This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.cer (raw, json) Hash identifier: ocmAWOtGCl0Lk9eBz2x6z/eK5g6J4NjETBeJinmgUDs= Subject key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA53827E365997BCD63D8AEBE5E4531 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34941 IP: 85.118.200.0/21 IP: 185.112.136.0/22 IP: 2a06:6180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:38:27:e3:65:99:7b:cd:63:d8:ae:be:5e:45:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:43:84:06:63:8a:a8:db:1d:1e:93:32:98: ef:6b:a9:b1:76:9a:a4:38:fc:17:db:0e:6a:8b:a6: 1c:b7:bf:3f:6b:41:79:6b:e6:12:06:17:69:59:de: b5:21:5f:db:11:5c:df:27:9d:23:93:83:1c:8c:81: e1:c7:ad:bb:98:d8:4b:aa:2d:63:b2:80:dc:ed:5c: 34:43:dc:c4:fd:31:a5:a3:f9:5a:ca:c5:d0:85:8a: b9:93:83:1d:08:ba:44:70:1c:93:09:0d:c8:af:05: 84:de:ac:8a:ec:9f:91:62:96:76:7e:f1:96:45:77: c9:df:98:66:68:31:5c:70:c7:68:3a:b8:de:e3:41: 76:f2:c4:b8:e8:44:ed:dd:f0:c0:7b:58:c9:5f:f9: 11:6f:41:8f:9b:b0:86:42:4a:c5:cf:fe:53:af:58: a3:f7:a8:1b:3c:70:23:e3:1e:0d:0e:3a:a1:77:e9: 69:21:02:2b:ab:cc:5a:19:7e:ca:0d:8a:79:13:61: b4:3d:31:9e:68:49:35:2d:1b:ff:b8:62:00:a7:7f: 96:78:d0:30:fb:31:f9:13:64:34:c8:f0:99:c2:f3: 09:8e:60:1f:12:95:35:f7:d7:e2:c1:35:f2:20:ac: 37:e1:6d:3d:2d:7a:20:84:a0:85:49:e5:45:4f:e3: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.118.200.0/21 185.112.136.0/22 IPv6: 2a06:6180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34941 Signature Algorithm: sha256WithRSAEncryption 55:82:f6:1c:b3:38:0a:88:4c:8b:b8:db:0f:d5:39:85:0f:fe: f6:e7:01:9e:47:27:56:84:aa:94:97:39:31:74:60:6b:d1:b1: 7a:3b:e9:1e:92:41:b4:7e:9e:a5:01:b7:66:40:7c:91:d9:43: f9:00:bf:ae:a4:03:9c:c0:ea:ff:4c:a8:f7:75:ea:7e:a8:dc: da:43:c0:4d:93:af:c1:6b:52:3e:d9:56:c4:f8:61:da:b5:26: 8b:43:cb:5e:5a:8f:85:a0:1c:33:1e:53:e7:4c:4d:24:eb:20: 9e:95:45:6f:78:27:61:f5:5b:2e:71:67:1f:a9:ff:f9:91:16: bf:33:3c:ad:cc:b9:cb:29:da:34:d2:25:ab:e3:c6:a0:42:76: f3:3e:69:a7:12:41:14:f2:c0:9a:48:37:a0:47:0a:c7:71:67: 57:da:63:e0:ac:ff:a6:4a:af:1e:f7:60:74:a6:69:31:91:73: b1:da:5f:a4:09:aa:25:e7:a1:54:ca:22:39:75:44:d1:fb:e1: 6a:18:01:6a:f9:47:2a:f6:27:d5:3f:f7:71:39:32:d2:c0:c1: 32:cf:76:d7:a4:44:40:04:92:eb:12:47:1e:cd:3b:f9:9f:5a: f4:c9:e2:bd:92:d0:24:91:15:7e:a8:15:1d:96:27:5c:5a:0d: aa:ae:86:2a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pTgn42WZe81j2K6+XkUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjc3NTM4ZGVjMmVmY2QyZjExY2M2MzcxOTdkMWQ5YTZmZGFlOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw5DhAZjiqjbHR6TMpjva6mxdpqk OPwX2w5qi6Yct78/a0F5a+YSBhdpWd61IV/bEVzfJ50jk4McjIHhx627mNhLqi1j soDc7Vw0Q9zE/TGlo/laysXQhYq5k4MdCLpEcByTCQ3IrwWE3qyK7J+RYpZ2fvGW RXfJ35hmaDFccMdoOrje40F28sS46ETt3fDAe1jJX/kRb0GPm7CGQkrFz/5Tr1ij 96gbPHAj4x4NDjqhd+lpIQIrq8xaGX7KDYp5E2G0PTGeaEk1LRv/uGIAp3+WeNAw +zH5E2Q0yPCZwvMJjmAfEpU199fiwTXyIKw34W09LXoghKCFSeVFT+PBkwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFOJ3U43sLvzS8RzGNxl9HZpv2unZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2EzMWRk Yi0xZmQyLTQ2MWMtYmZlYi04MmVlMmQyYjQyODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYTMxZGRi LTFmZDItNDYxYy1iZmViLTgyZWUyZDJiNDI4OS8xLzRuZFRqZXd1X05MeEhNWTNH WDBkbW1fYTZkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDVXbIAwQCuXCIMA0EAgACMAcDBQMqBmGAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCIfTANBgkqhkiG9w0BAQsFAAOCAQEAVYL2 HLM4CohMi7jbD9U5hQ/+9ucBnkcnVoSqlJc5MXRga9GxejvpHpJBtH6epQG3ZkB8 kdlD+QC/rqQDnMDq/0yo93Xqfqjc2kPATZOvwWtSPtlWxPhh2rUmi0PLXlqPhaAc Mx5T50xNJOsgnpVFb3gnYfVbLnFnH6n/+ZEWvzM8rcy5yynaNNIlq+PGoEJ28z5p pxJBFPLAmkg3oEcKx3FnV9pj4Kz/pkqvHvdgdKZpMZFzsdpfpAmqJeehVMoiOXVE 0fvhahgBavlHKvYn1T/3cTky0sDBMs9216REQASS6xJHHs07+Z9a9MnivZLQJJEV fqgVHZYnXFoNqq6GKg== -----END CERTIFICATE-----Generated at Thu Jan 29 11:30:16 2026 by rpki-client