This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer File: dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer (raw, json) Hash identifier: t+uGPND+YzM5+fDAd82KlvYC5FsIkaKtKEkkx6fAyZw= Subject key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6AD4383833AF5BA156786ED5EC261 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.216.44.0/24 IP: 2a10:a580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ad:43:83:83:3a:f5:ba:15:67:86:ed:5e:c2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b975898d10f1a5052133e1e25036c6114d8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:cb:a5:7f:56:c9:50:15:bd:1d:02:25:9f: 3a:bd:e2:a8:e8:c2:bf:f2:25:b2:94:18:cb:44:6b: de:85:52:88:c4:81:e5:c5:76:6b:89:35:8a:61:99: b3:b5:a0:1d:d9:67:f4:19:20:94:3f:64:4a:ff:e9: 35:c1:be:cf:c5:b6:d6:32:4f:b9:79:7c:e5:02:95: 87:f9:ea:98:e2:f2:97:9a:67:c8:9a:03:39:00:fe: eb:19:bb:9c:72:8e:0a:81:89:eb:ff:ed:2b:6f:70: bb:80:db:22:a8:39:eb:04:dc:3a:4d:0b:29:73:90: ef:2e:38:39:a0:69:b1:09:5e:87:9a:5d:2f:50:53: 7d:c5:d5:39:78:71:bc:d3:41:dd:75:67:16:41:27: 90:4d:1b:14:48:6c:8f:34:65:8c:2e:6c:97:23:44: 77:70:cb:e4:dc:a1:a2:c6:9f:4c:25:d1:e7:d5:d2: 60:9c:a6:82:95:af:8e:b0:65:65:7d:b9:e7:b4:eb: 8a:36:1c:10:07:cb:dd:e1:fd:54:cf:6f:ba:14:12: 84:3c:8c:51:48:24:f5:7d:a5:ea:0f:0c:f2:87:89: 5a:a9:11:d0:5d:16:44:1c:8d:51:e6:06:1a:56:83: 3a:90:8a:b8:2b:0b:36:d8:e0:0c:fe:9c:88:72:29: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.44.0/24 IPv6: 2a10:a580::/29 Signature Algorithm: sha256WithRSAEncryption 74:be:e2:9c:0b:90:6b:d1:ec:6b:ae:f0:8f:4d:0e:09:8f:1f: 34:67:0b:d0:30:58:64:3c:e5:09:cb:88:cd:4d:fd:a6:53:69: e4:52:90:f8:60:a9:33:ac:94:c2:39:3c:a5:1e:e6:15:06:0d: e2:07:96:56:8e:c1:64:30:39:84:ef:ee:70:0b:9f:4e:76:99: 9f:a7:ae:04:1c:37:ea:0e:3c:3c:e1:60:02:8e:9e:e4:bc:73: be:32:c2:02:2d:67:55:88:9a:6e:33:c1:1b:30:e1:5c:f6:08: 45:48:8b:c3:82:07:c7:f6:6d:50:cf:e8:6a:55:ba:3a:37:bc: cc:a7:9c:6a:53:8a:1b:68:4a:dc:68:ec:16:12:83:37:e8:a7: 71:e5:ad:d8:40:23:a0:86:c4:81:7c:f1:cf:3a:6c:42:2e:04: 56:5a:e9:f1:49:08:13:ff:e0:dd:a6:76:ab:11:7f:e4:62:ca: a2:1a:1e:0c:1b:cd:47:ce:01:2b:2e:1e:db:38:be:6b:44:ff: 96:67:b3:f2:6b:db:7f:f3:4f:c2:3c:31:62:b4:38:9f:55:e5: 21:85:e8:fa:5d:bd:ff:97:68:40:05:e1:20:b3:35:e6:af:b2: cc:cf:23:d1:3b:32:2e:c2:89:c4:b3:65:45:62:ec:2a:86:70: 07:f1:46:8e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xq1Dg4M69boVZ4btXsJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGI5NzU4OThkMTBmMWE1MDUyMTMzZTFlMjUwMzZjNjExNGQ4ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFXLpX9WyVAVvR0CJZ86veKo6MK/ 8iWylBjLRGvehVKIxIHlxXZriTWKYZmztaAd2Wf0GSCUP2RK/+k1wb7PxbbWMk+5 eXzlApWH+eqY4vKXmmfImgM5AP7rGbucco4KgYnr/+0rb3C7gNsiqDnrBNw6TQsp c5DvLjg5oGmxCV6Hml0vUFN9xdU5eHG800HddWcWQSeQTRsUSGyPNGWMLmyXI0R3 cMvk3KGixp9MJdHn1dJgnKaCla+OsGVlfbnntOuKNhwQB8vd4f1Uz2+6FBKEPIxR SCT1faXqDwzyh4laqRHQXRZEHI1R5gYaVoM6kIq4Kws22OAM/pyIcimeoQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHS5dYmNEPGlBSEz4eJQNsYRTYh2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzlkY2Qw ZS1mMzE5LTQ0MDMtYjE2NC1iN2M4NzJkZDk2NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvOWRjZDBl LWYzMTktNDQwMy1iMTY0LWI3Yzg3MmRkOTY3NS8xL2RMbDFpWTBROGFVRklUUGg0 bEEyeGhGTmlIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9gsMA0EAgACMAcDBQMqEKWAMA0GCSqGSIb3 DQEBCwUAA4IBAQB0vuKcC5Br0exrrvCPTQ4Jjx80ZwvQMFhkPOUJy4jNTf2mU2nk UpD4YKkzrJTCOTylHuYVBg3iB5ZWjsFkMDmE7+5wC59Odpmfp64EHDfqDjw84WAC jp7kvHO+MsICLWdViJpuM8EbMOFc9ghFSIvDggfH9m1Qz+hqVbo6N7zMp5xqU4ob aErcaOwWEoM36Kdx5a3YQCOghsSBfPHPOmxCLgRWWunxSQgT/+DdpnarEX/kYsqi Gh4MG81HzgErLh7bOL5rRP+WZ7Pya9t/80/CPDFitDifVeUhhej6Xb3/l2hABeEg szXmr7LMzyPROzIuwonEs2VFYuwqhnAH8UaO -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:25 2026 by rpki-client