This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer (raw, json) Hash identifier: bF40wucQGmp0vd6RHHSRRq2Gp0BkA2Bkp77nLzmGakE= Subject key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11B239ED88AAD6DBCA906C149E5C57 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59550 IP: 46.245.238.0/24 IP: 2a13:c080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b2:39:ed:88:aa:d6:db:ca:90:6c:14:9e:5c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:76:3b:26:28:8a:93:30:60:aa:95:33:77: 39:c3:e5:9e:dc:63:f9:f1:70:84:89:f9:4a:ba:c6: a3:45:c0:7c:43:74:a4:ba:d0:48:b7:23:f5:dd:81: 9c:6f:4b:12:7e:cc:63:48:8a:5c:a7:5d:29:5b:34: c1:72:98:db:4e:e0:12:a0:f8:a2:0a:18:be:80:31: d3:50:13:24:82:5a:b7:94:b7:0a:ae:9d:cf:a4:54: 97:d0:68:c0:3e:86:46:c1:ea:98:2b:f1:cc:60:62: ab:1a:74:9e:83:d9:ce:0d:9a:36:25:f9:6e:55:01: 88:21:5b:7b:74:77:c6:d1:cf:2e:2a:df:b2:a3:7d: 2f:3b:62:5c:c8:c7:89:1c:71:d6:c9:ec:30:d3:8a: 7d:db:a3:78:76:dc:a9:6d:fe:f0:ce:61:e5:9c:5a: da:bc:1a:e5:9f:8a:ad:90:02:fe:55:82:14:33:bb: fe:3e:af:d4:38:55:17:a6:08:07:20:2f:c3:77:d1: 29:bd:c6:b1:ae:d5:18:61:9c:a3:3f:44:16:6c:86: a8:85:f7:d3:21:07:07:4a:11:9a:76:e1:86:88:7d: 33:f4:b0:d0:7a:df:83:05:a4:20:bb:b2:28:fe:89: 31:c1:3f:cf:61:ab:56:d4:e0:9e:80:72:bb:76:e7: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.238.0/24 IPv6: 2a13:c080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59550 Signature Algorithm: sha256WithRSAEncryption 6d:d8:91:70:d8:45:3b:e3:f6:90:f2:9a:d5:15:31:17:eb:20: e2:68:30:96:28:86:e4:b3:a5:e5:10:d0:27:65:b6:d6:e8:d9: cc:8c:da:21:cf:69:79:62:f8:c7:02:43:c5:22:80:35:07:01: fb:9c:51:31:99:08:79:16:c3:db:19:b9:79:18:b5:f8:d7:6e: 95:d2:c7:50:69:ab:30:c9:28:4c:49:b9:32:e7:f0:32:e8:05: b4:22:c4:03:10:48:c2:43:76:e5:80:c3:e3:4f:d7:79:05:60: 3f:6e:65:f9:2d:98:35:de:c9:64:40:19:13:e3:37:98:7a:df: c4:58:a2:85:48:66:f4:f7:df:74:fe:2b:cb:72:79:5d:f3:53: 23:fc:a9:d6:a9:89:21:c8:1e:6f:36:d2:35:aa:46:11:a6:da: b5:43:cd:b2:ee:f2:31:df:6b:19:8a:c9:69:48:cb:81:78:43: 68:81:71:ca:ba:5c:cc:8c:94:ea:d7:19:f7:38:f7:d9:c5:92: fb:7c:7d:3c:71:e8:f7:df:c2:9d:e9:c6:5c:50:74:77:18:ba: a3:b1:6c:3e:64:d4:ec:da:d0:3e:30:bd:d5:05:aa:50:45:a4: 84:cd:9c:d1:99:6d:dd:99:06:e4:98:cc:f0:75:1c:06:5a:f4: c0:3e:ab:74 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EbI57Yiq1tvKkGwUnlxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mzg0ZTUwOGUzYWRmOGVkZDZmMmEyNDJjZGFkNmJkZTlhNWFkMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgh2OyYoipMwYKqVM3c5w+We3GP5 8XCEiflKusajRcB8Q3SkutBItyP13YGcb0sSfsxjSIpcp10pWzTBcpjbTuASoPii Chi+gDHTUBMkglq3lLcKrp3PpFSX0GjAPoZGweqYK/HMYGKrGnSeg9nODZo2Jflu VQGIIVt7dHfG0c8uKt+yo30vO2JcyMeJHHHWyeww04p926N4dtypbf7wzmHlnFra vBrln4qtkAL+VYIUM7v+Pq/UOFUXpggHIC/Dd9EpvcaxrtUYYZyjP0QWbIaohffT IQcHShGaduGGiH0z9LDQet+DBaQgu7Io/okxwT/PYatW1OCegHK7duebfQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHOE5Qjjrfjt1vKiQs2ta96aWtAYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzA2NmRi Mi1kMzVjLTQ4MWYtYmE1NS01NWI2NzcyMzVlYjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMDY2ZGIy LWQzNWMtNDgxZi1iYTU1LTU1YjY3NzIzNWViMy8xL2M0VGxDT090LU8zVzhxSkN6 YTFyM3BwYTBCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALvXuMA0EAgACMAcDBQMqE8CAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDonjANBgkqhkiG9w0BAQsFAAOCAQEAbdiRcNhFO+P2 kPKa1RUxF+sg4mgwliiG5LOl5RDQJ2W21ujZzIzaIc9peWL4xwJDxSKANQcB+5xR MZkIeRbD2xm5eRi1+NduldLHUGmrMMkoTEm5MufwMugFtCLEAxBIwkN25YDD40/X eQVgP25l+S2YNd7JZEAZE+M3mHrfxFiihUhm9PffdP4ry3J5XfNTI/yp1qmJIcge bzbSNapGEabatUPNsu7yMd9rGYrJaUjLgXhDaIFxyrpczIyU6tcZ9zj32cWS+3x9 PHHo99/CnenGXFB0dxi6o7FsPmTU7NrQPjC91QWqUEWkhM2c0Zlt3ZkG5JjM8HUc Blr0wD6rdA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:15 2026 by rpki-client