This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer File: 10itqKdHT1rZkMmB_2snzj3hRxM.cer (raw, json) Hash identifier: 1LC5tGu8Z/NN4K/ZK/Up89Ka+mjkNAFYwbodIFKbslA= Subject key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B64429A03848CF2C7A82C89AF9AEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48812 IP: 95.129.24.0/22 IP: 2a0f:3f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:64:42:9a:03:84:8c:f2:c7:a8:2c:89:af:9a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:2d:76:41:ad:ea:54:43:89:b3:5f:6a:87: 5f:7a:6a:0a:99:d6:3e:fb:0c:50:c2:93:f8:b6:14: 52:75:ef:92:fa:40:1f:d6:67:00:91:6f:fb:7c:0e: d0:7b:d2:d9:0c:30:c3:b6:d9:12:01:42:74:c3:8f: 62:5d:f4:b3:be:88:50:c7:fd:62:91:1c:2e:7d:8a: 0a:1b:40:70:db:23:b1:09:63:b0:56:4a:72:d5:58: de:81:a2:96:a6:f5:ae:89:fa:f9:f9:2d:12:39:0a: 9d:f8:eb:4e:07:95:ab:29:10:a8:d5:cc:74:46:4a: e1:ad:4b:9c:11:9c:b3:45:ea:b9:11:d2:db:5f:c9: 07:9e:5d:17:3b:4f:47:0d:00:16:5c:06:02:9d:61: a1:6c:2b:b5:d1:a0:d3:b0:6c:73:f0:10:d6:01:47: 80:08:18:3b:47:5a:ed:e6:15:e5:55:0c:60:87:aa: 5a:05:2d:68:ff:77:9b:b9:b3:0a:13:1f:91:f1:6d: ff:28:61:30:53:24:e2:70:7c:12:d1:96:d4:b6:02: 8c:18:10:ec:b3:23:60:4e:60:57:c3:a0:ec:88:be: 4d:a7:a8:58:ba:46:bd:9a:fa:8f:d7:a7:ed:b5:c8: f4:cc:7a:42:61:08:90:73:c6:09:52:62:bc:a2:4a: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.129.24.0/22 IPv6: 2a0f:3f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48812 Signature Algorithm: sha256WithRSAEncryption 2c:8c:f5:9e:64:84:a1:7b:3f:1b:99:ab:1c:04:fa:c2:f9:7b: f0:b5:9e:ea:e9:ae:63:81:ce:9e:f9:70:2e:b9:a4:45:ce:0c: a1:10:ec:bb:80:18:5a:91:e0:b3:e0:bb:fd:6e:32:9b:50:1d: 6d:64:bd:64:ff:5f:66:c4:23:41:fe:29:87:b8:0c:e1:0f:46: 36:a1:a3:eb:fe:1a:cd:9c:09:c2:71:85:27:95:8c:fc:23:55: 41:d9:50:d8:89:d9:31:e7:bd:b7:2d:c8:2d:b5:90:a0:ba:e0: c9:26:fa:0d:b9:eb:c8:68:33:73:aa:3a:15:2a:e8:01:15:74: 3c:d4:9e:47:00:6e:45:30:eb:3d:76:ea:d9:d5:95:2a:e4:ae: 26:21:c2:2a:29:f3:02:a3:84:7a:49:63:a6:a7:fb:d2:01:1b: 2a:3e:f3:7e:7f:12:9b:4f:01:7a:5c:9b:10:17:85:3e:a1:ed: 13:e1:3c:0e:d9:e3:06:f5:c0:b3:fa:41:b4:e7:cc:4c:9d:2a: 39:8f:8b:d5:b4:d0:25:2a:ab:68:b3:1c:1a:ba:da:13:6a:87: 10:23:4e:c5:d6:c9:ac:26:30:09:1c:40:1b:10:b5:36:cf:cc: 34:9a:c0:29:cc:23:e2:5f:2e:96:c8:7d:47:10:80:89:f8:6b: c9:b8:2c:bd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9W2RCmgOEjPLHqCyJr5rsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzQ4YWRhOGE3NDc0ZjVhZDk5MGM5ODFmZjZiMjdjZTNkZTE0NzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfstdkGt6lRDibNfaodfemoKmdY+ +wxQwpP4thRSde+S+kAf1mcAkW/7fA7Qe9LZDDDDttkSAUJ0w49iXfSzvohQx/1i kRwufYoKG0Bw2yOxCWOwVkpy1VjegaKWpvWuifr5+S0SOQqd+OtOB5WrKRCo1cx0 RkrhrUucEZyzReq5EdLbX8kHnl0XO09HDQAWXAYCnWGhbCu10aDTsGxz8BDWAUeA CBg7R1rt5hXlVQxgh6paBS1o/3ebubMKEx+R8W3/KGEwUyTicHwS0ZbUtgKMGBDs syNgTmBXw6DsiL5Np6hYuka9mvqP16fttcj0zHpCYQiQc8YJUmK8okotywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNdIrainR09a2ZDJgf9rJ8494UcTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzhmYzI2 MS1iZmY4LTQ0OTAtOGI2OS0wMDk3MzlmN2U1NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvOGZjMjYx LWJmZjgtNDQ5MC04YjY5LTAwOTczOWY3ZTU1Yy8xLzEwaXRxS2RIVDFyWmtNbUJf MnNuemozaFJ4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCX4EYMA0EAgACMAcDBQMqDz9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC+rDANBgkqhkiG9w0BAQsFAAOCAQEALIz1nmSEoXs/ G5mrHAT6wvl78LWe6umuY4HOnvlwLrmkRc4MoRDsu4AYWpHgs+C7/W4ym1AdbWS9 ZP9fZsQjQf4ph7gM4Q9GNqGj6/4azZwJwnGFJ5WM/CNVQdlQ2InZMee9ty3ILbWQ oLrgySb6DbnryGgzc6o6FSroARV0PNSeRwBuRTDrPXbq2dWVKuSuJiHCKinzAqOE ekljpqf70gEbKj7zfn8Sm08BelybEBeFPqHtE+E8DtnjBvXAs/pBtOfMTJ0qOY+L 1bTQJSqraLMcGrraE2qHECNOxdbJrCYwCRxAGxC1Ns/MNJrAKcwj4l8ulsh9RxCA ifhrybgsvQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:20 2026 by rpki-client