This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer File: dBc29lciH8E0MWMjsHQFhanBsgw.cer (raw, json) Hash identifier: b3fHc3jpNuHpm5AolJZiLhkjBKG0thAvYU9vUr8JPaY= Subject key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78351C8C12D4F8BBC127615BA3AD4B83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61079 IP: 185.19.164.0/22 IP: 2a04:1240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1c:8c:12:d4:f8:bb:c1:27:61:5b:a3:ad:4b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=741736f657221fc134316323b0740585a9c1b20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cb:af:71:94:90:c7:7b:07:9c:b8:95:1e:a5: 9d:43:4c:aa:36:b3:0b:8c:33:4a:e2:1e:fd:94:f6: 1c:ef:59:33:66:ff:37:e9:25:ae:5e:05:1d:81:06: 8c:c1:0d:d0:1c:f5:c8:68:a8:b8:05:00:04:c3:81: 72:af:57:bf:2d:90:99:eb:08:19:d7:d1:4a:f0:ac: a6:b0:3a:33:0c:c8:71:ca:6e:cf:53:2b:26:cf:2b: 99:12:ed:39:53:56:d0:8f:90:1c:e4:cc:5f:1a:0c: 2f:bc:de:0a:08:89:a1:79:b0:be:5e:b6:04:36:b9: fe:7e:31:3a:04:b2:ac:ac:df:f3:01:d2:b6:53:42: f7:28:d5:03:20:a3:cf:93:00:16:a9:8f:66:34:6d: f8:23:f2:95:b4:9b:7c:c6:87:41:69:cb:60:68:ae: ab:93:8d:f4:b8:9f:66:2d:e4:c3:36:ed:dc:3b:4e: eb:dc:45:7e:0b:ed:8c:42:50:ba:2a:94:e2:33:32: fa:f9:2d:1f:13:52:9c:58:de:63:f0:af:bf:ca:d4: bc:92:6e:48:2d:e1:2a:f8:ad:88:16:26:61:35:19: 5d:b3:61:f9:04:0c:9f:34:97:3d:ea:ec:42:90:07: 2f:73:74:33:65:66:d0:ae:5d:70:d5:62:7d:17:91: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.164.0/22 IPv6: 2a04:1240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61079 Signature Algorithm: sha256WithRSAEncryption 8d:7e:a2:b9:77:6f:e9:48:1a:11:1e:7e:29:8e:b6:66:d9:a2: 78:e9:43:ac:0f:9e:79:6f:13:be:a2:4d:96:6f:c0:bd:cd:9c: 16:b5:5d:db:a2:4d:fe:34:d0:4e:ea:da:fb:67:08:a2:42:2e: 5f:c7:17:c8:05:82:26:40:a1:98:55:f6:d0:69:e4:d4:83:33: 90:ed:42:70:e5:65:f8:5f:a9:85:f8:33:9f:f7:28:96:b2:48: 3e:b1:75:13:01:96:29:0c:ab:f9:a1:2c:f0:db:88:ac:81:f5: 7f:fa:df:ae:ec:f7:c2:da:b2:f4:7a:b1:07:ce:2c:31:47:b0: 02:9b:ba:09:e6:14:7a:b1:6a:1c:ac:5d:87:27:35:95:d3:81: 6b:78:da:67:25:b6:5b:99:e0:a9:e7:8b:67:4a:76:bb:1f:01: 5e:e3:c8:37:8c:ec:ab:d1:78:8d:47:32:4a:1f:3b:ea:85:36: 8b:5c:c1:25:96:69:55:3e:13:3a:40:ed:46:57:37:e5:bd:99: 08:7b:25:63:9d:33:9a:73:2a:d9:ed:27:ab:2d:f8:cd:d2:b4: 79:3d:45:54:5d:09:00:e5:8b:4d:50:98:e1:ff:8f:ef:1b:da: 0e:d5:5d:19:e0:74:76:57:49:ec:e8:af:4f:07:38:18:29:ac: 5e:18:34:7b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NRyMEtT4u8EnYVujrUuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDE3MzZmNjU3MjIxZmMxMzQzMTYzMjNiMDc0MDU4NWE5YzFiMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cuvcZSQx3sHnLiVHqWdQ0yqNrML jDNK4h79lPYc71kzZv836SWuXgUdgQaMwQ3QHPXIaKi4BQAEw4Fyr1e/LZCZ6wgZ 19FK8KymsDozDMhxym7PUysmzyuZEu05U1bQj5Ac5MxfGgwvvN4KCImhebC+XrYE Nrn+fjE6BLKsrN/zAdK2U0L3KNUDIKPPkwAWqY9mNG34I/KVtJt8xodBactgaK6r k430uJ9mLeTDNu3cO07r3EV+C+2MQlC6KpTiMzL6+S0fE1KcWN5j8K+/ytS8km5I LeEq+K2IFiZhNRlds2H5BAyfNJc96uxCkAcvc3QzZWbQrl1w1WJ9F5Fc6wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHQXNvZXIh/BNDFjI7B0BYWpwbIMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2IzMTRj Yi02MmI1LTRmYTYtYjQ0NS1jYmZiYTQ1OWQ4ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvYjMxNGNi LTYyYjUtNGZhNi1iNDQ1LWNiZmJhNDU5ZDhmNy8xL2RCYzI5bGNpSDhFME1XTWpz SFFGaGFuQnNndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuROkMA0EAgACMAcDBQMqBBJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDulzANBgkqhkiG9w0BAQsFAAOCAQEAjX6iuXdv6Uga ER5+KY62ZtmieOlDrA+eeW8TvqJNlm/Avc2cFrVd26JN/jTQTura+2cIokIuX8cX yAWCJkChmFX20Gnk1IMzkO1CcOVl+F+phfgzn/colrJIPrF1EwGWKQyr+aEs8NuI rIH1f/rfruz3wtqy9HqxB84sMUewApu6CeYUerFqHKxdhyc1ldOBa3jaZyW2W5ng qeeLZ0p2ux8BXuPIN4zsq9F4jUcySh876oU2i1zBJZZpVT4TOkDtRlc35b2ZCHsl Y50zmnMq2e0nqy34zdK0eT1FVF0JAOWLTVCY4f+P7xvaDtVdGeB0dldJ7OivTwc4 GCmsXhg0ew== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:30 2026 by rpki-client