This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer File: dE4TPKDK2fH9FhWAWQspbbIjCM4.cer (raw, json) Hash identifier: vjGCLo/DKv4Q3gDRG4J2cHZpBBM06KuuBz0myuf6HHg= Subject key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791144540E7217CF87C9D506E8C24087 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204858 IP: 176.119.198.0/24 IP: 185.227.184.0/22 IP: 194.13.110.0/24 IP: 194.13.134.0/24 IP: 194.15.125.0/24 IP: 194.15.136.0/24 IP: 2a0f:9f80::/29 IP: 2a10:2280::/29 IP: 2a13:c600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:44:54:0e:72:17:cf:87:c9:d5:06:e8:c2:40:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=744e133ca0cad9f1fd161580590b296db22308ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:ec:5b:02:38:8d:c3:45:50:53:87:7f:32: 76:01:5c:e7:c6:33:f8:c4:97:e4:e1:b9:b3:cd:5a: 8b:1b:7f:b8:66:2f:94:7d:35:a2:be:1e:72:1f:f9: 7a:92:b2:f4:ed:29:2e:3a:9a:9f:fd:41:f5:2a:14: 7c:11:03:01:83:9d:5e:82:d8:a3:52:73:f7:a7:4a: 2c:46:6b:0e:5e:78:6b:21:2c:67:bb:bc:e2:bb:17: 4d:df:bf:2f:1d:91:54:38:19:f0:13:35:00:6a:a9: 1a:aa:e3:03:5e:68:f7:9a:72:f7:bb:c3:b7:cd:2e: 40:a4:3b:1e:3c:c1:65:a3:14:0c:28:de:35:32:b0: c4:29:37:46:bb:d2:6e:23:51:b0:30:10:c8:65:cd: 56:3a:a6:5c:b4:d8:d7:3f:f3:39:00:3c:5f:d6:77: 81:d1:41:9b:62:35:c0:84:1a:85:b0:34:56:4c:41: 0e:dd:d3:0a:fb:53:2a:cb:12:5a:c6:5d:b4:85:2f: fe:7f:31:83:f4:80:d6:21:2b:b4:d4:ca:3e:4f:98: f6:9c:f8:77:3f:34:a3:e5:e7:36:4f:ad:34:65:e4: f6:15:a1:95:9a:d3:bb:c2:f5:82:da:bf:03:f4:0d: 5f:0a:e3:86:79:e0:f3:26:64:36:af:23:40:c7:43: de:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.198.0/24 185.227.184.0/22 194.13.110.0/24 194.13.134.0/24 194.15.125.0/24 194.15.136.0/24 IPv6: 2a0f:9f80::/29 2a10:2280::/29 2a13:c600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204858 Signature Algorithm: sha256WithRSAEncryption 8b:f9:2d:0d:a0:3d:e7:61:01:24:ce:84:c6:39:c1:a5:48:f6: 6f:81:de:dd:65:19:ce:9a:26:a2:96:8c:e4:9a:5b:1e:8b:c7: 9d:c5:62:16:d0:51:bb:62:8c:80:7d:c8:d7:37:0a:d8:35:92: b1:f2:42:50:12:8a:97:b1:75:64:b9:33:26:eb:59:66:ee:d4: c4:f6:20:d9:e5:4d:ea:88:0a:0e:3d:ac:62:ff:dc:0c:c1:22: c7:67:4d:b2:ad:89:26:e1:d7:c9:df:ce:28:3b:55:91:ae:e0: a7:92:e2:2f:eb:69:50:69:2d:1b:59:92:de:da:5e:87:a3:20: ef:30:fd:5c:4c:46:1f:47:4d:26:11:82:62:b6:29:14:63:f2: 18:1a:8b:ac:31:76:0c:71:53:6e:12:4e:be:9c:27:5a:9e:b0: 82:4d:50:48:e5:64:db:a1:1e:9b:25:03:45:7e:ea:1f:7c:6e: 7a:9e:93:8f:d3:73:f8:b8:d7:dd:ef:9f:fb:21:43:f6:c7:81: 45:ca:41:08:b6:d0:35:4f:94:a3:29:d7:e6:76:17:ae:aa:41: 7e:2c:c5:0d:da:78:0f:4f:70:7a:ac:96:97:1f:96:05:dc:ce: e4:10:40:e5:2b:f0:b8:5d:99:31:55:9d:9f:92:b9:96:70:4f: 3c:8d:51:ae -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt5EURUDnIXz4fJ1QbowkCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDRlMTMzY2EwY2FkOWYxZmQxNjE1ODA1OTBiMjk2ZGIyMjMwOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntrsWwI4jcNFUFOHfzJ2AVznxjP4 xJfk4bmzzVqLG3+4Zi+UfTWivh5yH/l6krL07SkuOpqf/UH1KhR8EQMBg51egtij UnP3p0osRmsOXnhrISxnu7ziuxdN378vHZFUOBnwEzUAaqkaquMDXmj3mnL3u8O3 zS5ApDsePMFloxQMKN41MrDEKTdGu9JuI1GwMBDIZc1WOqZctNjXP/M5ADxf1neB 0UGbYjXAhBqFsDRWTEEO3dMK+1MqyxJaxl20hS/+fzGD9IDWISu01Mo+T5j2nPh3 PzSj5ec2T600ZeT2FaGVmtO7wvWC2r8D9A1fCuOGeeDzJmQ2ryNAx0PevwIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFHROEzygytnx/RYVgFkLKW2yIwjOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2I0MTE5 MC1kYTI4LTQzMDEtOTBjNS05NWE0ZWY0M2MyMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvYjQxMTkw LWRhMjgtNDMwMS05MGM1LTk1YTRlZjQzYzIxNS8xL2RFNFRQS0RLMmZIOUZoV0FX UXNwYmJJakNNNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTAqBAIAATAkAwQAsHfGAwQCueO4AwQAwg1uAwQAwg2GAwQAwg99 AwQAwg+IMBsEAgACMBUDBQMqD5+AAwUDKhAigAMFAyoTxgAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAyA6MA0GCSqGSIb3DQEBCwUAA4IBAQCL+S0NoD3nYQEkzoTG OcGlSPZvgd7dZRnOmiailozkmlsei8edxWIW0FG7YoyAfcjXNwrYNZKx8kJQEoqX sXVkuTMm61lm7tTE9iDZ5U3qiAoOPaxi/9wMwSLHZ02yrYkm4dfJ384oO1WRruCn kuIv62lQaS0bWZLe2l6HoyDvMP1cTEYfR00mEYJitikUY/IYGousMXYMcVNuEk6+ nCdanrCCTVBI5WTboR6bJQNFfuoffG56npOP03P4uNfd75/7IUP2x4FFykEIttA1 T5SjKdfmdheuqkF+LMUN2ngPT3B6rJaXH5YF3M7kEEDlK/C4XZkxVZ2fkrmWcE88 jVGu -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:47 2026 by rpki-client