This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer (raw, json) Hash identifier: K/1D2c3xyrJrlJpx6nt3gJC6uPTS5aqlbjrf3VAnE3I= Subject key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED41429B239562D207FFEAB6D757C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51044 IP: 45.148.172.0/22 IP: 2a0f:600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:41:42:9b:23:95:62:d2:07:ff:ea:b6:d7:57:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:85:f1:ee:7f:33:82:d1:ed:0d:2d:d4:51: 21:ce:6d:77:99:48:76:5a:d4:40:1a:53:59:c3:3e: 3b:af:af:11:d7:8a:a4:c4:c4:5d:1f:d0:a3:76:cd: 8b:b8:12:90:47:b6:d4:e1:00:62:c1:18:14:25:ab: eb:06:9a:e4:a1:04:02:93:b5:dc:7d:ad:ab:a6:f2: c8:24:a5:37:f0:cb:77:c5:d9:99:b4:e9:ed:fc:30: 88:65:92:6e:7a:2d:36:da:db:0d:8e:c8:b0:cc:fc: a0:2b:ac:19:1d:22:8f:5d:1b:74:2e:7d:f1:b6:9e: 2d:74:ef:d5:7b:1a:1a:5b:c2:11:e0:b7:e1:52:d5: 8d:8c:2f:95:08:a6:6d:69:a6:5f:54:41:12:3c:70: f3:31:6c:d6:1e:8b:2f:78:53:0d:94:50:9b:90:25: 7f:a0:fb:aa:04:26:2a:39:d4:87:cd:b8:3e:4e:00: 18:72:8b:d7:56:9e:37:ed:ae:a2:8f:6d:fc:94:b4: 70:43:25:67:c2:29:68:e8:5c:48:2b:6c:4e:ef:7d: f0:e5:1d:d6:25:7f:c7:15:19:30:8c:d7:f2:0b:88: ca:f3:28:fc:7c:64:f3:52:34:5a:0c:51:04:3d:2e: f6:b1:87:48:af:ce:a4:db:da:5f:0d:60:8a:3f:4a: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.172.0/22 IPv6: 2a0f:600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51044 Signature Algorithm: sha256WithRSAEncryption 40:0c:cc:b8:fc:f5:1b:21:60:bb:89:c3:28:8b:31:97:f2:c0: 35:82:95:f9:c0:b3:7f:9e:0d:cb:f0:75:59:a8:1e:5c:d7:1e: 04:88:41:41:87:aa:e7:31:f1:14:b9:25:35:be:28:83:50:d1: ba:f7:0c:11:ba:b2:db:d3:48:dc:aa:c5:2c:08:91:64:2c:ee: 08:4a:b8:4a:85:c3:5a:b4:75:81:11:07:85:08:9e:38:36:5d: c2:45:de:39:76:73:4f:c3:b3:53:9f:43:70:04:ea:16:1a:df: 70:1f:79:53:10:b1:8c:55:54:05:d5:a2:6c:a7:02:7f:d4:78: ef:38:13:16:5d:70:be:88:ae:b8:10:8a:44:1d:32:37:48:5d: 1e:aa:5f:37:50:46:09:94:2a:4e:cc:19:5f:0e:15:32:8e:c3: 35:23:ea:54:df:f0:62:7b:f0:6e:76:a9:14:1c:0c:0f:eb:dd: 47:7c:ce:d2:50:8a:e5:22:b7:a2:ad:b8:23:40:5d:f6:13:65: f8:9f:e4:a2:81:52:77:2d:ba:21:e6:48:b3:a2:f7:3d:81:d4: 63:5e:a7:33:de:45:4c:49:40:c2:67:a3:f3:c8:a6:e7:9b:a9: 7c:16:18:28:6d:51:3c:8c:97:9b:02:f1:b1:24:ed:f9:38:ac: da:28:89:2d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57UFCmyOVYtIH/+q211fBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzIxYjkyNWI0YzRiY2MzMGY3N2M5YzQxYmE4ZDA0MGFjOTVkZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUKF8e5/M4LR7Q0t1FEhzm13mUh2 WtRAGlNZwz47r68R14qkxMRdH9Cjds2LuBKQR7bU4QBiwRgUJavrBprkoQQCk7Xc fa2rpvLIJKU38Mt3xdmZtOnt/DCIZZJuei022tsNjsiwzPygK6wZHSKPXRt0Ln3x tp4tdO/VexoaW8IR4LfhUtWNjC+VCKZtaaZfVEESPHDzMWzWHosveFMNlFCbkCV/ oPuqBCYqOdSHzbg+TgAYcovXVp437a6ij238lLRwQyVnwilo6FxIK2xO733w5R3W JX/HFRkwjNfyC4jK8yj8fGTzUjRaDFEEPS72sYdIr86k29pfDWCKP0pO/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAwhuSW0xLzDD3fJxBuo0ECsld/GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2MwYmQ2 Ny1mN2RkLTRjZTItYWI3ZS1hMzQ3NTY0MTU4ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvYzBiZDY3 LWY3ZGQtNGNlMi1hYjdlLWEzNDc1NjQxNThmOC8xL0RDRzVKYlRFdk1NUGQ4bkVH NmpRUUt5VjM4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZSsMA0EAgACMAcDBQMqDwYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDHZDANBgkqhkiG9w0BAQsFAAOCAQEAQAzMuPz1GyFg u4nDKIsxl/LANYKV+cCzf54Ny/B1WageXNceBIhBQYeq5zHxFLklNb4og1DRuvcM Ebqy29NI3KrFLAiRZCzuCEq4SoXDWrR1gREHhQieODZdwkXeOXZzT8OzU59DcATq FhrfcB95UxCxjFVUBdWibKcCf9R47zgTFl1wvoiuuBCKRB0yN0hdHqpfN1BGCZQq TswZXw4VMo7DNSPqVN/wYnvwbnapFBwMD+vdR3zO0lCK5SK3oq24I0Bd9hNl+J/k ooFSdy26IeZIs6L3PYHUY16nM95FTElAwmej88im55upfBYYKG1RPIyXmwLxsSTt +Tis2iiJLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:50 2026 by rpki-client