This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer File: hWi_V59W9BOdNkUU2E6l7gHMgEg.cer (raw, json) Hash identifier: ypn7TuzmSvPQpTyCXRGt4J/a15Fh1jOyfPKpFn8f81c= Subject key identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78823126C50E20C99B7A2F204B6D7D33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft caRepository: rsync://krill.starlamp.su/repo/starlamp/0/ Notify URL: https://krill.starlamp.su/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 07:42:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214675 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:82:31:26:c5:0e:20:c9:9b:7a:2f:20:4b:6d:7d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 07:42:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8568bf579f56f4139d364514d84ea5ee01cc8048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:ac:b8:d0:84:98:06:83:e2:dc:c3:81:42: 0e:1c:ca:88:ff:20:6c:e2:6e:58:12:a6:37:6e:d8: b9:45:7e:31:b6:31:a1:0f:b7:9b:f1:81:a2:f2:e7: 4b:6c:da:f0:6a:10:24:d4:5b:44:da:b1:c9:9e:49: f7:91:69:f8:28:57:a5:66:d6:39:c0:12:8b:09:8c: d3:f5:b2:da:a3:05:25:42:72:95:d6:a9:d7:c9:a3: 2f:f7:30:3e:07:28:d7:e1:36:63:c1:63:4b:c2:54: 5f:3d:9d:4f:20:8e:e1:b4:03:d5:b4:55:d5:5f:6a: 25:85:18:de:e5:1b:18:5a:82:ec:9e:1d:e5:6e:c2: 98:e9:b1:dd:fc:ba:63:4d:12:31:cb:7a:b3:48:a9: 4e:6b:2a:9d:54:b5:0a:c2:64:ed:01:bd:f0:c3:a8: 32:15:49:21:80:22:ea:b6:d9:e0:2a:e1:6e:dc:47: 89:a1:0a:62:90:fa:5b:93:b8:f1:9f:db:bd:79:16: 63:7e:01:2f:69:d9:d8:22:01:77:51:37:d0:8e:d9: d7:74:e7:a8:2d:1a:68:19:9f:05:05:4f:8c:96:19: a0:c4:91:49:f2:c2:53:73:42:ad:05:3d:8a:ea:47: 7e:0a:0a:42:c9:25:3d:bf:2f:f6:2f:d8:e8:a8:93: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://krill.starlamp.su/repo/starlamp/0/ RPKI Manifest - URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft RPKI Notify - URI:https://krill.starlamp.su/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214675 Signature Algorithm: sha256WithRSAEncryption 3b:f7:cf:8a:74:f0:18:47:0b:0f:e2:15:a8:02:30:ca:40:fc: c2:ab:eb:e7:84:b2:d9:46:a3:01:26:29:28:aa:83:47:86:18: 3d:30:96:ce:8c:7e:a9:4a:77:ef:88:92:a5:84:b4:e2:fb:40: de:18:39:15:4e:67:55:e6:f3:d5:17:04:69:a1:97:be:3c:52: a5:45:47:37:a2:80:ce:1b:af:6d:f8:5f:95:bf:d5:3f:22:45: b9:7f:ad:f5:f2:ce:5b:5a:95:7e:75:15:01:80:8b:19:7e:f1: 27:bb:18:29:2a:6c:c4:98:1b:9b:24:64:b9:a0:2f:4a:04:f9: 9e:e6:5e:ca:86:d9:6b:b5:eb:74:86:20:d9:a7:0e:c5:59:2a: ad:82:f9:c7:6b:ed:05:68:e7:2d:91:1f:b2:15:c3:a2:a8:6f: 3a:52:c9:c4:0e:60:86:63:de:91:48:e4:a9:a2:5f:16:af:e8: 0c:c3:bd:5e:13:3e:9d:7f:8f:d3:23:2d:26:d9:10:03:81:d2: fc:24:41:5b:0d:f7:f0:3c:03:cb:f4:f6:59:74:09:14:71:d9: 09:34:42:17:ed:dc:4b:96:db:79:e3:53:09:ad:fd:ff:97:4e: 1a:3b:cb:09:e4:5e:5f:63:9c:70:c7:ce:03:e1:a7:0c:bf:2c: a4:7b:15:2e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt4gjEmxQ4gyZt6LyBLbX0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDc0MjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTY4YmY1NzlmNTZmNDEzOWQzNjQ1MTRkODRlYTVlZTAxY2M4MDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kCsuNCEmAaD4tzDgUIOHMqI/yBs 4m5YEqY3bti5RX4xtjGhD7eb8YGi8udLbNrwahAk1FtE2rHJnkn3kWn4KFelZtY5 wBKLCYzT9bLaowUlQnKV1qnXyaMv9zA+ByjX4TZjwWNLwlRfPZ1PII7htAPVtFXV X2olhRje5RsYWoLsnh3lbsKY6bHd/LpjTRIxy3qzSKlOayqdVLUKwmTtAb3ww6gy FUkhgCLqttngKuFu3EeJoQpikPpbk7jxn9u9eRZjfgEvadnYIgF3UTfQjtnXdOeo LRpoGZ8FBU+MlhmgxJFJ8sJTc0KtBT2K6kd+CgpCySU9vy/2L9joqJNkTQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFIVov1efVvQTnTZFFNhOpe4BzIBIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgekGCCsGAQUFBwELBIHcMIHZMDYGCCsGAQUFBzAFhipyc3lu YzovL2tyaWxsLnN0YXJsYW1wLnN1L3JlcG8vc3RhcmxhbXAvMC8wYgYIKwYBBQUH MAqGVnJzeW5jOi8va3JpbGwuc3RhcmxhbXAuc3UvcmVwby9zdGFybGFtcC8wLzg1 NjhCRjU3OUY1NkY0MTM5RDM2NDUxNEQ4NEVBNUVFMDFDQzgwNDgubWZ0MDsGCCsG AQUFBzANhi9odHRwczovL2tyaWxsLnN0YXJsYW1wLnN1L3JyZHAvbm90aWZpY2F0 aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5j cmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMDRpMwDQYJKoZIhvcNAQELBQADggEBADv3z4p08BhHCw/iFagCMMpA/MKr 6+eEstlGowEmKSiqg0eGGD0wls6MfqlKd++IkqWEtOL7QN4YORVOZ1Xm89UXBGmh l748UqVFRzeigM4br234X5W/1T8iRbl/rfXyzltalX51FQGAixl+8Se7GCkqbMSY G5skZLmgL0oE+Z7mXsqG2Wu163SGINmnDsVZKq2C+cdr7QVo5y2RH7IVw6KobzpS ycQOYIZj3pFI5KmiXxav6AzDvV4TPp1/j9MjLSbZEAOB0vwkQVsN9/A8A8v09ll0 CRRx2Qk0Qhft3EuW23njUwmt/f+XTho7ywnkXl9jnHDHzgPhpwy/LKR7FS4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:29 2026 by rpki-client