This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer File: D3Tlry-nIVykabJ8EHnx_9X8rvg.cer (raw, json) Hash identifier: 9lEiLV0SN/msGh61dDTjggDuiY91yDg0La9fBNukLkE= Subject key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3595E2C99C65475506DE1A2C5DD0D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15992 IP: 91.207.192.0/23 IP: 198.217.240.0/21 IP: 2001:67c:12dc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:95:e2:c9:9c:65:47:55:06:de:1a:2c:5d:d0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:47:f6:c3:09:bb:69:e9:d5:55:55:57:38: a6:55:1f:42:6b:9a:68:21:84:e9:72:79:a2:f3:80: c6:2b:eb:e2:8f:b6:b9:f8:83:43:59:c2:5e:97:d2: 24:0a:71:b4:47:44:ee:fa:b7:99:09:8a:14:3d:23: 50:83:29:0f:07:32:e7:2d:41:30:d3:fe:13:94:57: 3b:f2:a5:5e:5c:c6:c4:e1:1d:50:fb:a4:6b:27:51: b9:a3:10:c3:01:5a:d2:12:5f:97:cb:8d:32:65:42: 9b:38:a4:77:1d:be:45:ed:f0:ab:39:e6:90:5c:a5: 4f:8e:31:b5:d7:40:07:2e:30:30:9f:2c:2a:bb:15: f7:18:c3:b5:45:3d:eb:f2:3f:45:b2:bf:07:14:75: 18:04:b5:e0:e3:9b:6a:dc:6b:14:72:1f:c6:16:a7: f6:2b:1c:0b:12:23:18:41:c2:57:47:4d:a3:96:e7: a5:64:f9:84:77:37:7e:07:aa:0a:c7:61:0a:f2:ba: 9b:20:b8:20:fd:7f:db:70:3e:1e:3f:6e:d8:e2:fc: 80:33:51:fd:40:26:eb:42:0e:a5:bd:a2:ca:a2:20: 84:a9:fe:6f:d2:5c:c0:1b:b7:c4:4c:12:8a:03:d9: 7b:ab:89:e3:4f:ca:24:08:5c:ac:2f:b1:b5:19:97: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.192.0/23 198.217.240.0/21 IPv6: 2001:67c:12dc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15992 Signature Algorithm: sha256WithRSAEncryption 98:60:b6:31:0e:25:9f:94:af:43:01:d6:4a:dd:5d:1f:7b:51: 5e:73:ae:c6:cc:0a:a6:29:b5:10:12:6e:96:54:97:2e:54:f7: ed:9a:2c:ad:32:c6:26:6b:fe:2c:c8:e4:7b:f5:91:95:17:2f: b5:44:e8:83:0a:f6:8e:5c:2d:78:e7:cf:e7:d5:54:c8:05:86: c8:8b:51:11:0c:95:86:c2:ff:17:33:de:0e:6c:87:8e:7d:fd: b8:be:e0:75:43:d3:12:9b:43:68:2d:82:23:06:db:8d:37:d7: 1b:eb:64:0d:55:19:5b:02:86:87:20:af:35:dc:df:76:f2:3e: 45:cc:93:e0:d9:15:78:48:9f:1d:94:a7:7f:53:c1:e1:d2:96: 2a:a2:a2:8b:53:14:5c:30:21:dc:56:51:73:99:76:1d:28:ce: e8:cc:dc:e8:5b:d9:4c:17:cd:de:f2:ea:b2:24:a6:af:0a:a7: f7:38:4b:7e:0f:4c:d3:88:32:26:16:7d:fd:49:94:2a:96:68: 8b:a6:ea:ae:d9:11:49:a5:34:29:be:11:95:37:16:9a:be:b7: 8a:0e:ef:17:38:98:e5:8a:c4:a1:65:34:8f:e4:6f:37:84:ec: cd:a0:c7:8f:94:17:ac:3c:f9:b8:6c:2f:b1:e4:63:ec:1e:9d: 5e:ce:82:cb -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt7NZXiyZxlR1UG3hosXdDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjc0ZTVhZjJmYTcyMTVjYTQ2OWIyN2MxMDc5ZjFmZmQ1ZmNhZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqtH9sMJu2np1VVVVzimVR9Ca5po IYTpcnmi84DGK+vij7a5+INDWcJel9IkCnG0R0Tu+reZCYoUPSNQgykPBzLnLUEw 0/4TlFc78qVeXMbE4R1Q+6RrJ1G5oxDDAVrSEl+Xy40yZUKbOKR3Hb5F7fCrOeaQ XKVPjjG110AHLjAwnywquxX3GMO1RT3r8j9Fsr8HFHUYBLXg45tq3GsUch/GFqf2 KxwLEiMYQcJXR02jluelZPmEdzd+B6oKx2EK8rqbILgg/X/bcD4eP27Y4vyAM1H9 QCbrQg6lvaLKoiCEqf5v0lzAG7fETBKKA9l7q4njT8okCFysL7G1GZc0BwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFA905a8vpyFcpGmyfBB58f/V/K74MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzQ5YWNl OC0yOTFkLTRkNGYtOTIyZS1lYWJjYmMwODNmOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvNDlhY2U4 LTI5MWQtNGQ0Zi05MjJlLWVhYmNiYzA4M2Y5Yi8xL0QzVGxyeS1uSVZ5a2FiSjhF SG54XzlYOHJ2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQBW8/AAwQDxtnwMA8EAgACMAkDBwAgAQZ8Etww GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICPngwDQYJKoZIhvcNAQELBQADggEBAJhg tjEOJZ+Ur0MB1krdXR97UV5zrsbMCqYptRASbpZUly5U9+2aLK0yxiZr/izI5Hv1 kZUXL7VE6IMK9o5cLXjnz+fVVMgFhsiLUREMlYbC/xcz3g5sh459/bi+4HVD0xKb Q2gtgiMG24031xvrZA1VGVsChocgrzXc33byPkXMk+DZFXhInx2Up39TweHSliqi ootTFFwwIdxWUXOZdh0ozujM3Ohb2UwXzd7y6rIkpq8Kp/c4S34PTNOIMiYWff1J lCqWaIum6q7ZEUmlNCm+EZU3Fpq+t4oO7xc4mOWKxKFlNI/kbzeE7M2gx4+UF6w8 +bhsL7HkY+wenV7Ogss= -----END CERTIFICATE-----Generated at Mon Jan 26 09:56:49 2026 by rpki-client