This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer File: DFFAKCWR-ZEvljnuFBK20dz_CGE.cer (raw, json) Hash identifier: C81lPfjnpUzs+wEbIgH3FD8x1kYQjiT/qM3AfM1hKKM= Subject key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F136EFF1868F5EC95F5BC44B2CCF2E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200178 AS: 210016 AS: 211970 IP: 185.72.252.0/22 IP: 185.234.245.0/24 IP: 188.72.0.0 -- 188.72.11.255 IP: 188.72.13.0 -- 188.72.14.255 IP: 188.72.20.0/24 IP: 188.72.23.0 -- 188.72.29.255 IP: 188.72.32.0 -- 188.72.41.255 IP: 188.72.44.0 -- 188.72.63.255 IP: 2a10:e880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:6e:ff:18:68:f5:ec:95:f5:bc:44:b2:cc:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c5140282591f9912f9639ee1412b6d1dcff0861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4c:b0:2b:0b:ab:a6:e8:b6:bd:e8:97:52:73: d2:89:1b:b4:fd:f0:0c:ae:10:14:49:d9:b1:e5:c6: 75:9d:6f:53:c4:5d:2e:1a:59:81:f2:dd:29:b1:60: e6:ed:8d:01:58:fa:ce:09:f1:df:77:de:a4:c4:62: 4a:0a:31:c9:d6:86:61:a1:c2:ed:23:82:c3:66:d5: 37:a7:a4:f3:69:b2:f0:c4:ff:4a:a5:78:3b:b0:89: 03:71:3d:7b:27:48:93:b7:85:62:b2:b3:8a:00:e5: 50:fc:4f:9d:e0:c4:f4:1b:f2:87:c6:49:14:f2:3f: 05:43:1d:73:05:8b:49:b1:a7:31:b4:ad:f9:45:bc: 03:be:21:78:da:aa:7e:05:c7:ff:c7:31:cc:be:9f: f5:c7:89:00:1e:bf:d0:bb:5d:76:bc:79:5d:58:f2: 71:39:c0:2a:89:1c:29:b3:ae:e6:fc:77:44:08:3c: 10:fb:3f:90:da:b5:da:8f:9a:a7:60:54:63:be:da: 26:0e:37:6e:47:4b:2d:07:7c:70:d5:e5:2e:29:f2: c2:f8:7e:59:b0:ae:bf:d0:0b:d8:bf:2d:2a:0e:4b: 0b:da:cd:07:1f:a1:06:e9:38:c7:fb:13:2d:af:a5: de:86:3a:b3:6f:70:bb:c9:87:f9:5e:6b:0c:ef:45: aa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.252.0/22 185.234.245.0/24 188.72.0.0-188.72.11.255 188.72.13.0-188.72.14.255 188.72.20.0/24 188.72.23.0-188.72.29.255 188.72.32.0-188.72.41.255 188.72.44.0-188.72.63.255 IPv6: 2a10:e880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200178 210016 211970 Signature Algorithm: sha256WithRSAEncryption 40:77:33:2c:76:ed:cc:af:c5:c2:bb:81:82:b0:f6:c7:bf:ec: 8d:ad:f2:a4:b5:a1:ad:20:ba:22:62:27:22:af:ee:d9:04:24: 81:7f:6e:26:bf:a1:fc:89:cf:17:56:59:f2:c1:43:82:04:df: a0:c5:c8:a2:7f:ea:8a:b0:2e:90:00:59:79:24:be:02:e3:df: af:4f:d9:b2:4d:c4:ee:52:ea:ec:eb:63:2a:d0:30:01:12:69: f3:39:2b:6b:ed:86:96:e0:0a:31:2d:3c:66:24:7a:02:cd:3e: 5d:46:c5:c8:19:7d:a1:b5:92:5c:fe:d7:f2:e2:85:3b:66:91: ec:26:1d:ac:98:6a:45:f9:e2:03:cf:8e:12:38:cc:20:57:51: b3:d9:8b:a6:66:53:87:ea:f9:30:4a:96:e7:f5:6d:5c:cd:12: 6b:eb:04:b6:07:f3:ae:ed:33:a6:f9:dc:34:40:a3:9d:36:14: b6:cb:86:0f:78:df:c6:b4:d6:b7:d9:b4:d1:db:bb:b9:66:09: cc:5f:de:ad:2d:c7:90:c0:29:fa:b4:dc:16:91:80:e2:c2:b4: d4:3e:68:d8:06:bc:b0:36:cb:d5:7d:84:cb:35:47:7c:13:c1: 98:dd:ed:c3:55:66:2d:a9:2f:1e:e0:f9:88:97:43:70:a7:82: c0:4e:fe:64 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISAZt/E27/GGj17JX1vESyzPLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzUxNDAyODI1OTFmOTkxMmY5NjM5ZWUxNDEyYjZkMWRjZmYwODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EywKwurpui2veiXUnPSiRu0/fAM rhAUSdmx5cZ1nW9TxF0uGlmB8t0psWDm7Y0BWPrOCfHfd96kxGJKCjHJ1oZhocLt I4LDZtU3p6TzabLwxP9KpXg7sIkDcT17J0iTt4VisrOKAOVQ/E+d4MT0G/KHxkkU 8j8FQx1zBYtJsacxtK35RbwDviF42qp+Bcf/xzHMvp/1x4kAHr/Qu112vHldWPJx OcAqiRwps67m/HdECDwQ+z+Q2rXaj5qnYFRjvtomDjduR0stB3xw1eUuKfLC+H5Z sK6/0AvYvy0qDksL2s0HH6EG6TjH+xMtr6Xehjqzb3C7yYf5XmsM70WqiwIDAQAB o4IDCjCCAwYwHQYDVR0OBBYEFAxRQCglkfmRL5Y57hQSttHc/whhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzA1NTRh Mi1kM2Q5LTRmYzQtOGVkNS1kZTkxNDY5ZDM3NzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvMDU1NGEy LWQzZDktNGZjNC04ZWQ1LWRlOTE0NjlkMzc3Mi8xL0RGRkFLQ1dSLVpFdmxqbnVG QksyMGR6X0NHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUF BwEHAQH/BHAwbjBdBAIAATBXAwQCuUj8AwQAuer1MAsDAwO8SAMEArxICDAMAwQA vEgNAwQAvEgOAwQAvEgUMAwDBAC8SBcDBAG8SBwwDAMEBbxIIAMEAbxIKDAMAwQC vEgsAwQGvEgAMA0EAgACMAcDBQMqEOiAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8C AwMN8gIDAzRgAgMDPAIwDQYJKoZIhvcNAQELBQADggEBAEB3Myx27cyvxcK7gYKw 9se/7I2t8qS1oa0guiJiJyKv7tkEJIF/bia/ofyJzxdWWfLBQ4IE36DFyKJ/6oqw LpAAWXkkvgLj369P2bJNxO5S6uzrYyrQMAESafM5K2vthpbgCjEtPGYkegLNPl1G xcgZfaG1klz+1/LihTtmkewmHayYakX54gPPjhI4zCBXUbPZi6ZmU4fq+TBKluf1 bVzNEmvrBLYH867tM6b53DRAo502FLbLhg9438a01rfZtNHbu7lmCcxf3q0tx5DA Kfq03BaRgOLCtNQ+aNgGvLA2y9V9hMs1R3wTwZjd7cNVZi2pLx7g+YiXQ3CngsBO /mQ= -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:00 2026 by rpki-client