This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.cer (raw, json) Hash identifier: XWhbsNq2J1AfP8/I4gmhYr8nzEnZ2AuMwZJ5+UCrHHE= Subject key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C76405BD1D0C802982F6BDB69A843D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62211 IP: 185.43.228.0/22 IP: 2a04:9780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:64:05:bd:1d:0c:80:29:82:f6:bd:b6:9a:84:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:73:c5:ac:1a:f1:d2:cd:73:a1:e7:6f:a4: 8e:12:f1:6c:9a:aa:d1:9c:24:6f:44:30:ce:10:27: 7c:df:b2:30:0a:cb:16:80:2a:de:71:12:e3:32:aa: 4d:db:8d:33:2d:bd:cd:67:da:10:9e:1c:f5:10:43: 8d:76:96:85:22:a9:93:8e:ef:68:eb:d2:36:88:61: 23:89:ba:b0:e5:b9:b3:02:33:7a:c0:af:c4:4c:e6: df:35:37:0b:d4:f1:1e:10:69:0a:19:60:2e:26:e2: e2:e6:ea:d1:56:5a:bc:3f:fe:9d:0c:1c:47:aa:07: e0:f3:e3:e9:8a:c0:d3:54:35:17:14:b2:78:0f:84: 31:52:7a:ca:15:dd:69:f6:17:8f:45:70:1b:0e:1a: f0:b0:aa:33:8f:e6:a8:53:15:36:12:5b:5f:85:67: 86:61:f5:c5:61:0b:f1:75:4a:91:b1:e1:fb:7c:1b: 52:73:99:2a:cf:66:78:39:ea:06:9a:f2:75:4a:0b: f2:74:a8:55:8b:6c:46:e7:5f:7f:fb:17:de:ae:24: 46:0d:1c:22:6d:2d:dd:a4:df:cf:66:90:80:c0:34: 71:9d:f6:a2:92:96:b3:f5:c5:44:3f:7f:29:7a:fc: b9:b7:20:37:b1:b3:a0:19:c4:1c:f7:0a:47:49:d7: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.228.0/22 IPv6: 2a04:9780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62211 Signature Algorithm: sha256WithRSAEncryption 59:83:1a:19:fc:44:4e:89:90:db:df:d6:ca:bd:48:ab:0c:c0: 08:cd:31:5e:d7:6b:9c:a0:57:95:d7:7a:a5:10:89:b5:81:17: 43:9b:6d:65:9f:98:f3:5a:10:bf:12:96:be:0c:3d:0f:e2:a3: eb:7f:27:78:7d:b3:c4:29:c8:3f:3a:e6:17:a3:f6:04:ea:af: cc:e7:19:d8:3b:2a:ed:36:cc:8a:15:81:5f:d7:8c:a3:47:46: a9:ed:f2:af:9a:88:c9:72:f0:dd:a7:9f:48:13:70:df:07:6d: 08:4d:4a:6b:9f:fe:90:9f:b1:6d:05:12:76:04:87:14:3e:31: 5e:3f:7b:e8:2f:d5:e9:f3:40:ce:35:b5:1f:26:44:08:43:2b: 25:f0:d4:81:ef:f9:7f:ab:16:38:ab:de:8f:42:ae:f1:62:4d: de:2e:29:b8:3f:17:d4:a5:09:32:fa:dd:79:92:a1:e7:17:4a: f5:ea:40:e2:29:53:90:23:70:4e:37:09:5d:3e:a7:e7:2f:d8: 56:90:8b:0b:eb:2a:3d:f8:24:04:3a:bf:df:be:57:22:1f:9f: d5:ec:c6:78:ea:c7:70:13:77:36:4a:18:90:d0:e1:56:3a:52: a5:e3:db:49:0e:22:67:b3:ad:30:86:6b:f3:d1:55:36:50:71: 1a:06:2b:f3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3x2QFvR0MgCmC9r22moQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzg2MjdlMzZhNGUxNmJkYzM5ZjBiNTUwZDc0ZmQ3MWU0NDJkMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGhzxawa8dLNc6Hnb6SOEvFsmqrR nCRvRDDOECd837IwCssWgCrecRLjMqpN240zLb3NZ9oQnhz1EEONdpaFIqmTju9o 69I2iGEjibqw5bmzAjN6wK/ETObfNTcL1PEeEGkKGWAuJuLi5urRVlq8P/6dDBxH qgfg8+PpisDTVDUXFLJ4D4QxUnrKFd1p9hePRXAbDhrwsKozj+aoUxU2EltfhWeG YfXFYQvxdUqRseH7fBtSc5kqz2Z4OeoGmvJ1SgvydKhVi2xG519/+xferiRGDRwi bS3dpN/PZpCAwDRxnfaikpaz9cVEP38pevy5tyA3sbOgGcQc9wpHSdeA8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPOGJ+NqTha9w58LVQ10/XHkQtLCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzNhOGU0 Yy05MjE3LTRiMWYtYjZmZC04NDI0MzdkMjcyNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvM2E4ZTRj LTkyMTctNGIxZi1iNmZkLTg0MjQzN2QyNzI3OS8xLzg0WW40MnBPRnIzRG53dFZE WFQ5Y2VSQzBzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSvkMA0EAgACMAcDBQMqBJeAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzAzANBgkqhkiG9w0BAQsFAAOCAQEAWYMaGfxETomQ 29/Wyr1IqwzACM0xXtdrnKBXldd6pRCJtYEXQ5ttZZ+Y81oQvxKWvgw9D+Kj638n eH2zxCnIPzrmF6P2BOqvzOcZ2Dsq7TbMihWBX9eMo0dGqe3yr5qIyXLw3aefSBNw 3wdtCE1Ka5/+kJ+xbQUSdgSHFD4xXj976C/V6fNAzjW1HyZECEMrJfDUge/5f6sW OKvej0Ku8WJN3i4puD8X1KUJMvrdeZKh5xdK9epA4ilTkCNwTjcJXT6n5y/YVpCL C+sqPfgkBDq/375XIh+f1ezGeOrHcBN3NkoYkNDhVjpSpePbSQ4iZ7OtMIZr89FV NlBxGgYr8w== -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:32 2026 by rpki-client