This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer (raw, json) Hash identifier: 1+yf6T/1SjKUiwo/PIxm+wKyvrkk1t2Mnw/ihml0kXE= Subject key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5221DCE25B3355FA9EC168A53AC79 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42396 IP: 77.109.0.0/18 IP: 94.248.0.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:22:1d:ce:25:b3:35:5f:a9:ec:16:8a:53:ac:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e039649faa8f9de3dae91be799a27e2ca6628789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:40:38:db:94:9f:36:1f:02:da:ee:78:d6: 64:82:71:cb:e8:46:ab:c9:c5:1e:57:67:5b:3b:07: f0:ec:00:5b:2a:28:10:c6:48:e3:05:b4:53:9f:e7: ac:9e:0a:42:ca:9a:bb:02:c7:de:92:b9:0e:63:41: 7e:6c:ac:23:3c:ac:9c:e8:91:c4:af:13:c2:ec:2b: b3:76:82:f2:a4:0a:2f:46:55:43:76:84:ac:5a:ec: ce:f9:ba:e9:cf:9b:2f:da:d6:32:7d:a9:70:1f:8e: ca:28:4e:67:fa:de:f6:bb:37:34:d0:1c:54:8c:48: e9:22:73:4a:c9:c3:90:78:61:f6:d4:64:4c:b4:85: b1:6e:52:d7:9b:39:0d:7a:9e:e8:55:ce:93:42:48: b1:41:ca:cc:08:b1:02:e1:ed:82:d6:61:53:66:90: fc:4a:42:85:1d:ef:46:ea:20:2b:23:3f:dc:fb:62: b2:03:26:17:f9:1c:d8:80:5e:b1:65:b9:50:16:f4: d4:fd:37:c0:4c:87:89:9f:57:23:6a:67:b0:9a:a5: 7c:81:96:15:2d:dc:7d:11:2f:d3:69:c2:af:d7:76: 70:16:98:ad:6d:d8:90:ef:73:e0:76:06:af:37:c6: c8:27:78:a9:22:8b:5b:b8:4f:5e:ae:d1:ae:45:d9: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.109.0.0/18 94.248.0.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42396 Signature Algorithm: sha256WithRSAEncryption 6c:19:51:31:1d:f6:01:03:f3:41:ce:ac:68:a5:02:d3:11:cd: 01:49:bb:64:df:ca:10:a3:94:57:d2:ff:11:6b:c5:f5:3c:d6: 08:2e:f5:1b:87:52:f0:30:20:fe:11:a8:96:b6:c1:e1:87:a7: d4:47:a1:28:3a:0d:8f:48:40:51:46:03:30:0a:f9:97:cd:c1: f6:24:c0:86:b2:47:be:00:1d:09:09:e4:1e:83:1c:98:58:e8: 9e:24:bf:f8:b4:d1:d6:99:90:74:a3:f7:a2:9e:e5:fa:ed:cd: ec:5d:a8:9e:34:14:0b:5b:b0:95:c1:5d:ad:cc:00:3c:1c:b3: 49:43:2a:e7:cc:90:f0:c4:40:27:f1:3d:df:0c:09:8c:99:87: 45:d4:95:d9:1a:5e:19:a4:56:57:f2:b5:dc:ff:35:c5:06:e1: 47:fb:19:77:0d:f8:ce:92:13:c4:d6:6a:60:e8:e3:00:0f:d5: 86:09:40:03:cc:c5:85:a3:c8:ce:18:d3:51:6a:b1:a2:87:48: 22:93:4d:d2:e6:58:8e:e3:80:68:7c:c9:b9:00:dd:d6:f2:5e: 7b:d6:0c:bb:f9:d4:03:4a:82:da:04:bc:23:8d:bb:bb:34:21: b9:bd:94:6c:a5:51:d8:cf:10:59:db:00:d1:49:b6:1f:99:5b: ee:04:df:40 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7pSIdziWzNV+p7BaKU6x5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDM5NjQ5ZmFhOGY5ZGUzZGFlOTFiZTc5OWEyN2UyY2E2NjI4Nzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQRAONuUnzYfAtrueNZkgnHL6Ear ycUeV2dbOwfw7ABbKigQxkjjBbRTn+esngpCypq7AsfekrkOY0F+bKwjPKyc6JHE rxPC7CuzdoLypAovRlVDdoSsWuzO+brpz5sv2tYyfalwH47KKE5n+t72uzc00BxU jEjpInNKycOQeGH21GRMtIWxblLXmzkNep7oVc6TQkixQcrMCLEC4e2C1mFTZpD8 SkKFHe9G6iArIz/c+2KyAyYX+RzYgF6xZblQFvTU/TfATIeJn1cjamewmqV8gZYV Ldx9ES/TacKv13ZwFpitbdiQ73PgdgavN8bIJ3ipIotbuE9ertGuRdnl2wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOA5ZJ+qj53j2ukb55mifiymYoeJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzJlZmFj ZS1kMGEzLTQzMzktODA2OC1kNzY3OGEwNzg3ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvMmVmYWNl LWQwYTMtNDMzOS04MDY4LWQ3Njc4YTA3ODdkMS8xLzREbGtuNnFQbmVQYTZSdm5t YUotTEtaaWg0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQGTW0AAwQGXvgAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwClnDANBgkqhkiG9w0BAQsFAAOCAQEAbBlRMR32AQPzQc6saKUC0xHN AUm7ZN/KEKOUV9L/EWvF9TzWCC71G4dS8DAg/hGolrbB4Yen1EehKDoNj0hAUUYD MAr5l83B9iTAhrJHvgAdCQnkHoMcmFjoniS/+LTR1pmQdKP3op7l+u3N7F2onjQU C1uwlcFdrcwAPByzSUMq58yQ8MRAJ/E93wwJjJmHRdSV2RpeGaRWV/K13P81xQbh R/sZdw34zpITxNZqYOjjAA/VhglAA8zFhaPIzhjTUWqxoodIIpNN0uZYjuOAaHzJ uQDd1vJee9YMu/nUA0qC2gS8I427uzQhub2UbKVR2M8QWdsA0Um2H5lb7gTfQA== -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:26 2026 by rpki-client