This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dCnR70knCBDhAgzqhhmGQjORMaA.cer File: dCnR70knCBDhAgzqhhmGQjORMaA.cer (raw, json) Hash identifier: /qmQzdTxabJWlh/Xz29LdvP8bX86VE9isZAJTuxWxOk= Subject key identifier: 74:29:D1:EF:49:27:08:10:E1:02:0C:EA:86:19:86:42:33:91:31:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF24DF918500EB17329D4AB2C47B65D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206917 IP: 185.172.8.0/22 IP: 2a0a:fd00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4d:f9:18:50:0e:b1:73:29:d4:ab:2c:47:b6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7429d1ef49270810e1020cea86198642339131a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fe:46:bc:91:69:d3:bd:5e:3b:08:6c:ea:a9: d7:59:ed:35:19:0c:66:3f:99:70:e1:46:b5:7e:62: 4e:06:dd:f2:d0:f3:20:0f:81:00:bf:01:71:34:fa: ce:d2:8a:35:cd:bc:13:22:8c:cb:49:84:12:e0:0f: e5:a9:17:d3:7d:59:f6:90:b0:91:26:d4:5a:5b:2c: 58:e4:18:fb:44:1e:3b:74:e4:de:ea:2f:38:44:e3: 4b:62:bc:3b:d5:52:7f:01:3f:12:7a:b6:1c:02:67: e2:90:9d:78:cc:c2:4d:a1:7c:9c:f6:4f:14:4a:fc: 03:39:7e:16:37:55:2d:10:f2:01:39:bd:22:2f:31: 24:67:f1:68:37:48:91:e1:bd:96:52:31:8f:bf:37: bd:4d:72:9f:64:6b:9c:1a:31:59:aa:c1:08:b0:3c: ed:75:14:51:8c:81:6c:93:9c:13:aa:e6:1a:86:1e: cc:fe:39:83:3e:99:57:e5:97:4a:33:c0:c6:0f:47: 24:20:b2:75:27:36:d7:a2:5c:bc:93:55:f9:89:87: 66:5a:0c:a5:a5:c9:b2:ef:5a:92:98:0b:7b:59:3f: 87:d2:ee:df:14:df:cd:6d:b5:bc:2d:b7:a0:2d:fb: db:15:39:45:0a:fb:82:b6:bf:24:c8:cf:32:1a:da: 3b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:29:D1:EF:49:27:08:10:E1:02:0C:EA:86:19:86:42:33:91:31:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.8.0/22 IPv6: 2a0a:fd00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206917 Signature Algorithm: sha256WithRSAEncryption a8:45:02:37:87:be:7e:ef:6c:98:fe:f6:d0:71:38:54:cb:b3: 23:cd:09:18:7f:d5:cc:ae:5d:45:f8:14:65:30:88:7e:ab:19: a4:8a:11:9f:75:12:45:36:87:10:0f:6a:87:b1:3f:c6:69:ac: 1f:c7:06:33:ba:00:5b:0c:ec:a4:fa:53:e1:b8:12:04:64:9f: 1d:33:3d:7c:a3:16:15:9c:b2:6c:2a:66:17:3d:6b:74:f8:f4: 1d:f6:8f:eb:c4:0c:2d:5b:43:7c:1c:93:b2:3e:10:2e:fb:a2: 7c:fc:d9:1e:fe:2f:f9:96:01:8b:1c:ea:28:fa:8f:ed:6b:4a: 53:2b:72:67:75:2e:83:de:c2:c6:c5:c8:f4:45:da:f6:d7:6f: ec:24:1d:87:dc:a5:01:65:3c:b5:31:0e:3b:66:eb:93:aa:d4: 2f:cc:bc:a9:dc:48:c3:8e:96:e6:a9:d6:8f:41:fd:eb:ee:de: c9:de:51:03:11:d2:3f:62:e9:7c:be:22:3b:c5:5c:ac:c4:95: 9c:6a:d7:cd:1b:66:d3:40:cc:3d:01:c1:9e:2e:1c:cb:47:31: 52:6e:e9:b2:9d:f8:5d:82:6c:23:c8:ae:a8:16:5b:9c:b9:a2: 62:9d:26:0c:27:8c:b4:11:55:a0:cb:1e:a0:b7:6d:77:c9:02: ec:1f:62:72 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8k35GFAOsXMp1KssR7ZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDI5ZDFlZjQ5MjcwODEwZTEwMjBjZWE4NjE5ODY0MjMzOTEzMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v5GvJFp071eOwhs6qnXWe01GQxm P5lw4Ua1fmJOBt3y0PMgD4EAvwFxNPrO0oo1zbwTIozLSYQS4A/lqRfTfVn2kLCR JtRaWyxY5Bj7RB47dOTe6i84RONLYrw71VJ/AT8SerYcAmfikJ14zMJNoXyc9k8U SvwDOX4WN1UtEPIBOb0iLzEkZ/FoN0iR4b2WUjGPvze9TXKfZGucGjFZqsEIsDzt dRRRjIFsk5wTquYahh7M/jmDPplX5ZdKM8DGD0ckILJ1JzbXoly8k1X5iYdmWgyl pcmy71qSmAt7WT+H0u7fFN/NbbW8LbegLfvbFTlFCvuCtr8kyM8yGto7MQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHQp0e9JJwgQ4QIM6oYZhkIzkTGgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2ZjMGQy MS03ZjE0LTQ0YWItOTk1Yy1lMGJhZThiYWU2NzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvZmMwZDIx LTdmMTQtNDRhYi05OTVjLWUwYmFlOGJhZTY3NC8xL2RDblI3MGtuQ0JEaEFnenFo aG1HUWpPUk1hQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuawIMA0EAgACMAcDBQAqCv0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMoRTANBgkqhkiG9w0BAQsFAAOCAQEAqEUCN4e+fu9s mP720HE4VMuzI80JGH/VzK5dRfgUZTCIfqsZpIoRn3USRTaHEA9qh7E/xmmsH8cG M7oAWwzspPpT4bgSBGSfHTM9fKMWFZyybCpmFz1rdPj0HfaP68QMLVtDfByTsj4Q LvuifPzZHv4v+ZYBixzqKPqP7WtKUytyZ3Uug97CxsXI9EXa9tdv7CQdh9ylAWU8 tTEOO2brk6rUL8y8qdxIw46W5qnWj0H96+7eyd5RAxHSP2LpfL4iO8VcrMSVnGrX zRtm00DMPQHBni4cy0cxUm7psp34XYJsI8iuqBZbnLmiYp0mDCeMtBFVoMseoLdt d8kC7B9icg== -----END CERTIFICATE-----Generated at Mon Jan 12 16:01:02 2026 by rpki-client