This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.cer (raw, json) Hash identifier: /4DLW0mWzVoMm3pVJNtgYdqz/3EInh2NFErS/3zoeoU= Subject key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA9610AE343F2F5E5D90DF5813A9FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.116.72.0/22 IP: 2a0d:5040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:96:10:ae:34:3f:2f:5e:5d:90:df:58:13:a9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbc950098436281cee542a1e74546551e1e55283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0f:fa:62:15:f8:be:ff:e6:a6:70:2d:9a:8a: b4:84:f4:6a:46:90:0b:a6:61:96:10:f8:72:c8:97: ca:04:2f:ba:5c:f4:83:40:bb:78:4d:97:72:13:76: 33:c1:e0:f4:56:bb:76:d7:da:5d:e1:50:3b:44:b2: 67:84:4c:39:cd:1c:d6:8d:50:1c:6a:f1:99:76:6c: 13:5a:af:9a:7d:17:0f:89:31:44:41:7e:d0:fc:7c: 7f:b1:ef:e5:e0:9d:1e:f7:e4:ed:4d:74:a8:af:2c: 3b:1f:a5:6a:e4:f8:bc:48:80:39:ae:93:8e:03:d8: 8d:13:7d:a5:37:f1:77:1e:3c:ec:e2:5f:95:a8:48: 5f:86:77:87:2c:ac:5f:f9:10:b8:9d:b5:bb:6a:e1: 47:10:09:e8:c0:3a:99:3b:90:77:f8:2b:8b:4f:f1: c4:ae:ab:a7:64:9f:14:8c:32:27:39:a1:79:fc:76: 6f:68:ff:64:42:07:d4:26:9e:d2:45:1e:8e:87:e9: 51:d7:58:2f:15:67:9a:fc:ca:25:88:f9:42:a8:61: df:e5:ce:f2:44:57:cd:7c:d8:0f:1a:23:e7:2b:95: 1d:30:50:1e:d3:9a:dd:bd:4d:c0:58:dc:20:7d:dd: 0d:cf:4f:5f:0e:55:0f:6a:5b:bf:44:75:80:21:6e: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.72.0/22 IPv6: 2a0d:5040::/29 Signature Algorithm: sha256WithRSAEncryption 91:27:46:fb:c6:ff:32:81:a4:bc:ef:96:84:67:90:89:de:f4: 46:be:e7:99:70:21:87:0e:f6:f6:d2:ac:09:5e:cc:a4:2c:4a: 5e:38:f2:db:75:de:73:60:04:f5:0a:40:f6:4b:9e:7a:91:01: 13:a7:17:f4:98:42:86:8f:c0:24:ea:6a:ce:ab:aa:97:c7:ab: a9:c5:b8:71:19:f9:e0:cc:db:a4:b0:03:77:02:49:e8:70:1c: 39:86:2d:38:9d:40:81:cf:f6:98:d7:79:3b:b3:cc:66:75:46: d0:c4:36:b7:8f:31:c2:9d:4c:7f:5a:b4:f1:f5:61:b1:29:98: 65:9d:cc:bb:f3:45:a3:5d:4e:cb:0a:8a:e8:a3:9d:18:ba:ed: 0e:36:db:79:51:51:0a:98:da:f2:27:64:4d:10:e1:da:90:84: fb:5e:c9:58:b2:c9:25:ac:82:fc:7f:1b:3e:7c:31:ac:c9:1b: 2f:c6:be:33:89:2a:68:3a:4d:54:18:1c:a0:a1:23:64:18:c1: 85:7d:9d:6b:4d:61:a6:36:99:03:24:96:b2:46:be:db:99:69: bb:75:a8:c3:9a:3b:fb:0c:b8:ea:0f:24:54:54:46:9a:6e:c3: 40:2c:65:58:1f:51:5d:20:70:d8:b6:71:3f:e7:89:59:fa:9a: 5a:46:1f:0c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9ypYQrjQ/L15dkN9YE6n/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmM5NTAwOTg0MzYyODFjZWU1NDJhMWU3NDU0NjU1MWUxZTU1MjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ/6YhX4vv/mpnAtmoq0hPRqRpAL pmGWEPhyyJfKBC+6XPSDQLt4TZdyE3YzweD0Vrt219pd4VA7RLJnhEw5zRzWjVAc avGZdmwTWq+afRcPiTFEQX7Q/Hx/se/l4J0e9+TtTXSoryw7H6Vq5Pi8SIA5rpOO A9iNE32lN/F3Hjzs4l+VqEhfhneHLKxf+RC4nbW7auFHEAnowDqZO5B3+CuLT/HE rqunZJ8UjDInOaF5/HZvaP9kQgfUJp7SRR6Oh+lR11gvFWea/MoliPlCqGHf5c7y RFfNfNgPGiPnK5UdMFAe05rdvU3AWNwgfd0Nz09fDlUPalu/RHWAIW5WowIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNvJUAmENigc7lQqHnRUZVHh5VKDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzVhYTQ0 OC02NDNmLTRhZWUtOTBkOS1mNDdlMTY5MjY2YzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvNWFhNDQ4 LTY0M2YtNGFlZS05MGQ5LWY0N2UxNjkyNjZjMi8xLzI4bFFDWVEyS0J6dVZDb2Vk RlJsVWVIbFVvTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXRIMA0EAgACMAcDBQMqDVBAMA0GCSqGSIb3 DQEBCwUAA4IBAQCRJ0b7xv8ygaS875aEZ5CJ3vRGvueZcCGHDvb20qwJXsykLEpe OPLbdd5zYAT1CkD2S556kQETpxf0mEKGj8Ak6mrOq6qXx6upxbhxGfngzNuksAN3 AknocBw5hi04nUCBz/aY13k7s8xmdUbQxDa3jzHCnUx/WrTx9WGxKZhlncy780Wj XU7LCoroo50Yuu0ONtt5UVEKmNryJ2RNEOHakIT7XslYssklrIL8fxs+fDGsyRsv xr4ziSpoOk1UGBygoSNkGMGFfZ1rTWGmNpkDJJayRr7bmWm7dajDmjv7DLjqDyRU VEaabsNALGVYH1FdIHDYtnE/54lZ+ppaRh8M -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:48 2026 by rpki-client