This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer (raw, json) Hash identifier: p07GP3xxUk+3sthmoLf8goGiA43yuOEHYd/G7Sud1JA= Subject key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78343A1CCF54A5C034D2BA8B96739363 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15456 IP: 62.116.128.0/18 IP: 85.236.32.0/19 IP: 185.91.244.0/22 IP: 2001:4178::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3a:1c:cf:54:a5:c0:34:d2:ba:8b:96:73:93:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:d2:0c:1f:5f:6d:bd:15:11:f5:82:ae:d7: 57:da:75:0e:4d:10:5e:8f:83:89:26:3f:24:52:d9: 70:07:34:5c:ae:7c:24:be:aa:17:b2:73:60:ec:5c: ee:40:51:0b:17:cf:18:a7:9c:8b:4b:22:a1:81:64: 34:49:cf:87:1f:d6:83:9a:00:ab:14:48:b5:33:a9: fa:86:66:0e:66:54:80:6b:47:dd:c8:7a:04:98:81: 81:00:45:59:fa:c5:30:10:2f:6c:20:01:41:1b:b9: 05:ab:d2:82:1a:20:fa:6f:82:5b:2e:4d:1a:a8:d5: 9f:d0:67:1f:16:a4:48:a6:80:2d:79:6f:44:3d:fb: 3a:3e:59:63:e7:5a:45:7e:b8:3c:85:40:29:8e:a7: e8:40:2f:24:6d:bf:f2:63:4e:da:6a:9f:e4:a5:37: cf:5c:8d:77:7e:da:ac:04:39:c5:22:c2:a0:f0:72: 61:ae:12:54:65:5a:98:34:e6:c4:9b:e6:f8:65:b1: 7c:c2:dc:3d:1f:9b:b9:4c:37:7e:3f:3f:6e:d1:ae: fb:53:e6:69:e9:85:f5:a1:15:36:cf:cb:11:36:1d: 69:5b:0d:6c:77:e4:1b:7b:b7:51:85:b8:0d:be:c6: 8b:50:6c:82:52:74:2b:74:26:9a:f4:0a:c9:fa:a1: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.116.128.0/18 85.236.32.0/19 185.91.244.0/22 IPv6: 2001:4178::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15456 Signature Algorithm: sha256WithRSAEncryption b1:b3:d5:f4:c4:8b:77:fc:e5:05:51:dc:7d:f1:d1:c0:4a:59: d9:ea:ca:c3:af:30:52:03:78:d9:f4:e8:12:4e:ce:57:5d:21: 8b:55:2b:ea:05:27:42:49:f6:06:21:0a:b9:27:eb:6e:1d:15: 18:47:6b:bc:16:f8:3f:bf:9b:dd:3f:31:84:d8:de:39:9f:af: 4e:5e:78:81:0e:97:a2:66:a6:6c:13:db:78:d4:ab:3a:45:82: 40:cc:17:11:e8:2e:f9:75:df:35:00:04:7d:1e:5b:ff:08:70: 34:d3:3b:40:26:42:6f:24:80:0d:0e:5d:72:6c:82:58:4f:ab: 76:a5:a7:9f:0f:20:6f:78:29:82:6e:98:01:24:01:f5:82:f9: 53:42:11:c3:1f:bd:13:55:d9:c2:74:b9:68:7d:e1:be:ec:85: ac:ed:dc:e3:33:89:f2:9f:cc:51:5e:b6:e5:94:97:62:ac:8f: ac:50:42:0e:39:23:bb:d0:61:bf:13:d0:e3:f3:6a:0b:01:d3: b6:e6:24:c8:c3:7a:6d:35:4f:c3:73:27:91:f9:56:02:d9:b0: a7:25:a3:7c:23:eb:92:80:ff:b1:82:4e:7b:24:71:5d:3b:61: 9b:d0:64:c1:93:53:74:14:66:0f:80:9f:45:79:a6:2b:a6:f0: 2d:a4:3e:ff -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt4NDocz1SlwDTSuouWc5NjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzViZTYwNTZlYjBjMzY1MGI4ZmUyMWUyZDcyNmMxYjgzZWM4MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuzSDB9fbb0VEfWCrtdX2nUOTRBe j4OJJj8kUtlwBzRcrnwkvqoXsnNg7FzuQFELF88Yp5yLSyKhgWQ0Sc+HH9aDmgCr FEi1M6n6hmYOZlSAa0fdyHoEmIGBAEVZ+sUwEC9sIAFBG7kFq9KCGiD6b4JbLk0a qNWf0GcfFqRIpoAteW9EPfs6Pllj51pFfrg8hUApjqfoQC8kbb/yY07aap/kpTfP XI13ftqsBDnFIsKg8HJhrhJUZVqYNObEm+b4ZbF8wtw9H5u5TDd+Pz9u0a77U+Zp 6YX1oRU2z8sRNh1pWw1sd+Qbe7dRhbgNvsaLUGyCUnQrdCaa9ArJ+qH9tQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFAxb5gVusMNlC4/iHi1ybBuD7IKzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzMyN2E1 NC02ZGIyLTQyOTEtOTQzNC1mZmM3ZjJhMzE5OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMzI3YTU0 LTZkYjItNDI5MS05NDM0LWZmYzdmMmEzMTk4Yy8xL0RGdm1CVzZ3dzJVTGotSWVM WEpzRzRQc2dyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQGPnSAAwQFVewgAwQCuVv0MA0EAgACMAcDBQMg AUF4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjxgMA0GCSqGSIb3DQEBCwUAA4IB AQCxs9X0xIt3/OUFUdx98dHASlnZ6srDrzBSA3jZ9OgSTs5XXSGLVSvqBSdCSfYG IQq5J+tuHRUYR2u8Fvg/v5vdPzGE2N45n69OXniBDpeiZqZsE9t41Ks6RYJAzBcR 6C75dd81AAR9Hlv/CHA00ztAJkJvJIANDl1ybIJYT6t2paefDyBveCmCbpgBJAH1 gvlTQhHDH70TVdnCdLlofeG+7IWs7dzjM4nyn8xRXrbllJdirI+sUEIOOSO70GG/ E9Dj82oLAdO25iTIw3ptNU/DcyeR+VYC2bCnJaN8I+uSgP+xgk57JHFdO2Gb0GTB k1N0FGYPgJ9FeaYrpvAtpD7/ -----END CERTIFICATE-----Generated at Mon Jan 26 13:39:23 2026 by rpki-client