This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer File: DAN90it6q-KCIlr7JWuNncvro1M.cer (raw, json) Hash identifier: 8yDa/fi7Eppyc+9L71V6Dlgf12NkkPrZ1ymaZAO1Bpg= Subject key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A5D35517EBCB4359E9497D4006C3DACB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 07 Nov 2025 07:26:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 50023 IP: 79.140.196.0/22 IP: 85.204.48.0/22 IP: 109.68.8.0/21 IP: 185.14.212.0/22 IP: 185.137.64.0/22 IP: 2a00:9580::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:35:51:7e:bc:b4:35:9e:94:97:d4:00:6c:3d:ac:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 7 07:26:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:64:ce:c7:86:af:dd:13:cb:45:a9:77:cf: b6:b0:de:0b:7e:08:31:9d:87:d8:64:d7:47:2a:9d: c7:81:4d:9f:29:fc:d4:34:4f:fb:5b:67:06:95:9c: 5f:3b:3f:ec:b3:2f:a9:d3:bd:81:c8:82:2d:16:6b: a5:a0:56:8a:e8:a4:eb:86:66:9c:65:98:6c:c0:61: 58:22:d1:29:19:25:55:f9:2f:28:a7:82:63:3e:43: b9:5c:62:07:85:93:cc:35:26:d6:7a:a6:89:d9:77: 8f:bb:7b:c9:d9:a0:d4:0a:41:b4:26:80:a6:a5:93: ca:d1:23:ac:24:b8:b4:1e:a0:e1:f7:58:cf:65:65: 93:0b:ab:20:1e:f6:54:bf:8d:19:38:14:ed:0b:31: cc:84:2c:bf:00:81:51:09:0a:b4:c0:03:c1:91:1c: a6:82:c1:a1:b4:02:da:d7:7b:0d:3b:bd:49:0b:21: 77:2a:ac:77:79:95:ed:5c:6b:67:1f:67:96:aa:6e: a2:f3:ae:ac:74:ef:36:54:d5:72:3e:cb:0b:17:1a: da:f4:b2:b0:98:42:a7:92:c8:e8:ff:92:02:ca:79: a4:87:bb:38:a3:98:83:1b:5b:2a:33:2f:a1:20:4e: 53:c4:e3:0d:e8:53:b1:c2:0c:3b:56:1c:61:df:33: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.140.196.0/22 85.204.48.0/22 109.68.8.0/21 185.14.212.0/22 185.137.64.0/22 IPv6: 2a00:9580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50023 Signature Algorithm: sha256WithRSAEncryption 18:7b:91:50:8d:a5:e9:4c:28:7f:e9:5f:43:d7:b7:3a:1c:3f: ea:ac:94:6a:ad:13:62:37:eb:1a:e4:e6:62:44:70:3d:a4:a5: 05:7a:e3:02:5b:8e:83:ba:63:a3:7a:ea:2b:c4:e5:dd:59:8f: b2:00:9c:31:2c:b1:8c:f2:94:09:45:f9:5d:74:9f:94:53:ee: 64:8d:5a:c0:69:10:91:df:81:bd:e5:43:93:cf:92:7a:13:24: 04:13:07:8c:63:05:ef:da:b2:20:dc:68:db:81:14:5b:18:e8: 90:5b:93:dd:02:76:fc:2e:8e:d8:b7:a8:7a:4a:f8:ab:8e:76: 38:99:2d:26:63:35:15:49:9f:17:16:aa:4c:9a:4e:8f:21:d0: e4:6f:19:85:78:b3:5d:b7:4a:bd:29:d3:31:4f:08:96:3a:59: 6a:52:75:3c:29:ff:c2:02:eb:a0:ec:ea:20:06:69:49:a6:1c: 7a:f9:7b:64:b7:49:90:37:28:aa:c8:a6:b8:c2:71:05:a0:27: 5e:5f:7d:ee:df:33:20:b2:81:7a:99:82:7c:84:e3:1d:ea:cc: 54:b3:27:23:a0:f1:4a:cf:6a:7f:fc:47:a0:cd:98:3f:2d:59: c9:5e:fa:07:6b:94:51:87:9b:e5:9e:c0:9d:06:9d:fe:2d:ec: df:a3:26:2a -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZpdNVF+vLQ1npSX1ABsPayyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA3MDcyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzAzN2RkMjJiN2FhYmUyODIyMjVhZmIyNTZiOGQ5ZGNiZWJhMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdtkzseGr90Ty0Wpd8+2sN4Lfggx nYfYZNdHKp3HgU2fKfzUNE/7W2cGlZxfOz/ssy+p072ByIItFmuloFaK6KTrhmac ZZhswGFYItEpGSVV+S8op4JjPkO5XGIHhZPMNSbWeqaJ2XePu3vJ2aDUCkG0JoCm pZPK0SOsJLi0HqDh91jPZWWTC6sgHvZUv40ZOBTtCzHMhCy/AIFRCQq0wAPBkRym gsGhtALa13sNO71JCyF3Kqx3eZXtXGtnH2eWqm6i866sdO82VNVyPssLFxra9LKw mEKnksjo/5ICynmkh7s4o5iDG1sqMy+hIE5TxOMN6FOxwgw7Vhxh3zPjQwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFAwDfdIreqvigiJa+yVrjZ3L66NTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2RhODFj Yi0xOTcyLTRjOWItOWRhYi1lOGYzYTY2ZWY1NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZGE4MWNi LTE5NzItNGM5Yi05ZGFiLWU4ZjNhNjZlZjU1OC8xL0RBTjkwaXQ2cS1LQ0lscjdK V3VObmN2cm8xTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCT4zEAwQCVcwwAwQDbUQIAwQCuQ7UAwQCuYlA MA0EAgACMAcDBQAqAJWAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDDZzANBgkq hkiG9w0BAQsFAAOCAQEAGHuRUI2l6Uwof+lfQ9e3Ohw/6qyUaq0TYjfrGuTmYkRw PaSlBXrjAluOg7pjo3rqK8Tl3VmPsgCcMSyxjPKUCUX5XXSflFPuZI1awGkQkd+B veVDk8+SehMkBBMHjGMF79qyINxo24EUWxjokFuT3QJ2/C6O2Leoekr4q452OJkt JmM1FUmfFxaqTJpOjyHQ5G8ZhXizXbdKvSnTMU8IljpZalJ1PCn/wgLroOzqIAZp SaYcevl7ZLdJkDcoqsimuMJxBaAnXl997t8zILKBepmCfITjHerMVLMnI6DxSs9q f/xHoM2YPy1ZyV76B2uUUYeb5Z7AnQad/i3s36MmKg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:08:39 2025 by rpki-client