This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vDolKo_MoDYdojSk8925V3idDlU.cer
File:                     vDolKo_MoDYdojSk8925V3idDlU.cer (raw, json)
Hash identifier:          BJ7AtQ9F0LV9jmqvntswftar7GnDQr4x/TO98XadDvs=
Subject key identifier:   BC:3A:25:2A:8F:CC:A0:36:1D:A2:34:A4:F3:DD:B9:57:78:9D:0E:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7758D0E6B130A3A6B9EEC40EAA7F3785
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 02:17:47 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 9083
                          IP: 212.96.128.0/19
                          IP: 2a07:9480::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:d0:e6:b1:30:a3:a6:b9:ee:c4:0e:aa:7f:37:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 02:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc3a252a8fcca0361da234a4f3ddb957789d0e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c5:c0:ad:28:98:82:ed:d2:ec:7e:28:68:e2:
                    5c:03:91:e7:94:9e:a2:05:19:ea:63:f4:9d:2a:c9:
                    f4:2d:0e:4a:f3:23:ba:7f:fb:b3:7e:ff:4f:e4:94:
                    63:38:da:27:20:bc:40:b2:b4:fa:52:8a:31:5e:84:
                    2c:89:d2:71:85:bc:be:43:04:07:51:93:10:c8:30:
                    8c:83:7f:15:a3:ee:57:6f:bf:d6:f7:f3:12:31:be:
                    58:d6:50:de:44:ed:5b:8a:1f:84:55:39:a1:9b:99:
                    6c:bb:12:da:c6:c1:11:96:51:af:7d:e6:58:86:9f:
                    12:9a:e4:cc:a7:87:44:54:a2:6a:d1:d6:bd:9b:06:
                    ff:b4:56:54:56:d7:25:46:60:5a:34:9a:38:28:e8:
                    ac:e5:7d:31:ae:9a:15:5c:1c:b2:28:8c:c7:7f:2d:
                    c0:0c:10:6c:a2:cd:07:6c:72:1b:97:2e:c7:67:47:
                    4a:54:53:ab:83:8c:49:cd:c8:e7:01:e5:18:e8:9f:
                    45:6a:63:70:04:0d:ad:3f:0f:f3:00:d6:e6:e8:0d:
                    fe:b6:58:2a:24:84:77:12:27:c0:37:3f:cd:88:84:
                    4f:2a:e1:fb:bf:f1:e3:1b:ed:ce:1e:54:e7:31:3a:
                    43:72:8c:e6:d3:2a:0f:a2:1f:16:00:91:2d:c1:bf:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3A:25:2A:8F:CC:A0:36:1D:A2:34:A4:F3:DD:B9:57:78:9D:0E:55
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/324f05-9a07-44cb-8709-0a19518f7358/1/vDolKo_MoDYdojSk8925V3idDlU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.96.128.0/19
                IPv6:
                  2a07:9480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9083

    Signature Algorithm: sha256WithRSAEncryption
         56:26:7f:ca:9f:fa:4b:b6:5a:04:48:d3:5a:bb:42:89:e0:d4:
         23:66:69:d2:fb:d6:d7:be:96:85:e2:24:53:e0:1d:cf:42:8b:
         69:06:af:f7:af:43:6c:3d:0c:63:fb:c1:10:41:e5:56:a0:75:
         92:c3:56:39:88:c2:33:ef:32:44:38:f0:e4:82:db:87:35:fb:
         85:63:4e:84:04:6e:01:10:6e:9d:90:ff:78:28:60:a2:38:aa:
         47:94:29:fd:41:db:2c:61:6d:72:bb:8d:cb:9c:e8:15:60:a3:
         fa:85:b9:10:c4:72:b3:61:56:60:6a:f4:88:79:70:38:d7:e1:
         49:91:f1:72:c1:a7:e7:a4:83:63:82:d3:26:af:ca:01:e8:14:
         6a:29:72:0b:78:eb:2c:28:39:54:da:57:4c:68:66:bf:72:85:
         50:d9:b5:1a:9e:cf:a1:50:a0:eb:96:d2:0b:b7:f2:84:50:bf:
         b4:b1:76:61:c2:bc:03:98:4b:a8:a9:1f:a0:47:bf:d7:c7:04:
         8b:85:9d:d4:62:c8:4b:92:27:20:a6:3c:bb:2e:d1:fd:a2:1f:
         0f:87:b8:79:23:bf:4e:80:ac:d2:06:b2:89:11:3d:32:0f:cc:
         c1:18:9a:c3:10:da:91:6d:12:c5:57:f2:67:bd:e5:07:37:49:
         aa:4d:7a:2a
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZt3WNDmsTCjprnuxA6qfzeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzNhMjUyYThmY2NhMDM2MWRhMjM0YTRmM2RkYjk1Nzc4OWQwZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MXArSiYgu3S7H4oaOJcA5HnlJ6i
BRnqY/SdKsn0LQ5K8yO6f/uzfv9P5JRjONonILxAsrT6UooxXoQsidJxhby+QwQH
UZMQyDCMg38Vo+5Xb7/W9/MSMb5Y1lDeRO1bih+EVTmhm5lsuxLaxsERllGvfeZY
hp8SmuTMp4dEVKJq0da9mwb/tFZUVtclRmBaNJo4KOis5X0xrpoVXByyKIzHfy3A
DBBsos0HbHIbly7HZ0dKVFOrg4xJzcjnAeUY6J9FamNwBA2tPw/zANbm6A3+tlgq
JIR3EifANz/NiIRPKuH7v/HjG+3OHlTnMTpDcozm0yoPoh8WAJEtwb+WEwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFLw6JSqPzKA2HaI0pPPduVd4nQ5VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzMyNGYw
NS05YTA3LTQ0Y2ItODcwOS0wYTE5NTE4ZjczNTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvMzI0ZjA1
LTlhMDctNDRjYi04NzA5LTBhMTk1MThmNzM1OC8xL3ZEb2xLb19Nb0RZZG9qU2s4
OTI1VjNpZERsVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQF1GCAMA0EAgACMAcDBQMqB5SAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAiN7MA0GCSqGSIb3DQEBCwUAA4IBAQBWJn/Kn/pLtloE
SNNau0KJ4NQjZmnS+9bXvpaF4iRT4B3PQotpBq/3r0NsPQxj+8EQQeVWoHWSw1Y5
iMIz7zJEOPDkgtuHNfuFY06EBG4BEG6dkP94KGCiOKpHlCn9QdssYW1yu43LnOgV
YKP6hbkQxHKzYVZgavSIeXA41+FJkfFywafnpINjgtMmr8oB6BRqKXILeOssKDlU
2ldMaGa/coVQ2bUans+hUKDrltILt/KEUL+0sXZhwrwDmEuoqR+gR7/XxwSLhZ3U
YshLkicgpjy7LtH9oh8Ph7h5I79OgKzSBrKJET0yD8zBGJrDENqRbRLFV/JnveUH
N0mqTXoq
-----END CERTIFICATE-----