This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer File: ddzHdrK_WVv0s-YLukJF8BIKIXY.cer (raw, json) Hash identifier: k9DLTDLHmhQN/SbXBPXP2UmcwHWPyAQTBohwhTD8Q6A= Subject key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F3FC07E2BDAC8679ECF4325D82A69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2612 AS: 198925 IP: 91.240.18.0/23 IP: 193.151.94.0/24 IP: 195.8.103.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3f:c0:7e:2b:da:c8:67:9e:cf:43:25:d8:2a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:36:69:bb:9c:67:f2:18:e8:18:e4:11:5c: 4e:63:f0:d5:71:13:c5:bf:f7:c5:17:2d:6e:a6:38: f2:fb:a6:1c:12:70:7b:62:81:e6:d1:89:54:87:69: dc:2e:68:4e:d8:ff:12:0c:a0:77:f9:7d:ea:19:96: 81:3d:72:cb:63:8d:ce:58:ef:31:b1:3c:ab:33:97: 8c:d1:15:bd:f4:a0:0d:b9:7b:57:b4:59:3b:71:0a: 25:3b:ca:4c:ca:4a:86:4c:62:4f:db:fc:15:20:bb: ce:d6:2f:ef:94:d7:13:7f:47:6a:d0:6c:5d:bf:45: ab:4d:61:13:39:69:9f:4c:86:45:44:98:10:7f:c5: 0f:cc:4e:92:ff:09:f2:55:36:4e:7d:60:74:65:23: 6e:eb:51:a2:1a:85:ee:a8:ee:63:fe:f8:96:8e:8a: 00:68:b4:87:cd:45:3b:08:3c:cc:5c:30:8f:12:c1: 0e:2d:f0:3d:04:1d:80:c6:4c:b4:9f:40:a3:6c:53: 25:f8:9a:90:9b:b1:5d:89:38:fd:d2:de:e7:60:5c: a5:62:46:64:ff:fc:a0:6c:62:d9:2e:f0:51:31:f6: 7b:8e:1d:00:f5:73:91:ed:9c:95:cc:5e:46:8f:2a: 43:dc:77:e1:ed:5c:12:17:f1:77:90:73:46:0c:48: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.18.0/23 193.151.94.0/24 195.8.103.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2612 198925 Signature Algorithm: sha256WithRSAEncryption 9e:cb:6f:6e:93:0d:45:aa:dd:75:66:5c:d2:80:a1:65:19:f9: 26:d0:55:7c:c3:f1:12:d2:58:c7:a6:48:12:44:3a:a9:0c:2e: 44:b1:c4:6a:08:45:8f:ed:d2:86:e4:a9:8c:10:45:63:16:a0: 1a:9a:e3:2e:ad:9d:9e:16:d4:a2:d4:e8:0c:2f:bf:a4:d4:5c: f1:28:d6:4e:e9:b7:79:fa:17:e5:0d:d7:13:cb:06:a6:d0:34: ff:94:84:71:4a:ae:71:69:cf:95:06:3e:bd:83:3a:75:bd:fe: f4:4d:ec:b2:db:4b:03:a1:cd:d7:ec:24:52:42:7d:a8:9a:a7: bf:97:bf:2d:6a:5e:a5:d0:45:54:f2:53:fb:78:eb:06:e8:6b: bd:75:a8:37:06:55:10:9d:e5:7b:9e:6d:50:ca:ca:48:27:83: 2e:5e:b3:de:a3:b8:6e:85:10:e3:9f:d0:7e:9c:fe:bf:0c:bd: 4d:33:db:d0:a0:1c:23:40:6e:5d:0f:6f:2c:f3:db:46:40:56: 6f:49:7a:01:c0:54:10:43:28:46:be:a9:73:69:8d:e3:f5:fa: 1d:ae:e5:4b:6b:2e:37:aa:48:e2:13:fd:a1:ad:07:d2:be:9a: 16:54:3d:fa:1e:db:36:d7:6c:5f:2b:0e:38:e7:8d:3b:c3:50: 1b:d7:76:c7 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt5fz/AfivayGeez0Ml2CppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWRjYzc3NmIyYmY1OTViZjRiM2U2MGJiYTQyNDVmMDEyMGEyMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZY2abucZ/IY6BjkEVxOY/DVcRPF v/fFFy1upjjy+6YcEnB7YoHm0YlUh2ncLmhO2P8SDKB3+X3qGZaBPXLLY43OWO8x sTyrM5eM0RW99KANuXtXtFk7cQolO8pMykqGTGJP2/wVILvO1i/vlNcTf0dq0Gxd v0WrTWETOWmfTIZFRJgQf8UPzE6S/wnyVTZOfWB0ZSNu61GiGoXuqO5j/viWjooA aLSHzUU7CDzMXDCPEsEOLfA9BB2Axky0n0CjbFMl+JqQm7FdiTj90t7nYFylYkZk //ygbGLZLvBRMfZ7jh0A9XOR7ZyVzF5GjypD3Hfh7VwSF/F3kHNGDEjAOwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFHXcx3ayv1lb9LPmC7pCRfASCiF2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzU4MWM1 ZC1iYzliLTQwYTYtYTVhNC02NDU0MDIwNWVjZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNTgxYzVk LWJjOWItNDBhNi1hNWE0LTY0NTQwMjA1ZWNmNC8xL2RkekhkcktfV1Z2MHMtWUx1 a0pGOEJJS0lYWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBW/ASAwQAwZdeAwQAwwhnMB4GCCsGAQUFBwEI AQH/BA8wDaALMAkCAgo0AgMDCQ0wDQYJKoZIhvcNAQELBQADggEBAJ7Lb26TDUWq 3XVmXNKAoWUZ+SbQVXzD8RLSWMemSBJEOqkMLkSxxGoIRY/t0obkqYwQRWMWoBqa 4y6tnZ4W1KLU6Awvv6TUXPEo1k7pt3n6F+UN1xPLBqbQNP+UhHFKrnFpz5UGPr2D OnW9/vRN7LLbSwOhzdfsJFJCfaiap7+Xvy1qXqXQRVTyU/t46wboa711qDcGVRCd 5XuebVDKykgngy5es96juG6FEOOf0H6c/r8MvU0z29CgHCNAbl0Pbyzz20ZAVm9J egHAVBBDKEa+qXNpjeP1+h2u5UtrLjeqSOIT/aGtB9K+mhZUPfoe2zbXbF8rDjjn jTvDUBvXdsc= -----END CERTIFICATE-----Generated at Sun Jan 25 05:58:44 2026 by rpki-client