This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer (raw, json) Hash identifier: mSHxym4L9jCrhYSzHyIC3j3Z/Vm+H+dZ4RbkRxhVwgY= Subject key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36BBE44A4E0A213097BD5450DDA8D5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60510 IP: 91.238.34.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bb:e4:4a:4e:0a:21:30:97:bd:54:50:dd:a8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:ae:d4:42:45:4a:c7:f3:b1:32:fa:3c:ff: 71:ad:b9:bf:d2:9e:12:65:de:04:8b:28:d5:69:e4: 86:78:e7:b0:fc:f4:70:76:e3:8f:97:b4:d2:d5:95: b8:f0:b1:14:77:ae:02:34:ff:0d:7d:88:11:62:2b: c0:84:ed:86:6c:e9:b4:16:13:b7:26:e9:fc:f1:c3: 74:c0:39:b7:cf:8f:e2:51:55:91:4c:01:f8:2c:92: 18:a9:91:1b:d0:83:29:7f:8e:69:ea:38:d9:40:5d: bb:1c:ae:6b:9e:24:56:72:29:84:49:e8:04:a1:e8: 8f:a8:b6:7e:ac:55:be:06:7e:d0:94:36:e5:80:4f: 1b:58:60:98:5a:a8:ba:81:d8:5e:d1:56:b0:a8:3c: cd:93:0a:19:1e:1b:3b:07:08:2e:5d:e0:8c:85:e3: d4:77:97:77:98:09:61:82:ee:88:d2:cc:5a:99:77: b3:c6:9b:59:c7:91:5c:19:75:ee:07:71:a9:f3:8f: 86:ff:35:f9:44:bb:5d:89:65:4c:30:90:be:e6:e0: d3:ba:67:c7:bc:31:0f:8e:fc:e1:c8:23:6e:80:6e: c0:77:e3:dd:6b:f7:c4:bd:47:c0:61:6a:75:f5:6d: b4:94:65:11:75:ac:56:80:29:d2:34:4d:32:32:e0: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.34.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60510 Signature Algorithm: sha256WithRSAEncryption 40:14:8a:11:49:2e:8a:42:55:3c:86:7c:b3:dd:37:86:ab:01: f4:0a:24:17:e8:7b:37:cc:85:6b:42:01:cf:eb:93:65:6e:47: 78:15:9a:e5:af:c9:ef:cc:1d:3b:80:cf:7f:70:2f:58:9a:d1: 6f:64:d5:0c:5e:ee:c0:d6:89:bd:24:62:01:5a:db:c8:99:06: 9e:e8:b8:0e:fe:ac:d2:34:54:84:ba:d4:c7:03:d5:7d:fe:01: b8:92:73:4a:53:1e:5e:3d:1a:c5:55:0b:13:dc:b9:94:c2:96: 4f:fe:22:07:84:f0:a9:d8:22:63:43:1a:b6:67:d2:26:0c:1c: 96:2b:13:6b:6c:0c:52:00:b4:aa:91:00:be:a9:3b:97:d6:ec: 3a:f5:9d:97:69:6a:d9:10:55:de:c8:23:7e:d4:8e:07:44:2b: e6:af:85:48:87:d7:0b:2e:0e:e5:85:15:86:4f:da:0f:44:2d: d8:f4:ec:b8:10:96:35:d2:e9:e7:f4:e9:65:49:04:6e:05:45: 66:96:6c:d4:57:04:5f:f1:87:af:2f:cf:65:64:5a:b5:67:ab: c1:85:7f:39:95:a8:08:b5:21:c3:27:f0:f2:01:e9:f6:d6:0e: 9c:3f:a3:42:06:e3:04:78:02:6f:5c:6f:f5:e8:d8:aa:eb:2c: c6:47:27:62 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NrvkSk4KITCXvVRQ3ajVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQwZWJkOGY1NjZlM2ZhYjdlMjM1NGI3MTQwNjBjNmZhNDdlMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb2u1EJFSsfzsTL6PP9xrbm/0p4S Zd4EiyjVaeSGeOew/PRwduOPl7TS1ZW48LEUd64CNP8NfYgRYivAhO2GbOm0FhO3 Jun88cN0wDm3z4/iUVWRTAH4LJIYqZEb0IMpf45p6jjZQF27HK5rniRWcimESegE oeiPqLZ+rFW+Bn7QlDblgE8bWGCYWqi6gdhe0VawqDzNkwoZHhs7BwguXeCMhePU d5d3mAlhgu6I0sxamXezxptZx5FcGXXuB3Gp84+G/zX5RLtdiWVMMJC+5uDTumfH vDEPjvzhyCNugG7Ad+Pda/fEvUfAYWp19W20lGURdaxWgCnSNE0yMuCc+QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHXQ69j1ZuP6t+I1S3FAYMb6R+JUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzQ4MzI0 MS0zZGJhLTQzOTItYWFiMC0zOTc2NWEzZjlkYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNDgzMjQx LTNkYmEtNDM5Mi1hYWIwLTM5NzY1YTNmOWRiYy8xL2RkRHIyUFZtNF9xMzRqVkxj VUJneHZwSDRsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+4iMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDsXjANBgkqhkiG9w0BAQsFAAOCAQEAQBSKEUkuikJVPIZ8s903hqsB9AokF+h7 N8yFa0IBz+uTZW5HeBWa5a/J78wdO4DPf3AvWJrRb2TVDF7uwNaJvSRiAVrbyJkG nui4Dv6s0jRUhLrUxwPVff4BuJJzSlMeXj0axVULE9y5lMKWT/4iB4TwqdgiY0Ma tmfSJgwclisTa2wMUgC0qpEAvqk7l9bsOvWdl2lq2RBV3sgjftSOB0Qr5q+FSIfX Cy4O5YUVhk/aD0Qt2PTsuBCWNdLp5/TpZUkEbgVFZpZs1FcEX/GHry/PZWRatWer wYV/OZWoCLUhwyfw8gHp9tYOnD+jQgbjBHgCb1xv9ejYqussxkcnYg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:14 2026 by rpki-client