This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer (raw, json) Hash identifier: I0VjovufXYOfeHZHjBfdxdDncXEALVvLlkr7d8D7YdE= Subject key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B0DA9A7D47DAB097C148C4BD83DB4962A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 11 Dec 2025 13:46:20 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 59550 IP: 46.245.238.0/24 IP: 2a13:c080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:a9:a7:d4:7d:ab:09:7c:14:8c:4b:d8:3d:b4:96:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 11 13:46:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:76:3b:26:28:8a:93:30:60:aa:95:33:77: 39:c3:e5:9e:dc:63:f9:f1:70:84:89:f9:4a:ba:c6: a3:45:c0:7c:43:74:a4:ba:d0:48:b7:23:f5:dd:81: 9c:6f:4b:12:7e:cc:63:48:8a:5c:a7:5d:29:5b:34: c1:72:98:db:4e:e0:12:a0:f8:a2:0a:18:be:80:31: d3:50:13:24:82:5a:b7:94:b7:0a:ae:9d:cf:a4:54: 97:d0:68:c0:3e:86:46:c1:ea:98:2b:f1:cc:60:62: ab:1a:74:9e:83:d9:ce:0d:9a:36:25:f9:6e:55:01: 88:21:5b:7b:74:77:c6:d1:cf:2e:2a:df:b2:a3:7d: 2f:3b:62:5c:c8:c7:89:1c:71:d6:c9:ec:30:d3:8a: 7d:db:a3:78:76:dc:a9:6d:fe:f0:ce:61:e5:9c:5a: da:bc:1a:e5:9f:8a:ad:90:02:fe:55:82:14:33:bb: fe:3e:af:d4:38:55:17:a6:08:07:20:2f:c3:77:d1: 29:bd:c6:b1:ae:d5:18:61:9c:a3:3f:44:16:6c:86: a8:85:f7:d3:21:07:07:4a:11:9a:76:e1:86:88:7d: 33:f4:b0:d0:7a:df:83:05:a4:20:bb:b2:28:fe:89: 31:c1:3f:cf:61:ab:56:d4:e0:9e:80:72:bb:76:e7: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.238.0/24 IPv6: 2a13:c080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59550 Signature Algorithm: sha256WithRSAEncryption 82:02:60:75:80:f2:76:a4:46:38:69:52:df:46:c2:fb:e7:4f: 3e:cd:c9:9f:3e:a6:8b:33:1a:0d:b4:69:e7:6c:10:f9:db:87: 84:81:eb:28:51:84:31:42:62:59:2d:9b:d5:ba:1c:78:2a:df: 30:3f:92:0e:fd:98:08:d9:17:55:03:fa:51:da:01:3e:66:53: 38:00:d6:2a:76:d8:9f:59:f4:25:74:4f:10:83:ec:5b:22:49: 67:ab:05:a5:e6:e8:e3:88:f4:53:81:88:0d:77:f1:6c:36:0d: 46:08:a2:f1:fb:7a:cd:2c:6d:46:79:72:50:9b:55:2b:9b:58: 97:40:6a:9d:d2:5c:c3:b5:55:d8:db:f8:45:d6:83:da:3b:c2: ff:90:3c:7f:09:d2:bd:de:f0:67:81:63:92:d1:51:7a:0a:db: ca:4e:14:7e:69:17:2f:23:1e:c5:43:5f:99:68:8c:02:d1:e3: aa:9a:8d:94:87:a2:fe:73:ef:fe:b7:fb:64:c9:cc:8e:6d:4e: 03:63:a6:75:52:d5:01:33:90:d1:36:61:4c:e1:0a:11:a2:0d: 3b:c0:93:e9:43:55:c6:4a:82:45:cd:94:9e:31:c0:a5:48:65: 0b:4a:fe:fa:e6:37:96:fd:43:79:90:3a:e8:1c:40:34:aa:95: 26:1b:1b:6c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZsNqafUfasJfBSMS9g9tJYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjExMTM0NjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mzg0ZTUwOGUzYWRmOGVkZDZmMmEyNDJjZGFkNmJkZTlhNWFkMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgh2OyYoipMwYKqVM3c5w+We3GP5 8XCEiflKusajRcB8Q3SkutBItyP13YGcb0sSfsxjSIpcp10pWzTBcpjbTuASoPii Chi+gDHTUBMkglq3lLcKrp3PpFSX0GjAPoZGweqYK/HMYGKrGnSeg9nODZo2Jflu VQGIIVt7dHfG0c8uKt+yo30vO2JcyMeJHHHWyeww04p926N4dtypbf7wzmHlnFra vBrln4qtkAL+VYIUM7v+Pq/UOFUXpggHIC/Dd9EpvcaxrtUYYZyjP0QWbIaohffT IQcHShGaduGGiH0z9LDQet+DBaQgu7Io/okxwT/PYatW1OCegHK7duebfQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHOE5Qjjrfjt1vKiQs2ta96aWtAYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzA2NmRi Mi1kMzVjLTQ4MWYtYmE1NS01NWI2NzcyMzVlYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMDY2ZGIy LWQzNWMtNDgxZi1iYTU1LTU1YjY3NzIzNWViMy8xL2M0VGxDT090LU8zVzhxSkN6 YTFyM3BwYTBCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALvXuMA0EAgACMAcDBQMqE8CAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDonjANBgkqhkiG9w0BAQsFAAOCAQEAggJgdYDydqRG OGlS30bC++dPPs3Jnz6mizMaDbRp52wQ+duHhIHrKFGEMUJiWS2b1boceCrfMD+S Dv2YCNkXVQP6UdoBPmZTOADWKnbYn1n0JXRPEIPsWyJJZ6sFpebo44j0U4GIDXfx bDYNRgii8ft6zSxtRnlyUJtVK5tYl0BqndJcw7VV2Nv4RdaD2jvC/5A8fwnSvd7w Z4FjktFRegrbyk4UfmkXLyMexUNfmWiMAtHjqpqNlIei/nPv/rf7ZMnMjm1OA2Om dVLVATOQ0TZhTOEKEaINO8CT6UNVxkqCRc2UnjHApUhlC0r++uY3lv1DeZA66BxA NKqVJhsbbA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:56:25 2025 by rpki-client