This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer File: DFfLOh5T52Ke47nyZy1Fce-F0sg.cer (raw, json) Hash identifier: kLAShQCcqXVbDBhseHJObG+bJX756kvzH6WmXzPbC4Q= Subject key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF257F4D23002F1DACB6B36CE0136FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48137 IP: 94.126.48.0/21 IP: 2a02:f00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:57:f4:d2:30:02:f1:da:cb:6b:36:ce:01:36:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:8d:91:84:c1:81:ab:a1:d3:8b:0f:eb:50: f8:f2:57:27:80:de:20:5d:0f:55:4c:f6:33:1c:89: 91:80:3c:47:0b:f5:1d:85:cb:ec:de:bf:46:29:0b: cd:43:8f:40:7e:b4:ea:b8:c8:7e:ee:b6:76:86:fa: 3b:b2:48:2a:36:94:04:63:11:f1:93:57:6f:6b:a3: 1f:3d:63:b1:4c:69:e8:98:69:6f:46:e9:24:22:06: 58:41:56:b9:60:2f:a7:78:59:39:b3:80:70:84:31: 0f:7f:1a:6c:8d:38:59:ce:f4:36:7b:54:59:cc:60: d1:0f:de:46:f1:ff:ef:0c:43:87:c8:fb:50:cd:71: be:45:81:95:a8:5d:12:cf:7e:cd:d6:38:d9:0e:94: 95:d8:91:7d:ae:c2:a1:1b:1c:77:a1:46:79:ef:2d: e9:30:93:08:0a:22:72:4a:de:44:a9:76:fa:21:5f: 1f:c9:45:7b:5b:b1:2c:e7:27:92:a2:07:9a:d2:57: 34:71:cf:53:26:a0:91:5f:15:39:96:61:68:c0:52: 2a:72:5f:c7:5e:e4:f9:31:e8:50:9d:55:97:35:81: d9:50:20:8c:db:84:05:63:6c:bf:b7:9e:a2:13:6d: 53:a0:90:26:79:1b:ea:70:06:38:31:c5:0b:26:f1: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.126.48.0/21 IPv6: 2a02:f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48137 Signature Algorithm: sha256WithRSAEncryption 04:98:71:c5:bf:e0:f5:e5:1e:6e:e6:9c:27:17:4d:be:80:d7: fb:8e:ec:72:94:81:c2:c9:c4:7c:a6:d6:bb:d0:64:36:6f:d7: 98:3a:0d:18:6f:65:a3:9a:80:ca:5d:19:b3:35:a5:6e:00:f5: c9:54:33:0d:e5:01:fc:c6:f1:f8:05:3c:22:0d:bf:c4:e2:b0: 90:2e:b8:37:e2:45:9a:e0:d3:13:23:60:34:33:2b:31:7f:7d: ae:ac:25:67:b9:3a:1e:32:be:95:aa:09:aa:0c:39:35:ed:56: 34:e6:a4:5d:b3:11:3c:ae:36:41:83:9d:3f:ff:03:65:9a:b6: ef:0d:7f:3f:91:72:f1:59:cb:ea:d1:16:01:85:a9:eb:f3:22: d8:0e:b0:50:c9:5b:f5:57:35:5a:f5:48:09:4c:fd:fc:e6:36: 0d:ed:a6:51:50:5e:cd:72:3c:03:61:92:dd:38:22:2f:18:0e: d2:a4:2c:73:73:08:64:34:b4:fd:2f:6b:4a:87:a0:b8:f1:41: fc:bf:9e:81:e1:c5:08:dd:5c:9f:44:4a:3e:1e:5b:c0:07:97: 8e:a8:5d:4c:58:1e:18:fc:a2:9f:fb:b0:96:5b:2d:31:9d:8a: 58:99:94:89:ce:ee:df:05:3b:4e:ba:10:2f:14:10:03:09:e7: 1b:f2:e0:1d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8lf00jAC8drLazbOATb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzU3Y2IzYTFlNTNlNzYyOWVlM2I5ZjI2NzJkNDU3MWVmODVkMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cSNkYTBgauh04sP61D48lcngN4g XQ9VTPYzHImRgDxHC/Udhcvs3r9GKQvNQ49AfrTquMh+7rZ2hvo7skgqNpQEYxHx k1dva6MfPWOxTGnomGlvRukkIgZYQVa5YC+neFk5s4BwhDEPfxpsjThZzvQ2e1RZ zGDRD95G8f/vDEOHyPtQzXG+RYGVqF0Sz37N1jjZDpSV2JF9rsKhGxx3oUZ57y3p MJMICiJySt5EqXb6IV8fyUV7W7Es5yeSogea0lc0cc9TJqCRXxU5lmFowFIqcl/H XuT5MehQnVWXNYHZUCCM24QFY2y/t56iE21ToJAmeRvqcAY4McULJvFoxQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAxXyzoeU+dinuO58mctRXHvhdLIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzZjMWUw MS0xNTk1LTQ3YjAtOWUwMy1jZjcyMzJkZGViZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvNmMxZTAx LTE1OTUtNDdiMC05ZTAzLWNmNzIzMmRkZWJlYy8xL0RGZkxPaDVUNTJLZTQ3bnla eTFGY2UtRjBzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDXn4wMA0EAgACMAcDBQAqAg8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC8CTANBgkqhkiG9w0BAQsFAAOCAQEABJhxxb/g9eUe buacJxdNvoDX+47scpSBwsnEfKbWu9BkNm/XmDoNGG9lo5qAyl0ZszWlbgD1yVQz DeUB/Mbx+AU8Ig2/xOKwkC64N+JFmuDTEyNgNDMrMX99rqwlZ7k6HjK+laoJqgw5 Ne1WNOakXbMRPK42QYOdP/8DZZq27w1/P5Fy8VnL6tEWAYWp6/Mi2A6wUMlb9Vc1 WvVICUz9/OY2De2mUVBezXI8A2GS3TgiLxgO0qQsc3MIZDS0/S9rSoeguPFB/L+e geHFCN1cn0RKPh5bwAeXjqhdTFgeGPyin/uwllstMZ2KWJmUic7u3wU7TroQLxQQ AwnnG/LgHQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:35 2026 by rpki-client