This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.cer (raw, json) Hash identifier: h7CGYpG/rvC0MogAbfZBI64eBkh7ljbv/2CA8TdrvRA= Subject key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A285EC6AAEAD2B1A12FDFAB0D3E435 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50377 IP: 109.234.240.0/21 IP: 185.184.64.0/22 IP: 2a0a:dd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:85:ec:6a:ae:ad:2b:1a:12:fd:fa:b0:d3:e4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1d75690d39c830180b3f55c49d140a2a04d3917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:58:25:66:56:ce:f6:4d:ca:0c:c8:24:a5: be:58:b5:99:76:75:e1:7e:7a:f1:e5:8f:6a:d3:89: 89:8c:7e:f9:b1:7c:ba:2a:e5:c4:f8:5e:a7:6a:cf: e1:92:c3:bd:52:a1:77:d7:19:ec:a9:46:34:18:a4: 07:93:d2:18:75:2b:74:89:af:a6:9b:cb:00:ae:d9: 75:22:7a:db:32:c5:b9:a9:6a:44:40:54:5e:b7:4b: b5:29:7e:a5:54:6c:b9:a7:3c:11:e9:d1:10:12:70: ee:10:a7:eb:7f:ec:0e:81:64:da:d3:56:9b:58:74: c9:72:b4:49:4e:40:d8:45:06:03:18:5b:8e:0f:0a: 8d:97:3d:91:fe:fe:3c:d8:53:f2:51:46:4a:65:eb: 50:8e:1a:d3:c0:e1:ff:07:3f:da:13:f9:9b:6d:09: 29:d1:29:53:72:ae:3d:bb:2d:1e:1d:f3:8a:8f:cd: 8d:c0:dd:68:62:1d:15:ab:03:5b:15:d0:4f:0b:94: b6:80:27:7b:5d:bd:49:96:89:e9:d4:58:9f:6a:85: 7a:76:4c:f4:f9:02:61:5f:3b:e9:7d:7d:a1:8b:42: a4:f6:d2:d2:cf:43:0f:aa:27:c7:e8:5e:d4:63:52: 3c:a2:54:7b:c5:cd:e5:e0:98:3a:a9:9d:c5:bf:f7: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.240.0/21 185.184.64.0/22 IPv6: 2a0a:dd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50377 Signature Algorithm: sha256WithRSAEncryption ab:5b:b8:3a:b4:49:4b:21:0b:17:e2:a5:c9:51:c8:bd:9f:9a: aa:9f:05:51:d0:fa:a7:1e:09:31:be:8e:de:a2:98:78:99:c6: e5:9e:e1:b3:26:d5:32:45:e2:6a:39:68:41:53:a3:7b:1d:08: 15:5a:5e:56:9d:7f:fb:dd:fd:36:ff:56:5d:f3:1d:7b:b1:7a: f9:30:68:9b:23:c6:18:08:1d:2c:b9:50:b8:93:f9:72:30:53: a6:0b:b1:95:c3:5d:01:e9:3c:22:66:08:7e:dd:94:e4:7f:b8: 61:c4:2d:b6:3b:a1:19:7e:b4:bd:51:2a:9b:41:ed:75:3b:d2: 75:cc:ae:bd:88:b2:0d:f3:48:66:b7:1b:b7:87:0b:d9:78:ba: ee:39:d8:81:7a:00:6f:ea:96:46:25:8d:bc:05:c1:69:da:e9: 38:04:52:8f:a4:b9:fb:78:71:1f:11:15:d8:ad:dd:d9:ec:d6: 62:f7:6a:07:7f:59:0f:25:88:e2:02:f1:6d:5b:f4:e7:28:a8: 90:f1:4f:0b:78:38:51:90:ba:af:70:30:3f:31:5d:45:25:51: c7:35:71:e8:53:4a:36:bd:fe:44:26:ac:53:4a:13:20:18:16: a5:c6:17:d9:3d:d5:43:b0:a1:23:1c:6d:f4:c5:b3:3b:77:95: 0e:c4:65:30 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4ooXsaq6tKxoS/fqw0+Q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWQ3NTY5MGQzOWM4MzAxODBiM2Y1NWM0OWQxNDBhMmEwNGQzOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrhYJWZWzvZNygzIJKW+WLWZdnXh fnrx5Y9q04mJjH75sXy6KuXE+F6nas/hksO9UqF31xnsqUY0GKQHk9IYdSt0ia+m m8sArtl1InrbMsW5qWpEQFRet0u1KX6lVGy5pzwR6dEQEnDuEKfrf+wOgWTa01ab WHTJcrRJTkDYRQYDGFuODwqNlz2R/v482FPyUUZKZetQjhrTwOH/Bz/aE/mbbQkp 0SlTcq49uy0eHfOKj82NwN1oYh0VqwNbFdBPC5S2gCd7Xb1Jlonp1FifaoV6dkz0 +QJhXzvpfX2hi0Kk9tLSz0MPqifH6F7UY1I8olR7xc3l4Jg6qZ3Fv/fkHwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOHXVpDTnIMBgLP1XEnRQKKgTTkXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzJkYWQz NS1kZDBhLTRkNjMtOGMxZS1iOWEzNmViOWVlMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMmRhZDM1 LWRkMGEtNGQ2My04YzFlLWI5YTM2ZWI5ZWUyMS8xLzRkZFdrTk9jZ3dHQXNfVmNT ZEZBb3FCTk9SYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDberwAwQCubhAMA0EAgACMAcDBQMqCt0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEyTANBgkqhkiG9w0BAQsFAAOCAQEAq1u4 OrRJSyELF+KlyVHIvZ+aqp8FUdD6px4JMb6O3qKYeJnG5Z7hsybVMkXiajloQVOj ex0IFVpeVp1/+939Nv9WXfMde7F6+TBomyPGGAgdLLlQuJP5cjBTpguxlcNdAek8 ImYIft2U5H+4YcQttjuhGX60vVEqm0HtdTvSdcyuvYiyDfNIZrcbt4cL2Xi67jnY gXoAb+qWRiWNvAXBadrpOARSj6S5+3hxHxEV2K3d2ezWYvdqB39ZDyWI4gLxbVv0 5yiokPFPC3g4UZC6r3AwPzFdRSVRxzVx6FNKNr3+RCasU0oTIBgWpcYX2T3VQ7Ch Ixxt9MWzO3eVDsRlMA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:55 2026 by rpki-client