This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer File: 28FEzhVO7p27NWLOTNMigzhkEzM.cer (raw, json) Hash identifier: EWDtNc3BbkUP4gn1WsBlXUGr0hcGAV9I3QQaDBoba1g= Subject key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA63C7097CF5B85E1CFAA84A53123F5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42853 IP: 185.25.244.0/22 IP: 2a00:8420::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:3c:70:97:cf:5b:85:e1:cf:aa:84:a5:31:23:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbc144ce154eee9dbb3562ce4cd3228338641333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:02:74:83:20:c2:40:68:ee:29:33:eb:cd: 12:65:08:5c:dc:10:88:7d:13:73:1a:e8:69:b4:9f: ed:b7:92:bc:2c:10:de:37:1e:7e:f6:16:8c:22:00: 28:5a:29:e8:eb:36:bc:15:9c:1d:fd:dc:b5:6e:89: c1:35:7a:6d:17:5d:a4:65:bc:48:1a:fe:cd:6b:03: 45:ba:0d:bd:8f:ee:85:e1:23:5e:b4:58:10:15:37: 2b:96:93:85:78:cb:06:45:a7:35:08:67:42:24:0e: 5f:0c:41:1b:52:d6:ad:5d:27:60:2a:5d:55:40:71: 54:62:ce:78:f2:a4:13:aa:fc:c6:0c:63:fa:5b:db: 39:f6:20:be:fb:22:d1:bf:c6:13:3e:f1:93:3a:d3: c4:6e:7b:c0:05:38:bd:89:2c:3d:9e:bf:cb:f8:61: f4:26:55:63:7e:9e:49:36:52:30:d2:4a:24:53:85: 40:34:ad:e5:34:00:3a:a8:ca:5d:30:8a:6c:1e:1c: 62:f6:14:db:50:d6:1c:65:1c:5f:d5:69:3f:52:a2: 13:b8:b4:3e:a4:83:32:ff:da:a9:fa:07:f5:ff:4b: 4d:c4:4f:4b:45:10:42:6a:82:a9:d7:47:f8:83:41: c6:a1:87:7a:80:1f:8c:b8:77:db:eb:fb:b3:a3:45: 11:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.244.0/22 IPv6: 2a00:8420::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42853 Signature Algorithm: sha256WithRSAEncryption 36:69:03:42:94:50:b6:90:3b:a0:78:7c:da:fd:ff:5b:aa:51: 7a:20:c1:0b:8c:a4:4a:54:62:20:48:3c:88:cb:79:6a:46:a2: e4:fb:d6:c2:ae:a5:07:2a:95:27:13:a1:2a:69:43:1b:07:9d: e3:c6:55:72:08:c9:b1:de:80:14:f8:09:7c:a7:a5:93:e9:cf: e3:80:5c:6b:7f:2e:75:82:f7:09:01:e6:8a:0f:69:97:7e:ac: 64:a7:e2:69:17:b9:69:21:a5:d4:58:da:d1:22:51:11:40:8c: 6c:c2:cf:eb:f4:a4:38:74:66:c5:c0:c6:6c:a1:57:78:27:c6: cd:b6:f3:80:6b:c7:88:19:7d:36:ff:95:b2:58:45:d8:81:79: b3:bd:23:83:e0:c9:16:92:59:3b:82:46:6f:e3:c6:f5:8a:b8: a8:23:f0:46:b0:ce:b6:07:4f:02:76:1e:f6:ff:b9:64:8e:70: e2:e7:3b:11:88:d3:0c:45:e0:7d:c0:51:78:9f:cf:0f:6f:a3: cd:69:29:ab:ce:cb:7f:68:f4:f5:35:6b:97:6d:8d:34:a1:26: b0:a5:5d:10:5a:80:df:5f:8d:69:12:ad:cd:e6:58:7b:9b:82: ac:b2:54:60:cf:f6:02:38:fa:7f:ef:d6:8f:32:c1:f8:11:21: 21:d0:b3:b3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pjxwl89bheHPqoSlMSP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmMxNDRjZTE1NGVlZTlkYmIzNTYyY2U0Y2QzMjI4MzM4NjQxMzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZMCdIMgwkBo7ikz680SZQhc3BCI fRNzGuhptJ/tt5K8LBDeNx5+9haMIgAoWino6za8FZwd/dy1bonBNXptF12kZbxI Gv7NawNFug29j+6F4SNetFgQFTcrlpOFeMsGRac1CGdCJA5fDEEbUtatXSdgKl1V QHFUYs548qQTqvzGDGP6W9s59iC++yLRv8YTPvGTOtPEbnvABTi9iSw9nr/L+GH0 JlVjfp5JNlIw0kokU4VANK3lNAA6qMpdMIpsHhxi9hTbUNYcZRxf1Wk/UqITuLQ+ pIMy/9qp+gf1/0tNxE9LRRBCaoKp10f4g0HGoYd6gB+MuHfb6/uzo0URPQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNvBRM4VTu6duzVizkzTIoM4ZBMzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmL2EyMmNm YS0wMWYzLTRmMTItYjZmZC00ODk0Zjg4YmVkZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvYTIyY2Zh LTAxZjMtNGYxMi1iNmZkLTQ4OTRmODhiZWRkYy8xLzI4RkV6aFZPN3AyN05XTE9U Tk1pZ3poa0V6TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuRn0MA0EAgACMAcDBQMqAIQgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCnZTANBgkqhkiG9w0BAQsFAAOCAQEANmkDQpRQtpA7 oHh82v3/W6pReiDBC4ykSlRiIEg8iMt5akai5PvWwq6lByqVJxOhKmlDGwed48ZV cgjJsd6AFPgJfKelk+nP44Bca38udYL3CQHmig9pl36sZKfiaRe5aSGl1Fja0SJR EUCMbMLP6/SkOHRmxcDGbKFXeCfGzbbzgGvHiBl9Nv+VslhF2IF5s70jg+DJFpJZ O4JGb+PG9Yq4qCPwRrDOtgdPAnYe9v+5ZI5w4uc7EYjTDEXgfcBReJ/PD2+jzWkp q87Lf2j09TVrl22NNKEmsKVdEFqA31+NaRKtzeZYe5uCrLJUYM/2Ajj6f+/WjzLB +BEhIdCzsw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:36 2026 by rpki-client