This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer File: d4DNTnTxhajxrUBSG2EbdNUWv3c.cer (raw, json) Hash identifier: hnwvk63dssgC8pGYsfpfq1IFhJc8w465zwqupvDiMbY= Subject key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835091E3733EC02FEC1ACB37F538C92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49895 AS: 60276 IP: 46.254.76.0/24 IP: 46.254.78.0/23 IP: 185.1.17.0/24 IP: 2001:7f8:7c::/48 IP: 2a00:e800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:09:1e:37:33:ec:02:fe:c1:ac:b3:7f:53:8c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0e:93:1e:de:1f:22:c1:30:a5:be:99:bb:8a: 72:48:05:05:f6:d2:85:07:fa:16:36:9d:f6:dd:cf: 9d:dc:3a:ad:fb:2f:1a:c0:1f:22:4a:2c:33:c8:ed: 9a:67:32:7c:b7:43:f9:b2:37:60:48:01:d8:1d:79: ae:9b:ab:35:c8:20:9c:e4:e2:eb:be:74:6c:bf:e0: 4d:93:61:95:f8:6a:b4:d6:ee:79:7a:c8:82:38:ad: 32:d3:e8:84:3b:b5:de:81:05:0d:e3:89:93:11:1f: 26:e4:49:5d:cd:d5:d8:24:7d:dd:6d:f0:9b:b4:de: bf:fa:1a:9a:b7:b5:59:71:3c:60:7e:10:c9:ef:a8: fa:66:0d:c1:d5:47:cd:3a:c0:3d:d5:33:ea:1f:40: b3:9e:ea:40:c5:22:78:85:ea:20:ae:3b:01:b9:01: 93:72:49:46:e5:80:fb:87:97:98:7f:3e:29:69:56: d6:36:cb:7f:34:10:ce:23:73:0b:4b:f1:25:d3:c9: 37:e6:b8:04:4b:dd:1a:20:fe:af:eb:d8:9c:74:cb: 2f:ab:76:3a:b1:32:e2:f3:28:c3:a9:71:af:6b:88: 5c:c3:d5:64:b6:3a:cc:89:b1:cb:0e:54:43:03:ec: 8f:7f:00:da:c2:2d:60:ec:71:b5:08:bc:ca:ba:30: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.76.0/24 46.254.78.0/23 185.1.17.0/24 IPv6: 2001:7f8:7c::/48 2a00:e800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49895 60276 Signature Algorithm: sha256WithRSAEncryption 2a:3e:56:57:9f:8f:5f:c1:2e:0e:55:ca:d7:f5:35:fc:c0:b2: 22:c9:25:e6:10:af:66:82:8c:a1:16:16:e1:1c:ef:05:d5:22: dc:e5:4e:f1:03:06:29:91:e7:55:55:72:8c:3c:f4:b2:39:00: 0f:59:73:d3:88:24:8a:52:d5:0a:a4:d1:f0:16:68:61:89:d9: 55:13:14:71:1e:91:bd:4e:e2:98:6a:13:f4:51:29:85:54:03: d1:59:b6:0a:7c:de:ca:29:ef:e6:9b:5a:b3:a5:a0:66:48:44: 15:6c:63:b0:1e:09:e7:bb:cc:ea:86:1a:9e:14:5e:ea:4e:f1: ef:fa:eb:90:18:8a:92:bb:e8:d1:ec:87:92:50:57:5c:7b:5e: 77:2a:10:d5:a5:7f:eb:55:72:0a:18:a0:38:2a:99:bf:5f:2b: 83:94:57:46:34:d5:54:47:74:e3:9f:a9:4b:9f:a7:83:ef:4c: 7c:01:bc:e2:42:47:f1:82:12:61:53:32:06:6b:d2:13:fa:f0: c0:8f:d2:25:26:0b:68:d0:ff:c5:e4:66:4a:72:75:6d:da:f9: 7c:61:30:4b:17:3e:27:1b:6f:da:91:f4:4b:15:36:6b:59:7f: 3f:99:4d:c4:f8:9d:5a:46:1b:4f:73:a0:01:30:cc:3f:9a:38: 78:13:a5:a0 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt4NQkeNzPsAv7BrLN/U4ySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzgwY2Q0ZTc0ZjE4NWE4ZjFhZDQwNTIxYjYxMWI3NGQ1MTZiZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9w6THt4fIsEwpb6Zu4pySAUF9tKF B/oWNp323c+d3Dqt+y8awB8iSiwzyO2aZzJ8t0P5sjdgSAHYHXmum6s1yCCc5OLr vnRsv+BNk2GV+Gq01u55esiCOK0y0+iEO7XegQUN44mTER8m5EldzdXYJH3dbfCb tN6/+hqat7VZcTxgfhDJ76j6Zg3B1UfNOsA91TPqH0CznupAxSJ4heogrjsBuQGT cklG5YD7h5eYfz4paVbWNst/NBDOI3MLS/El08k35rgES90aIP6v69icdMsvq3Y6 sTLi8yjDqXGva4hcw9VktjrMibHLDlRDA+yPfwDawi1g7HG1CLzKujADAQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFHeAzU508YWo8a1AUhthG3TVFr93MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2ZmNTlm Ny1iZmMzLTQ5ODktOGI4ZC1lOThkMDUyY2VhN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvZmY1OWY3 LWJmYzMtNDk4OS04YjhkLWU5OGQwNTJjZWE3Zi8xL2Q0RE5UblR4aGFqeHJVQlNH MkViZE5VV3YzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAYBAIAATASAwQALv5MAwQBLv5OAwQAuQERMBYEAgACMBADBwAg AQf4AHwDBQMqAOgAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDC5wIDAOt0MA0G CSqGSIb3DQEBCwUAA4IBAQAqPlZXn49fwS4OVcrX9TX8wLIiySXmEK9mgoyhFhbh HO8F1SLc5U7xAwYpkedVVXKMPPSyOQAPWXPTiCSKUtUKpNHwFmhhidlVExRxHpG9 TuKYahP0USmFVAPRWbYKfN7KKe/mm1qzpaBmSEQVbGOwHgnnu8zqhhqeFF7qTvHv +uuQGIqSu+jR7IeSUFdce153KhDVpX/rVXIKGKA4Kpm/XyuDlFdGNNVUR3Tjn6lL n6eD70x8AbziQkfxghJhUzIGa9IT+vDAj9IlJgto0P/F5GZKcnVt2vl8YTBLFz4n G2/akfRLFTZrWX8/mU3E+J1aRhtPc6ABMMw/mjh4E6Wg -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:38 2026 by rpki-client