This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer File: D4jGhrHhIvzcFlwCN6D149mQvwE.cer (raw, json) Hash identifier: Ci+Y+0LNAuu1D/38F524xux3HESPgJMoUBLfJsc0MW8= Subject key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B5A14DED5BE3C1B41DB7E9A3991CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212154 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5a:14:de:d5:be:3c:1b:41:db:7e:9a:39:91:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:fd:1b:ca:44:46:f5:d0:2d:e4:71:92:1f: 22:90:90:95:c3:78:f9:02:29:92:1c:d7:e2:87:9b: e0:34:ea:56:e5:15:81:4b:b6:10:53:3b:21:e8:4b: ac:4e:10:db:f3:b6:e7:6e:e3:d8:99:32:26:68:0e: 89:d4:83:a7:53:cf:5b:08:ee:b6:98:56:5e:96:73: 09:c8:f2:b9:94:10:35:e5:e1:5d:09:36:ee:6a:44: 5f:7f:bb:44:e4:84:e0:25:9e:3c:ca:d9:ae:cc:24: 8e:a6:d4:d3:48:db:b6:a0:da:22:7a:22:10:fb:fa: c4:6f:20:f4:48:e6:89:0f:78:e4:00:7b:52:b6:c1: 06:4e:6e:2c:28:2a:56:93:8a:3f:50:5e:c4:8b:fd: 5e:59:a6:97:cc:42:89:83:41:ae:16:cd:9a:5c:7a: 4d:d6:d7:43:b3:ff:a9:c0:4d:e1:5b:0e:fa:21:9d: 29:73:9a:8d:68:30:bb:24:f2:ab:57:01:a2:e8:0b: c2:ee:ea:70:7d:db:c5:d4:26:9c:17:e8:f7:f5:72: 99:c9:1c:49:9c:63:74:9e:c0:fd:29:98:1c:e1:24: 81:fb:7e:7a:5b:64:13:e2:18:59:7f:66:95:97:70: 72:c8:fa:8a:ff:ca:85:ab:6a:51:de:b4:60:61:a6: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212154 Signature Algorithm: sha256WithRSAEncryption 25:2a:e7:ea:8f:20:e5:9c:5b:49:11:9d:c2:48:50:54:81:4d: a0:34:cf:02:40:5d:a7:95:5a:5e:60:8e:46:a6:15:63:94:bc: 3b:16:75:d2:33:ea:40:62:d5:ec:ff:8b:26:da:fa:ce:e0:3a: 6d:ee:ad:1f:a8:fc:9e:8c:d8:49:10:a2:6e:46:96:26:5c:5d: ee:73:d6:4d:59:8e:52:78:0e:13:a2:9b:dc:a0:0a:10:d6:81: 93:22:f6:9e:c4:4e:d1:65:35:07:1a:a2:df:05:30:e3:89:a9: 4c:14:9f:5d:1f:81:5d:57:20:26:0b:e4:00:0a:db:7a:97:30: ec:c7:11:ac:f2:0e:a2:5d:a1:07:22:57:d4:33:04:5e:aa:01: 3b:45:61:15:61:89:0a:5a:b9:e1:58:8b:3f:f5:79:b0:d4:0c: 0a:db:1c:85:c9:a7:fa:ce:2e:b7:76:e2:73:11:a7:e2:ac:e9: 67:03:ac:30:95:bc:d4:1b:db:a4:f0:98:40:bc:7d:f8:af:8a: dd:f6:a7:7f:e3:df:84:10:53:b9:7d:d7:3a:7b:19:a2:d2:46: f5:ad:16:df:6d:f3:44:78:31:86:e8:d8:15:42:47:5b:72:4f: 68:eb:81:5f:6d:6c:39:89:9e:1d:a3:4f:d3:5b:19:d0:e8:3e: f8:c3:44:0a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6W1oU3tW+PBtB236aOZHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjg4YzY4NmIxZTEyMmZjZGMxNjVjMDIzN2EwZjVlM2Q5OTBiZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNz9G8pERvXQLeRxkh8ikJCVw3j5 AimSHNfih5vgNOpW5RWBS7YQUzsh6EusThDb87bnbuPYmTImaA6J1IOnU89bCO62 mFZelnMJyPK5lBA15eFdCTbuakRff7tE5ITgJZ48ytmuzCSOptTTSNu2oNoieiIQ +/rEbyD0SOaJD3jkAHtStsEGTm4sKCpWk4o/UF7Ei/1eWaaXzEKJg0GuFs2aXHpN 1tdDs/+pwE3hWw76IZ0pc5qNaDC7JPKrVwGi6AvC7upwfdvF1CacF+j39XKZyRxJ nGN0nsD9KZgc4SSB+356W2QT4hhZf2aVl3ByyPqK/8qFq2pR3rRgYaZn9wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFA+Ixoax4SL83BZcAjeg9ePZkL8BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2U2ZjBj NC03OTlkLTQ2MjAtYWI3Yi1iNDIyNWRlMjcyM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvZTZmMGM0 LTc5OWQtNDYyMC1hYjdiLWI0MjI1ZGUyNzIzYS8xL0Q0akdockhoSXZ6Y0Zsd0NO NkQxNDltUXZ3RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8ujANBgkqhkiG9w0BAQsFAAOCAQEAJSrn6o8g5Zxb SRGdwkhQVIFNoDTPAkBdp5VaXmCORqYVY5S8OxZ10jPqQGLV7P+LJtr6zuA6be6t H6j8nozYSRCibkaWJlxd7nPWTVmOUngOE6Kb3KAKENaBkyL2nsRO0WU1Bxqi3wUw 44mpTBSfXR+BXVcgJgvkAArbepcw7McRrPIOol2hByJX1DMEXqoBO0VhFWGJClq5 4ViLP/V5sNQMCtschcmn+s4ut3bicxGn4qzpZwOsMJW81BvbpPCYQLx9+K+K3fan f+PfhBBTuX3XOnsZotJG9a0W323zRHgxhujYFUJHW3JPaOuBX21sOYmeHaNP01sZ 0Og++MNECg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:15 2026 by rpki-client