJ301uI3w6aAc7wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIVbwdfPe2nI61HQxtVPf/rfeAynMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2UzZDZm Zi04ZmZiLTQ3NDEtOGZhNC0wY2M0ZDJkMjZmMDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvZTNkNmZm LThmZmItNDc0MS04ZmE0LTBjYzRkMmQyNmYwNi8xL2hWdkIxODk3YWNqclVkREcx VTlfLXQ5NERLYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBbUe6MA0EAgACMAcDBQAqDvZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMfUDANBgkqhkiG9w0BAQsFAAOCAQEARAjsmOUpHNcN F9T5cRthBub08NQvbPgzwztpb0kfiwGYkdPZkgjAzb43Rz5HXVlKE8daWu9t4/q7 wc53n1iRZK09jzSWbe1j+YiUN/n8Sff3SDDvhPeMhFpGL379ghEIutIeo3XPLiA+ PdhUVp+e5sBLxwRjp1lardvuSJXTXWQFkhLdCEyJWeSY2IKtaqs+RygUO2+V1wCO cxUOHbhxObZ8bLknbktWcX/Kevk3MEf7Rtzn1hR/mQryMSsJ/OqgK+CtfNu9JNw8 URVYOaYdrubgIZOSoWUnN9lA3KdCfF7fIJo7Ipae9NNp2xyGg7wRgSI/cENwcCbr HNljB1TsKg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:18 2025 by rpki-client