This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer File: hst0KgO8nIVQcheiUgTf_4L8zfk.cer (raw, json) Hash identifier: IdVFhaHsGTroaRYRQzaHtHbY7CfNLH+CsUJAFKYsN8s= Subject key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4CACBD9355DF5FD156E81406596C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.192.232.0/21 IP: 80.85.152.0/21 IP: 185.118.164.0/22 IP: 185.144.28.0/22 IP: 2a03:a0e0::/32 IP: 2a0a:eec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ca:cb:d9:35:5d:f5:fd:15:6e:81:40:65:96:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:8c:14:08:45:7a:da:2e:b8:b1:cf:ab:c3: be:69:69:cf:43:75:79:e9:56:c6:18:68:df:73:44: fb:70:68:88:1a:80:dc:69:79:e1:dc:3a:15:00:a2: 18:16:3b:5c:b3:53:41:d1:04:05:03:0a:2e:db:51: 7e:9d:a7:a2:23:b4:dd:56:f6:3e:b2:7c:87:1f:1e: 71:17:ff:4f:31:31:9e:94:41:1e:a3:aa:12:bd:8f: 08:dd:63:03:9e:f4:02:c7:7b:98:98:03:e3:a8:41: 78:fc:89:66:bd:b5:b1:04:0f:ff:ff:f3:cf:67:58: 13:44:4c:21:b7:60:f8:1a:50:d6:e4:b1:1e:49:fc: db:76:d7:ed:8a:7f:4f:5b:d4:6b:8c:d5:dd:cf:6d: 40:53:6e:a6:ee:45:d0:d9:03:77:e8:14:d6:4b:80: 67:af:23:cc:13:1f:70:df:b1:aa:7c:3f:3c:b3:24: 27:20:2b:bc:81:46:e4:7b:cd:d1:1d:9a:a1:e7:26: 28:aa:37:a0:81:d1:db:3e:1c:81:66:8d:58:66:32: b6:02:80:0a:4b:29:18:dd:07:85:4d:c7:1c:c3:ad: 41:f9:f2:5e:f2:16:1d:20:21:e5:c1:68:aa:e7:25: 77:9b:4d:05:be:a4:ff:af:d9:44:f9:b5:c6:a4:14: 81:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.232.0/21 80.85.152.0/21 185.118.164.0/22 185.144.28.0/22 IPv6: 2a03:a0e0::/32 2a0a:eec0::/32 Signature Algorithm: sha256WithRSAEncryption 72:6c:29:4f:f6:e7:19:b0:0a:88:76:52:24:8f:ac:70:cf:cb: ff:7a:27:17:af:a6:55:ab:a0:40:ce:04:9b:86:0c:52:d7:73: 20:8a:99:c7:8f:f2:7f:ef:31:14:32:33:cf:fa:e9:f3:0b:83: 31:e2:bc:86:10:e2:09:b5:4a:45:c6:01:06:b3:05:3c:49:ad: d9:b9:cd:b3:e2:61:35:c0:77:09:30:6b:f7:66:e5:7b:29:75: a5:2f:3c:6e:c3:18:7e:c4:bc:fa:de:8f:fe:41:0c:95:8e:f8: b7:39:61:34:16:71:24:0d:b9:28:9b:ad:f1:32:95:4b:d2:c8: fc:c3:f4:92:f6:64:ba:10:03:1e:ed:b7:40:63:7c:f5:1e:df: d8:9a:54:e5:39:dc:45:bc:5b:dc:81:e2:cd:41:98:84:e5:b7: da:c2:b8:20:1d:be:23:11:29:96:dd:10:b1:7f:ff:bc:b8:da: 87:6f:a5:b6:89:2b:d0:bc:72:e1:9d:b2:62:36:58:71:73:09: 64:af:13:30:ef:46:73:e1:9a:ee:e8:2a:68:59:d8:c5:08:c5: 17:4e:f9:4f:3d:06:a1:d2:94:ed:60:fa:09:ae:ab:86:3e:17: 9a:a8:46:12:62:d1:41:3e:49:52:97:96:2d:db:1f:31:07:d6: 00:22:b4:37 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt+pMrL2TVd9f0VboFAZZbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmNiNzQyYTAzYmM5Yzg1NTA3MjE3YTI1MjA0ZGZmZjgyZmNjZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F2MFAhFetouuLHPq8O+aWnPQ3V5 6VbGGGjfc0T7cGiIGoDcaXnh3DoVAKIYFjtcs1NB0QQFAwou21F+naeiI7TdVvY+ snyHHx5xF/9PMTGelEEeo6oSvY8I3WMDnvQCx3uYmAPjqEF4/IlmvbWxBA////PP Z1gTREwht2D4GlDW5LEeSfzbdtftin9PW9RrjNXdz21AU26m7kXQ2QN36BTWS4Bn ryPMEx9w37GqfD88syQnICu8gUbke83RHZqh5yYoqjeggdHbPhyBZo1YZjK2AoAK SykY3QeFTcccw61B+fJe8hYdICHlwWiq5yV3m00FvqT/r9lE+bXGpBSBRQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFIbLdCoDvJyFUHIXolIE3/+C/M35MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5Lzc2N2Fl NS1iOWEyLTQ5OTMtODFhOC0wNWYxOGZjMjEyYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNzY3YWU1 LWI5YTItNDk5My04MWE4LTA1ZjE4ZmMyMTJhNy8xL2hzdDBLZ084bklWUWNoZWlV Z1RmXzRMOHpmay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQDH8DoAwQDUFWYAwQCuXakAwQCuZAcMBQEAgAC MA4DBQAqA6DgAwUAKgruwDANBgkqhkiG9w0BAQsFAAOCAQEAcmwpT/bnGbAKiHZS JI+scM/L/3onF6+mVaugQM4Em4YMUtdzIIqZx4/yf+8xFDIzz/rp8wuDMeK8hhDi CbVKRcYBBrMFPEmt2bnNs+JhNcB3CTBr92bleyl1pS88bsMYfsS8+t6P/kEMlY74 tzlhNBZxJA25KJut8TKVS9LI/MP0kvZkuhADHu23QGN89R7f2JpU5TncRbxb3IHi zUGYhOW32sK4IB2+IxEplt0QsX//vLjah2+ltokr0Lxy4Z2yYjZYcXMJZK8TMO9G c+Ga7ugqaFnYxQjFF075Tz0GodKU7WD6Ca6rhj4XmqhGEmLRQT5JUpeWLdsfMQfW ACK0Nw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:17:20 2026 by rpki-client