This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer File: DA96BN1ySaXRS33gVCpBlzgABsw.cer (raw, json) Hash identifier: FA03PWXZxvDqTvb1pNw2w4zMFcn33A7GI3GJlg3Zktk= Subject key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EC0E42A0464EF3318D1CFCE55B170 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21277 IP: 93.91.192.0/20 IP: 95.170.192.0/19 IP: 109.127.64.0/18 IP: 130.193.128.0/17 IP: 2a04:a040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c0:e4:2a:04:64:ef:33:18:d1:cf:ce:55:b1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:04:d9:1d:56:d6:26:28:80:ee:a3:03:94: 81:e6:e1:10:ad:91:c1:7d:22:cc:bb:6b:bc:58:5a: 59:d4:49:80:47:ef:c6:37:83:8a:64:59:3e:5f:11: 20:20:0c:2d:23:02:dd:8c:5a:c0:75:a3:e6:78:a2: fe:c3:29:31:39:5f:92:05:42:35:74:81:3f:75:62: 14:36:a7:eb:3e:22:0a:d3:f4:bd:48:b1:2c:e4:ff: cd:16:04:eb:72:66:b8:05:04:64:d9:0f:0e:28:fb: 57:0c:33:d5:90:0b:35:c6:81:7f:0c:71:cb:a6:10: de:25:aa:38:49:2f:81:ab:94:e1:d0:79:dc:40:73: 55:45:5a:51:52:86:6b:f4:f4:c3:c6:20:7b:cd:bc: a4:9a:dc:74:86:4d:5b:26:dc:bd:6a:7f:8d:b4:27: c6:73:63:e0:eb:58:dc:97:a6:4b:4d:2e:b9:ce:e3: 45:84:41:78:71:d7:5d:2d:db:ff:38:7d:dc:aa:24: a4:9e:88:c3:ab:fe:f9:d1:26:d7:06:2d:40:40:5e: e7:63:2e:e0:97:c0:bb:06:9b:82:bc:e2:3c:b4:b3: 1b:58:b0:6e:fa:d0:77:fb:36:18:45:0c:16:61:46: e1:1a:6d:f5:1a:53:12:b1:df:c8:f0:58:d4:5c:9d: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.91.192.0/20 95.170.192.0/19 109.127.64.0/18 130.193.128.0/17 IPv6: 2a04:a040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21277 Signature Algorithm: sha256WithRSAEncryption 6b:64:58:0b:37:72:71:ac:17:2a:8e:ca:bf:fd:05:8f:8d:27: d6:6c:72:f9:4b:6b:fc:71:1a:13:08:c9:d5:8a:3a:bb:9f:84: 09:8f:d9:f3:99:b6:a0:e7:a8:b0:01:9a:42:0e:e2:f5:ba:f3: 59:ed:98:af:d3:f8:8c:95:14:af:2f:c4:53:7d:f8:b8:a7:53: a6:d6:03:31:9b:20:4f:31:93:19:5a:7a:64:b8:f5:9a:32:d3: 95:8e:ce:bb:eb:82:5f:d6:ae:ab:ce:c7:fe:29:b8:10:5e:c9: 7a:72:a2:a8:aa:cf:98:6c:93:1d:db:32:f2:4e:51:b3:48:3e: 5d:46:48:28:2d:0b:84:df:fd:8f:2b:a3:e1:90:fb:a6:45:aa: 3f:ed:73:3a:fa:32:50:d3:18:21:4f:a7:12:3f:d6:b8:8a:69: 41:44:29:9f:cb:e4:71:c7:72:ec:23:13:ed:9d:a0:c7:4d:ed: 61:dd:2b:59:e5:db:fa:14:d3:77:fe:ae:56:af:e5:0a:8b:ac: 90:3c:72:b5:69:32:ec:ef:79:30:2b:24:5c:ae:c1:6b:fd:bb: f0:e6:45:be:03:b7:a8:33:eb:1b:c7:f9:dc:28:a6:7d:cc:6f: e0:a3:d5:fb:90:85:77:ca:44:9e:57:cd:5e:b9:b0:f9:a3:ad: 33:23:a3:b3 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt5fsDkKgRk7zMY0c/OVbFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzBmN2EwNGRkNzI0OWE1ZDE0YjdkZTA1NDJhNDE5NzM4MDAwNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC8E2R1W1iYogO6jA5SB5uEQrZHB fSLMu2u8WFpZ1EmAR+/GN4OKZFk+XxEgIAwtIwLdjFrAdaPmeKL+wykxOV+SBUI1 dIE/dWIUNqfrPiIK0/S9SLEs5P/NFgTrcma4BQRk2Q8OKPtXDDPVkAs1xoF/DHHL phDeJao4SS+Bq5Th0HncQHNVRVpRUoZr9PTDxiB7zbykmtx0hk1bJty9an+NtCfG c2Pg61jcl6ZLTS65zuNFhEF4cdddLdv/OH3cqiSknojDq/750SbXBi1AQF7nYy7g l8C7BpuCvOI8tLMbWLBu+tB3+zYYRQwWYUbhGm31GlMSsd/I8FjUXJ1bSQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFAwPegTdckml0Ut94FQqQZc4AAbMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzExZGIx NC1lODQ1LTRlNGYtYTY5Mi1hM2NiZWZmZjc3NzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvMTFkYjE0 LWU4NDUtNGU0Zi1hNjkyLWEzY2JlZmZmNzc3Ny8xL0RBOTZCTjF5U2FYUlMzM2dW Q3BCbHpnQUJzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEXVvAAwQFX6rAAwQGbX9AAwQHgsGAMA0EAgAC MAcDBQMqBKBAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlMdMA0GCSqGSIb3DQEB CwUAA4IBAQBrZFgLN3JxrBcqjsq//QWPjSfWbHL5S2v8cRoTCMnVijq7n4QJj9nz mbag56iwAZpCDuL1uvNZ7Ziv0/iMlRSvL8RTffi4p1Om1gMxmyBPMZMZWnpkuPWa MtOVjs6764Jf1q6rzsf+KbgQXsl6cqKoqs+YbJMd2zLyTlGzSD5dRkgoLQuE3/2P K6PhkPumRao/7XM6+jJQ0xghT6cSP9a4imlBRCmfy+Rxx3LsIxPtnaDHTe1h3StZ 5dv6FNN3/q5Wr+UKi6yQPHK1aTLs73kwKyRcrsFr/bvw5kW+A7eoM+sbx/ncKKZ9 zG/go9X7kIV3ykSeV81eubD5o60zI6Oz -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:12 2026 by rpki-client