This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer File: DAN90it6q-KCIlr7JWuNncvro1M.cer (raw, json) Hash identifier: PmVogOg5F1jFZU4XgWbHPg8dMTRBsurnSexN8iw4nMM= Subject key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E384D7E815EF897ACD93328FBB75656 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50023 IP: 79.140.196.0/22 IP: 85.204.48.0/22 IP: 109.68.8.0/21 IP: 185.14.212.0/22 IP: 185.137.64.0/22 IP: 2a00:9580::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4d:7e:81:5e:f8:97:ac:d9:33:28:fb:b7:56:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:64:ce:c7:86:af:dd:13:cb:45:a9:77:cf: b6:b0:de:0b:7e:08:31:9d:87:d8:64:d7:47:2a:9d: c7:81:4d:9f:29:fc:d4:34:4f:fb:5b:67:06:95:9c: 5f:3b:3f:ec:b3:2f:a9:d3:bd:81:c8:82:2d:16:6b: a5:a0:56:8a:e8:a4:eb:86:66:9c:65:98:6c:c0:61: 58:22:d1:29:19:25:55:f9:2f:28:a7:82:63:3e:43: b9:5c:62:07:85:93:cc:35:26:d6:7a:a6:89:d9:77: 8f:bb:7b:c9:d9:a0:d4:0a:41:b4:26:80:a6:a5:93: ca:d1:23:ac:24:b8:b4:1e:a0:e1:f7:58:cf:65:65: 93:0b:ab:20:1e:f6:54:bf:8d:19:38:14:ed:0b:31: cc:84:2c:bf:00:81:51:09:0a:b4:c0:03:c1:91:1c: a6:82:c1:a1:b4:02:da:d7:7b:0d:3b:bd:49:0b:21: 77:2a:ac:77:79:95:ed:5c:6b:67:1f:67:96:aa:6e: a2:f3:ae:ac:74:ef:36:54:d5:72:3e:cb:0b:17:1a: da:f4:b2:b0:98:42:a7:92:c8:e8:ff:92:02:ca:79: a4:87:bb:38:a3:98:83:1b:5b:2a:33:2f:a1:20:4e: 53:c4:e3:0d:e8:53:b1:c2:0c:3b:56:1c:61:df:33: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.140.196.0/22 85.204.48.0/22 109.68.8.0/21 185.14.212.0/22 185.137.64.0/22 IPv6: 2a00:9580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50023 Signature Algorithm: sha256WithRSAEncryption 36:e3:d1:5c:b0:3c:b4:29:7e:9a:7f:c6:fe:50:56:62:94:70: ef:66:f0:58:8a:2f:a7:94:ef:a3:b0:28:c5:de:0a:c9:03:b0: c6:8d:f4:cf:12:97:b9:f7:47:c4:e0:1d:ca:a9:8c:68:3a:46: ab:86:bc:0e:cb:34:d7:85:d7:9d:8a:d8:6c:6e:91:dd:df:1d: 78:be:50:d0:6f:0d:c0:74:4e:9f:09:17:45:92:ff:ed:ef:1f: 46:91:8f:6b:17:6a:fd:a6:91:8f:46:ac:0b:b2:88:97:e9:e0: 03:7a:d0:09:4b:f6:44:09:88:07:ff:75:5e:94:40:ef:6b:a2: 06:e6:ea:b8:c7:6a:50:ff:08:0f:c3:7d:90:2e:ee:ae:3c:1a: 06:14:7c:8e:5f:40:39:c7:87:5e:71:98:ed:32:13:9b:43:5a: 99:56:d1:cd:14:d4:56:fb:bd:12:e5:58:96:ed:22:f2:b4:af: 0d:7a:82:2e:b4:3c:5f:e2:3f:40:ef:ad:e7:a0:ac:6a:62:4e: 24:55:c9:19:d3:c9:e0:4d:1f:65:57:9c:c0:c0:1d:c4:10:f5: f8:68:36:27:fd:49:f3:29:76:61:f1:0e:5a:54:12:e0:6d:98: 73:5c:be:fa:72:f1:e0:2d:de:fb:98:04:99:dd:04:b4:de:2d: 2d:32:03:9e -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt+OE1+gV74l6zZMyj7t1ZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzAzN2RkMjJiN2FhYmUyODIyMjVhZmIyNTZiOGQ5ZGNiZWJhMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdtkzseGr90Ty0Wpd8+2sN4Lfggx nYfYZNdHKp3HgU2fKfzUNE/7W2cGlZxfOz/ssy+p072ByIItFmuloFaK6KTrhmac ZZhswGFYItEpGSVV+S8op4JjPkO5XGIHhZPMNSbWeqaJ2XePu3vJ2aDUCkG0JoCm pZPK0SOsJLi0HqDh91jPZWWTC6sgHvZUv40ZOBTtCzHMhCy/AIFRCQq0wAPBkRym gsGhtALa13sNO71JCyF3Kqx3eZXtXGtnH2eWqm6i866sdO82VNVyPssLFxra9LKw mEKnksjo/5ICynmkh7s4o5iDG1sqMy+hIE5TxOMN6FOxwgw7Vhxh3zPjQwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFAwDfdIreqvigiJa+yVrjZ3L66NTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2RhODFj Yi0xOTcyLTRjOWItOWRhYi1lOGYzYTY2ZWY1NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZGE4MWNi LTE5NzItNGM5Yi05ZGFiLWU4ZjNhNjZlZjU1OC8xL0RBTjkwaXQ2cS1LQ0lscjdK V3VObmN2cm8xTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCT4zEAwQCVcwwAwQDbUQIAwQCuQ7UAwQCuYlA MA0EAgACMAcDBQAqAJWAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDDZzANBgkq hkiG9w0BAQsFAAOCAQEANuPRXLA8tCl+mn/G/lBWYpRw72bwWIovp5Tvo7Aoxd4K yQOwxo30zxKXufdHxOAdyqmMaDpGq4a8Dss014XXnYrYbG6R3d8deL5Q0G8NwHRO nwkXRZL/7e8fRpGPaxdq/aaRj0asC7KIl+ngA3rQCUv2RAmIB/91XpRA72uiBubq uMdqUP8ID8N9kC7urjwaBhR8jl9AOceHXnGY7TITm0NamVbRzRTUVvu9EuVYlu0i 8rSvDXqCLrQ8X+I/QO+t56CsamJOJFXJGdPJ4E0fZVecwMAdxBD1+Gg2J/1J8yl2 YfEOWlQS4G2Yc1y++nLx4C3e+5gEmd0EtN4tLTIDng== -----END CERTIFICATE-----Generated at Mon Jan 26 07:21:11 2026 by rpki-client