This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer File: tDgLm4wHBFftVLxF0S3d0kTgbVI.cer (raw, json) Hash identifier: GeB+6ouQLnUNOY91Kvl3sszK1uUOr8H8UwG1nECvpNw= Subject key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C675DE17CFDB48D43A6CA1EBF8641F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21313 AS: 25485 AS: 29403 AS: 211369 IP: 81.19.192.0/20 IP: 185.100.0.0/22 IP: 193.109.220.0/24 IP: 194.110.75.0/24 IP: 217.30.80.0/20 IP: 2a10:eec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:75:de:17:cf:db:48:d4:3a:6c:a1:eb:f8:64:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:5e:69:11:1a:87:8a:fc:bd:2c:72:5a:5a: 4f:2e:55:3d:e5:88:1e:95:2b:f3:9e:f8:35:93:92: 79:6a:a6:2d:49:8b:96:ec:3b:48:d9:f9:41:bd:fb: 6b:e9:30:b5:88:84:ce:f7:4a:12:33:4e:fe:5c:34: 97:99:4e:cd:8d:fc:d1:31:ce:42:6c:58:10:c9:c2: 5e:10:65:da:06:c2:38:86:a4:1b:74:34:ff:a5:e4: 96:cc:e8:f1:db:29:44:1f:74:6e:5f:3e:b5:a6:26: e1:14:e5:4e:6f:d3:df:97:e3:91:21:28:0b:15:7a: 56:03:56:54:bb:e1:96:fa:e1:a2:59:08:f1:b1:05: 63:35:07:eb:3b:a5:e8:ff:58:21:05:4e:9d:8b:ae: 44:34:86:39:9b:2d:88:c9:d8:54:3b:21:7a:2c:59: 50:25:66:6d:75:47:2a:ab:a2:5e:9a:43:03:bc:35: a3:95:3c:02:68:84:9f:cb:2d:05:1c:35:43:0d:df: 6f:4a:af:f1:6b:4e:54:72:d5:26:67:9f:25:28:48: db:2e:61:04:77:6d:7d:11:ee:9a:88:c0:05:f6:7e: b0:4d:8d:c8:6e:20:50:53:9f:88:dc:d8:81:8f:b3: 08:f7:71:2a:de:85:7c:5b:0c:bc:09:ff:54:b3:d6: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.192.0/20 185.100.0.0/22 193.109.220.0/24 194.110.75.0/24 217.30.80.0/20 IPv6: 2a10:eec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21313 25485 29403 211369 Signature Algorithm: sha256WithRSAEncryption 1d:59:a9:1f:e7:a0:d5:78:6a:09:a8:de:9c:ab:54:76:bc:c8: a2:62:49:00:04:b4:61:e2:9b:9f:0d:56:c6:67:6e:2a:b0:f3: 6f:2c:5f:de:12:ab:21:b9:e8:6a:78:c7:f6:2f:c6:37:0c:95: 6e:43:27:72:f1:e6:76:2a:aa:7e:ec:10:49:4c:c0:2a:43:1f: f1:5f:2c:4d:83:2c:4e:9c:d3:12:35:85:41:2c:c4:05:37:a7: 2d:f4:5c:90:87:2d:21:a8:e6:f9:18:9c:50:06:e7:85:02:33: 0b:b1:33:66:18:3e:1d:8e:1c:dd:b1:6d:be:eb:eb:e5:1a:5a: 66:e9:b6:8b:b0:a3:21:3d:62:14:fc:9d:c2:f8:57:12:27:23: a9:d3:27:ae:e8:47:a2:81:a0:df:a4:93:11:cc:6d:95:62:89: 83:f9:d2:14:8b:db:59:2b:2a:09:a3:ce:6c:5e:ca:03:92:9d: f3:57:72:38:d3:48:2b:6b:2d:a7:47:91:b9:7b:7b:b9:13:f3: 15:fe:9b:d3:bc:00:72:76:1c:1a:28:29:92:fb:03:17:17:d9: cb:ac:ae:b6:42:94:fd:37:14:69:38:8b:ce:7d:6d:bf:d6:dd: 41:01:74:22:c0:ae:32:40:a4:9c:c9:89:b8:78:dc:9a:95:14: 97:5c:c2:56 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt3xnXeF8/bSNQ6bKHr+GQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDM4MGI5YjhjMDcwNDU3ZWQ1NGJjNDVkMTJkZGRkMjQ0ZTA2ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwteaREah4r8vSxyWlpPLlU95Yge lSvznvg1k5J5aqYtSYuW7DtI2flBvftr6TC1iITO90oSM07+XDSXmU7NjfzRMc5C bFgQycJeEGXaBsI4hqQbdDT/peSWzOjx2ylEH3RuXz61pibhFOVOb9Pfl+ORISgL FXpWA1ZUu+GW+uGiWQjxsQVjNQfrO6Xo/1ghBU6di65ENIY5my2IydhUOyF6LFlQ JWZtdUcqq6JemkMDvDWjlTwCaISfyy0FHDVDDd9vSq/xa05UctUmZ58lKEjbLmEE d219Ee6aiMAF9n6wTY3IbiBQU5+I3NiBj7MI93Eq3oV8Wwy8Cf9Us9YN4wIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2JjOTJl Ni1jOGVlLTQ4ZjAtYWU3Zi0zNmNjYjVhMDYxOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvYmM5MmU2 LWM4ZWUtNDhmMC1hZTdmLTM2Y2NiNWEwNjE5NS8xL3REZ0xtNHdIQkZmdFZMeEYw UzNkMGtUZ2JWSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQEURPAAwQCuWQAAwQAwW3cAwQAwm5LAwQE2R5Q MA0EAgACMAcDBQAqEO7AMCYGCCsGAQUFBwEIAQH/BBcwFaATMBECAlNBAgJjjQIC ctsCAwM5qTANBgkqhkiG9w0BAQsFAAOCAQEAHVmpH+eg1XhqCajenKtUdrzIomJJ AAS0YeKbnw1WxmduKrDzbyxf3hKrIbnoanjH9i/GNwyVbkMncvHmdiqqfuwQSUzA KkMf8V8sTYMsTpzTEjWFQSzEBTenLfRckIctIajm+RicUAbnhQIzC7EzZhg+HY4c 3bFtvuvr5RpaZum2i7CjIT1iFPydwvhXEicjqdMnruhHooGg36STEcxtlWKJg/nS FIvbWSsqCaPObF7KA5Kd81dyONNIK2stp0eRuXt7uRPzFf6b07wAcnYcGigpkvsD FxfZy6yutkKU/TcUaTiLzn1tv9bdQQF0IsCuMkCknMmJuHjcmpUUl1zCVg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:45:07 2026 by rpki-client