This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer File: DNszEee1KoxC8GUP9DwPyE0yDxY.cer (raw, json) Hash identifier: 8EVgxGGvxkbyacgizTB9VB+/CGZI4l69zrp1rS2HYSk= Subject key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B89684B5ACC7C74371C66F92971AE0780 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 04 Jan 2026 14:27:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206974 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:68:4b:5a:cc:7c:74:37:1c:66:f9:29:71:ae:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 4 14:27:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:bb:70:4b:fd:1a:af:d2:66:31:e0:7e:0a: 80:6b:6b:e6:dc:08:a4:7b:87:fb:a5:a4:f3:ed:b5: 2d:15:06:6d:a3:a6:d0:60:27:93:d8:d8:f6:da:ce: ff:ce:8d:d1:45:8f:66:85:ba:60:fb:8b:5f:73:a4: f6:c5:f6:a1:14:ad:64:01:90:30:40:c3:bc:97:8f: 37:5b:e5:58:6d:bc:b1:2c:58:a8:03:80:a1:19:2d: 12:1e:1e:d0:a1:14:12:d9:8e:fc:8f:6a:f7:06:d9: e4:5d:23:97:72:3f:78:30:21:af:6c:9e:55:f7:30: 58:0a:f0:f7:15:e2:6c:75:10:20:af:8b:dc:3f:d7: ce:66:8c:11:b0:99:2b:65:8d:ff:53:8d:e6:45:b7: 72:b1:87:8e:f7:97:9a:c9:9c:7b:ac:b0:f8:c1:4e: 2e:85:e3:17:d4:80:27:72:72:46:29:56:3b:22:ef: 7c:01:12:d8:bf:76:55:00:22:e6:e8:35:75:e4:88: ab:67:6c:14:2d:4b:84:33:d0:17:2f:44:6e:02:73: 11:f4:8e:c8:80:c2:12:82:dd:d5:3c:cb:35:f2:8c: 79:49:13:72:3e:e6:4a:5a:67:e5:81:80:fa:46:3f: ed:1a:91:ac:08:5e:77:b6:ce:b9:35:c7:3f:30:01: ec:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206974 Signature Algorithm: sha256WithRSAEncryption af:96:28:c1:7f:24:6d:43:7a:5e:ca:05:a8:ca:2a:91:4b:7a: af:3d:d5:23:3b:30:cd:4b:1b:a5:27:f9:90:59:8a:dd:53:24: 2e:68:a4:5d:0b:89:98:f7:23:cc:30:d3:93:f5:76:28:2b:db: 7e:6f:56:f5:39:e5:ec:1f:73:d2:e8:88:7f:5f:75:7b:55:44: 5c:07:94:f4:9e:7f:df:61:50:1a:0b:ac:4c:9c:f8:49:a4:62: 7f:de:ae:2e:29:1d:c1:9c:3f:29:1f:6b:33:91:c2:20:73:26: 86:3a:85:9d:2e:ba:b8:b1:69:93:4c:b9:cd:e8:f2:ac:a9:bb: 67:1a:db:40:a8:21:7a:0d:ab:47:df:83:a8:51:0a:8b:ce:82: ac:40:00:1e:4a:85:69:b1:37:11:33:5d:27:09:9a:bc:77:b6: c7:9e:15:be:e0:07:5b:05:e4:4e:12:b1:e0:4b:88:0a:75:4b: fb:05:a0:53:44:6b:09:9c:5c:0c:23:5e:20:4a:fa:2e:1e:78: 17:e0:3f:09:c9:a9:79:58:3b:c9:34:8b:16:b4:e2:a6:66:b7: 80:69:5f:57:e2:03:fa:d1:ed:ea:d0:36:1b:18:7b:6f:f9:b7: af:a9:61:e5:22:2f:9e:73:60:28:94:59:d3:82:28:f5:32:79: 09:bd:0b:b7 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZuJaEtazHx0Nxxm+SlxrgeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA0MTQyNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2RiMzMxMWU3YjUyYThjNDJmMDY1MGZmNDNjMGZjODRkMzIwZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKW7cEv9Gq/SZjHgfgqAa2vm3Aik e4f7paTz7bUtFQZto6bQYCeT2Nj22s7/zo3RRY9mhbpg+4tfc6T2xfahFK1kAZAw QMO8l483W+VYbbyxLFioA4ChGS0SHh7QoRQS2Y78j2r3BtnkXSOXcj94MCGvbJ5V 9zBYCvD3FeJsdRAgr4vcP9fOZowRsJkrZY3/U43mRbdysYeO95eayZx7rLD4wU4u heMX1IAncnJGKVY7Iu98ARLYv3ZVACLm6DV15IirZ2wULUuEM9AXL0RuAnMR9I7I gMISgt3VPMs18ox5SRNyPuZKWmflgYD6Rj/tGpGsCF53ts65Ncc/MAHs0QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFAzbMxHntSqMQvBlD/Q8D8hNMg8WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzFhNzk4 Zi05NDg5LTRlMWYtYjhiNy0xYzljZWY5ZDg4MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMWE3OThm LTk0ODktNGUxZi1iOGI3LTFjOWNlZjlkODgyZi8xL0ROc3pFZWUxS294QzhHVVA5 RHdQeUUweUR4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMofjANBgkqhkiG9w0BAQsFAAOCAQEAr5YowX8kbUN6 XsoFqMoqkUt6rz3VIzswzUsbpSf5kFmK3VMkLmikXQuJmPcjzDDTk/V2KCvbfm9W 9Tnl7B9z0uiIf191e1VEXAeU9J5/32FQGgusTJz4SaRif96uLikdwZw/KR9rM5HC IHMmhjqFnS66uLFpk0y5zejyrKm7ZxrbQKgheg2rR9+DqFEKi86CrEAAHkqFabE3 ETNdJwmavHe2x54VvuAHWwXkThKx4EuICnVL+wWgU0RrCZxcDCNeIEr6Lh54F+A/ CcmpeVg7yTSLFrTipma3gGlfV+ID+tHt6tA2Gxh7b/m3r6lh5SIvnnNgKJRZ04Io 9TJ5Cb0Ltw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:25:17 2026 by rpki-client