This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer File: DKqIQOU7uWW-UZLIW3QDReegZSw.cer (raw, json) Hash identifier: bx9LmhVNwpEJZwHUIi1GV1O0WOch7D4vlv7sDIn7+Fk= Subject key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A359D17A13DE9BF7175C2E63987D75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.107.46.0/24 IP: 2a13:7f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:59:d1:7a:13:de:9b:f7:17:5c:2e:63:98:7d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0caa8840e53bb965be5192c85b740345e7a0652c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:d9:82:ff:1e:b5:96:34:a9:b8:93:e0:4e: 40:a1:a1:2d:35:b3:fc:75:b3:7e:82:a3:40:04:3a: 79:fe:22:4b:b6:28:fe:bf:e7:8d:ad:6e:9c:5f:7b: 12:2e:ca:0c:12:dc:c0:07:e4:79:f6:c7:3e:52:71: 2b:82:7f:21:ee:15:87:70:58:4c:47:50:88:f1:90: 02:fe:00:35:7a:b2:1a:a6:84:40:eb:10:10:eb:6b: 8b:02:3a:c7:6a:30:f5:59:84:22:be:3f:77:4d:d0: 68:ab:1e:9b:ee:54:63:33:5c:89:b8:b9:49:b2:01: b0:61:92:12:bb:98:2a:c8:6c:40:a4:99:c5:1d:0b: 9e:10:c3:3e:d1:b6:a2:10:6c:db:44:a7:4d:05:37: 7a:9e:fc:e7:98:79:dd:32:37:e3:7f:89:2a:59:fe: 5f:b4:84:dd:52:7a:f0:b4:cc:9a:24:8d:26:36:67: 51:00:3e:04:4d:59:27:fb:fc:ac:15:51:2d:4c:bb: 97:14:9d:39:b7:1a:6d:2b:d9:30:71:00:38:84:e8: ec:41:99:6e:90:25:fc:bf:38:88:08:dd:1a:5e:05: b1:46:0f:82:c2:55:c6:8c:6e:a8:a9:87:1d:f8:4b: 02:ce:d4:4c:5d:00:ca:e1:56:27:ac:5c:23:c3:06: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.46.0/24 IPv6: 2a13:7f00::/29 Signature Algorithm: sha256WithRSAEncryption 6c:80:67:93:d0:fd:2d:b8:da:b9:a2:7c:b5:ff:c9:c3:99:e9: 64:19:9e:f1:d8:68:75:6e:f2:46:fa:dc:e6:1d:ff:26:d5:18: 2b:17:a4:af:7c:67:ff:60:19:01:a1:ab:f7:d6:df:97:b5:91: c6:8f:18:d6:2c:0a:36:d0:47:7a:80:25:bf:7f:b0:6b:a0:42: b2:6e:ed:bd:d0:92:7a:81:ca:1c:6f:5d:bd:77:bc:58:5d:f7: b2:4d:60:49:6c:88:b0:84:58:af:c5:bc:ed:a8:40:2a:2c:9d: a5:b6:22:32:b1:c8:bd:52:bd:7d:0e:5a:29:27:e6:fa:f3:bd: 6d:86:df:95:ea:94:b4:43:e5:bd:a7:78:0a:42:6e:87:f3:05: 86:8d:6a:93:d1:fd:de:f7:2d:3b:89:b8:30:79:44:29:62:71: 88:6c:33:0b:c2:85:d9:e7:96:7d:98:a1:e5:79:91:a2:cd:f9: 33:db:11:69:83:35:63:06:5a:48:22:78:2d:8f:ad:ad:a1:88: 9b:f8:77:cb:de:98:29:88:79:80:77:54:43:2b:d2:09:23:eb: 1d:55:a5:1c:46:57:4f:ea:ac:dd:92:b7:d1:de:e0:01:ce:ef: 22:f2:6b:dd:15:8e:f2:9b:68:98:ed:37:a1:37:87:26:39:6e: b9:0a:71:2f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4o1nRehPem/cXXC5jmH11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2FhODg0MGU1M2JiOTY1YmU1MTkyYzg1Yjc0MDM0NWU3YTA2NTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSDZgv8etZY0qbiT4E5AoaEtNbP8 dbN+gqNABDp5/iJLtij+v+eNrW6cX3sSLsoMEtzAB+R59sc+UnErgn8h7hWHcFhM R1CI8ZAC/gA1erIapoRA6xAQ62uLAjrHajD1WYQivj93TdBoqx6b7lRjM1yJuLlJ sgGwYZISu5gqyGxApJnFHQueEMM+0baiEGzbRKdNBTd6nvznmHndMjfjf4kqWf5f tITdUnrwtMyaJI0mNmdRAD4ETVkn+/ysFVEtTLuXFJ05txptK9kwcQA4hOjsQZlu kCX8vziICN0aXgWxRg+CwlXGjG6oqYcd+EsCztRMXQDK4VYnrFwjwwbACQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFAyqiEDlO7llvlGSyFt0A0XnoGUsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2M2N2Mz ZS00NWM2LTRjODEtOTczOC1jNDRkZGZmYTY5YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvYzY3YzNl LTQ1YzYtNGM4MS05NzM4LWM0NGRkZmZhNjlhYi8xL0RLcUlRT1U3dVdXLVVaTElX M1FEUmVlZ1pTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwWsuMA0EAgACMAcDBQMqE38AMA0GCSqGSIb3 DQEBCwUAA4IBAQBsgGeT0P0tuNq5ony1/8nDmelkGZ7x2Gh1bvJG+tzmHf8m1Rgr F6SvfGf/YBkBoav31t+XtZHGjxjWLAo20Ed6gCW/f7BroEKybu290JJ6gcocb129 d7xYXfeyTWBJbIiwhFivxbztqEAqLJ2ltiIysci9Ur19DlopJ+b6871tht+V6pS0 Q+W9p3gKQm6H8wWGjWqT0f3e9y07ibgweUQpYnGIbDMLwoXZ55Z9mKHleZGizfkz 2xFpgzVjBlpIIngtj62toYib+HfL3pgpiHmAd1RDK9IJI+sdVaUcRldP6qzdkrfR 3uABzu8i8mvdFY7ym2iY7TehN4cmOW65CnEv -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:21 2026 by rpki-client