This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer (raw, json) Hash identifier: k9gZWxhtiLH/5cMJ7I1ovGeloOJl5Z0S6zlcKcK3+Hc= Subject key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35B7E0430E6ABF9FA78C64B940FBA5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.138.112.0/22 IP: 185.241.132.0/22 IP: 2a0d:4700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b7:e0:43:0e:6a:bf:9f:a7:8c:64:b9:40:fb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f657093f326547bf25a9985c81cf1403140a3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:d1:39:8c:7b:2d:c0:42:ca:4a:7d:eb:eb: 73:30:e7:8c:ff:21:38:32:7d:44:d9:3e:47:10:75: 00:15:08:f9:68:57:6d:e9:cf:dd:5c:e2:ce:5b:65: a9:92:1c:b2:43:4b:27:96:3e:02:15:0d:75:2c:cb: 47:e0:de:c4:e8:49:3b:21:89:59:cc:06:a0:d7:5a: 99:c8:e8:e6:f2:cc:cf:45:85:75:fa:ec:af:7b:01: 6f:fd:32:8a:80:60:d2:f4:ae:27:b1:c9:19:53:bc: a0:e4:76:d8:ac:aa:6b:03:7d:3a:8b:1e:f6:13:ab: fd:81:e2:40:c2:e9:5f:ad:39:f4:f0:6a:fc:57:dd: 24:94:e3:f3:f5:16:ab:dc:be:63:47:ae:70:70:b8: 86:6c:f0:e3:75:9b:c9:25:72:2e:5d:13:e1:71:20: 12:4d:d3:10:1a:0f:88:a2:71:60:d5:4d:9d:49:13: ac:20:ce:2d:df:fa:bb:db:45:77:d5:76:ab:e2:b9: ab:b0:52:bb:82:0a:50:98:53:83:d4:f6:9a:97:93: 06:0f:d5:0d:03:c8:37:27:c7:00:df:08:75:d7:24: 1c:ab:3c:c2:59:b6:50:1b:1c:1b:9c:e8:e5:01:ad: 49:67:a5:40:67:ea:68:f5:2e:69:70:75:0e:aa:18: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.112.0/22 185.241.132.0/22 IPv6: 2a0d:4700::/29 Signature Algorithm: sha256WithRSAEncryption 9f:d2:eb:4e:30:aa:70:fb:47:71:5b:ef:61:bf:c4:f9:03:71: b5:d0:be:24:79:ee:c4:28:35:1d:68:71:4a:d8:e0:75:58:3c: 7e:7d:bd:d0:66:37:da:ec:77:ea:d3:e8:bd:22:09:c4:7f:4c: 7a:92:18:a0:a2:83:e1:14:e5:e0:13:31:7d:92:ce:95:2a:e9: e9:6d:cf:45:a4:f2:21:f0:f4:9d:64:00:d4:46:0c:b7:cd:50: c0:3e:90:2f:2a:80:44:00:fa:27:09:c3:7e:1e:11:4c:5c:f7: 96:c3:b2:82:ce:e6:ab:6d:8f:d2:6f:ec:eb:a7:f6:61:16:30: e5:9f:5d:3a:0f:71:bc:06:c1:b3:ed:3a:ac:98:b0:92:75:49: 45:55:78:49:f4:9c:82:44:c2:7c:0a:04:bd:b8:d1:eb:52:b9: c6:91:06:82:c0:67:00:ff:6a:54:63:2e:19:a5:1e:db:d9:2b: 00:5d:b2:dc:83:a9:3a:ec:5b:ea:1e:f4:c0:db:c4:90:b4:cd: f7:f3:54:7c:8b:61:df:b5:8c:e2:d0:5c:47:86:b2:18:7a:67: 29:e6:51:ab:cb:63:59:25:62:dd:90:56:d1:44:9b:24:bb:76: 53:55:87:88:b3:2f:3f:d0:e3:a0:0a:fc:11:f5:d6:40:46:ce: b2:1b:7e:69 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt7NbfgQw5qv5+njGS5QPulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjY1NzA5M2YzMjY1NDdiZjI1YTk5ODVjODFjZjE0MDMxNDBhM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzHROYx7LcBCykp96+tzMOeM/yE4 Mn1E2T5HEHUAFQj5aFdt6c/dXOLOW2WpkhyyQ0snlj4CFQ11LMtH4N7E6Ek7IYlZ zAag11qZyOjm8szPRYV1+uyvewFv/TKKgGDS9K4nsckZU7yg5HbYrKprA306ix72 E6v9geJAwulfrTn08Gr8V90klOPz9Rar3L5jR65wcLiGbPDjdZvJJXIuXRPhcSAS TdMQGg+IonFg1U2dSROsIM4t3/q720V31Xar4rmrsFK7ggpQmFOD1Paal5MGD9UN A8g3J8cA3wh11yQcqzzCWbZQGxwbnOjlAa1JZ6VAZ+po9S5pcHUOqhjFzQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFA9lcJPzJlR78lqZhcgc8UAxQKOoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzE4MWFk Ni00NzY0LTQ4ODEtODk2Mi0wYWZmNjlmYWY2OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMTgxYWQ2 LTQ3NjQtNDg4MS04OTYyLTBhZmY2OWZhZjY4YS8xL0QyVndrX01tVkh2eVdwbUZ5 Qnp4UURGQW82Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuYpwAwQCufGEMA0EAgACMAcDBQMqDUcAMA0G CSqGSIb3DQEBCwUAA4IBAQCf0utOMKpw+0dxW+9hv8T5A3G10L4kee7EKDUdaHFK 2OB1WDx+fb3QZjfa7Hfq0+i9IgnEf0x6khigooPhFOXgEzF9ks6VKunpbc9FpPIh 8PSdZADURgy3zVDAPpAvKoBEAPonCcN+HhFMXPeWw7KCzuarbY/Sb+zrp/ZhFjDl n106D3G8BsGz7TqsmLCSdUlFVXhJ9JyCRMJ8CgS9uNHrUrnGkQaCwGcA/2pUYy4Z pR7b2SsAXbLcg6k67FvqHvTA28SQtM3381R8i2HftYzi0FxHhrIYemcp5lGry2NZ JWLdkFbRRJsku3ZTVYeIsy8/0OOgCvwR9dZARs6yG35p -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:03 2026 by rpki-client