This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer File: DOLccfnsGpsngQd_OtKYHEuHKwU.cer (raw, json) Hash identifier: vEQTSKPFsNm483EG+xYX6WTuhaIKb6Di0mxc5rJAUt4= Subject key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE6891F8DD78F0751E2C5962DD95D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198627 IP: 2001:67c:ca0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:68:91:f8:dd:78:f0:75:1e:2c:59:62:dd:95:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:1c:59:5c:bb:49:ec:d8:7b:0f:d8:22:07: 62:e3:04:91:30:56:ec:93:8f:df:b2:b4:cf:63:59: 94:19:4c:0d:ce:11:ba:85:bc:ff:d7:e6:f8:34:ef: 4c:6b:93:e6:fc:66:c2:cd:7e:a5:cd:38:b5:50:05: 27:ec:2a:08:62:6f:fb:f4:06:59:38:0b:74:63:53: c5:47:f1:20:ad:69:f3:94:3c:4a:1e:cd:18:10:53: 5a:0d:ba:c1:b9:00:54:2d:41:da:d4:ac:6f:3d:bb: b8:bf:91:e5:d7:3b:55:93:b0:83:e6:46:f5:f1:c3: be:cc:09:f1:ef:16:75:85:54:36:ee:89:b3:7f:2e: 6e:68:01:e6:99:70:51:b4:4e:90:d6:af:d0:df:b8: 64:e4:a6:e9:9f:48:07:32:86:cf:8c:96:65:aa:72: 56:99:f4:09:8b:ec:0a:a9:ed:f4:3c:84:41:1e:c0: 17:71:7c:18:b1:93:d3:94:b3:58:cb:2f:f3:eb:59: d1:97:d2:7f:1c:0c:f5:3f:bf:03:6b:ef:3c:99:4d: 77:df:d4:59:d6:b3:47:0f:cc:7f:7d:37:06:b4:4a: d4:65:9d:30:dc:b9:76:2e:d6:cf:ed:3b:12:5f:e0: 22:8b:b8:e1:73:44:cf:a7:c4:b7:34:5a:73:a5:38: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ca0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198627 Signature Algorithm: sha256WithRSAEncryption 5a:6c:ed:a5:9f:5f:9c:17:6a:bb:82:63:07:41:3c:7c:81:42: e6:17:bf:53:73:71:e2:49:d7:88:a2:ae:62:12:74:40:08:4a: 64:c0:68:c6:26:7f:d7:cb:87:94:59:1f:50:e5:56:4a:0c:4e: 98:66:40:be:87:87:9a:c3:f8:dd:53:e3:fb:86:46:cc:ed:ff: fc:5f:ed:af:74:79:5c:93:c6:23:1a:73:c1:d1:70:09:78:ce: 82:d8:01:b1:d3:80:7e:ab:47:7b:f0:53:f4:d3:41:7b:46:89: b4:45:11:08:7a:82:1b:57:e7:bc:37:d2:d5:8a:74:19:8f:ea: d2:49:38:6e:a5:3d:b0:e6:51:26:ee:e7:4a:b7:3f:04:70:36: 2d:69:37:79:78:68:93:20:5f:c7:6d:f1:65:60:90:48:a6:3c: 0f:97:77:51:6c:65:3a:23:c7:ca:9b:82:d8:02:61:d2:11:d9: e1:5b:e2:0b:33:af:05:fe:4c:3f:91:92:cd:0e:0d:da:4c:86: bb:39:00:79:51:75:ad:73:37:5f:ba:67:7b:36:75:61:04:5e: 53:bc:89:b4:ec:1b:26:a2:b8:71:54:51:fb:3a:bc:fd:e6:e9: cd:0d:f9:4f:67:37:2c:76:5a:10:e5:c6:74:7e:44:06:14:84: b4:0c:54:4f -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt87miR+N148HUeLFli3ZXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2UyZGM3MWY5ZWMxYTliMjc4MTA3N2YzYWQyOTgxYzRiODcyYjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxQcWVy7SezYew/YIgdi4wSRMFbs k4/fsrTPY1mUGUwNzhG6hbz/1+b4NO9Ma5Pm/GbCzX6lzTi1UAUn7CoIYm/79AZZ OAt0Y1PFR/EgrWnzlDxKHs0YEFNaDbrBuQBULUHa1KxvPbu4v5Hl1ztVk7CD5kb1 8cO+zAnx7xZ1hVQ27omzfy5uaAHmmXBRtE6Q1q/Q37hk5Kbpn0gHMobPjJZlqnJW mfQJi+wKqe30PIRBHsAXcXwYsZPTlLNYyy/z61nRl9J/HAz1P78Da+88mU1339RZ 1rNHD8x/fTcGtErUZZ0w3Ll2LtbP7TsSX+Aii7jhc0TPp8S3NFpzpTiyWwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFAzi3HH57BqbJ4EHfzrSmBxLhysFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2RhNjZi Yi0xNzRmLTQ5MTgtOWEzYS1iYTRmYmQ4ZDVkOGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZGE2NmJi LTE3NGYtNDkxOC05YTNhLWJhNGZiZDhkNWQ4ZS8xL0RPTGNjZm5zR3BzbmdRZF9P dEtZSEV1SEt3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAygMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMH4zANBgkqhkiG9w0BAQsFAAOCAQEAWmztpZ9fnBdqu4JjB0E8fIFC5he/ U3Nx4knXiKKuYhJ0QAhKZMBoxiZ/18uHlFkfUOVWSgxOmGZAvoeHmsP43VPj+4ZG zO3//F/tr3R5XJPGIxpzwdFwCXjOgtgBsdOAfqtHe/BT9NNBe0aJtEURCHqCG1fn vDfS1Yp0GY/q0kk4bqU9sOZRJu7nSrc/BHA2LWk3eXhokyBfx23xZWCQSKY8D5d3 UWxlOiPHypuC2AJh0hHZ4VviCzOvBf5MP5GSzQ4N2kyGuzkAeVF1rXM3X7pnezZ1 YQReU7yJtOwbJqK4cVRR+zq8/ebpzQ35T2c3LHZaEOXGdH5EBhSEtAxUTw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:00 2026 by rpki-client