This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer (raw, json) Hash identifier: ci7ULmiY7rmqdbnk2p4D3v2xghB/4hjUWonx6Z6G2eI= Subject key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE27B108BDDC461112A8948D57D04A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12796 AS: 51582 IP: 46.55.128.0 -- 46.55.251.255 IP: 94.190.128.0/20 IP: 94.190.160.0 -- 94.190.194.255 IP: 94.190.252.0/22 IP: 185.89.124.0/22 IP: 185.240.144.0/22 IP: 2a03:8340::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:27:b1:08:bd:dc:46:11:12:a8:94:8d:57:d0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:8f:0a:8c:4b:b6:26:d9:4a:9a:cb:9d:4a: 3b:7e:62:a6:b1:e6:0a:f9:c2:81:e9:04:7e:21:2b: 1c:49:46:35:c0:bd:3d:ed:4f:27:43:9d:bd:91:cd: b5:6a:dd:b1:13:9f:58:e4:b9:32:68:eb:fb:e4:9b: 87:7c:30:08:41:4b:8e:7a:65:3d:62:29:2a:e8:15: ac:18:af:dd:d5:0b:7c:ae:cc:08:c7:b2:ea:47:9f: 48:8b:1f:50:fd:f9:03:2f:54:e7:6f:2f:52:0b:80: 63:50:e9:17:1a:9f:06:ab:44:bb:33:85:84:86:34: 88:16:b7:e6:6d:59:fa:3a:49:1d:ff:a5:f6:1c:25: 0f:5e:fb:25:91:6b:b7:4e:b2:34:37:de:cc:39:3e: 09:cc:66:14:14:f1:b9:ec:26:a5:44:7b:81:c7:05: f9:9f:b5:3a:0d:83:0d:c8:d0:7f:64:f1:2a:c2:40: a7:bf:62:87:4e:61:1e:cc:9a:f9:2e:ff:02:53:6f: df:c7:85:0b:ee:02:fa:5a:ce:f3:2a:25:3e:e6:85: a4:36:4e:70:52:87:8e:30:aa:a6:da:70:7d:d2:f8: 60:c6:14:b3:bc:11:05:db:ca:8d:0f:c0:2c:ed:83: 31:48:be:1b:25:32:10:e4:e1:5e:eb:09:12:23:57: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.55.128.0-46.55.251.255 94.190.128.0/20 94.190.160.0-94.190.194.255 94.190.252.0/22 185.89.124.0/22 185.240.144.0/22 IPv6: 2a03:8340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12796 51582 Signature Algorithm: sha256WithRSAEncryption a9:32:db:31:e4:6e:de:5f:94:94:ae:76:32:3d:9f:7a:b5:1b: 8f:95:b1:63:3e:ea:35:fb:f7:3d:3d:76:51:80:9c:03:1a:98: 2d:0b:a4:58:cf:e7:b7:0a:5a:f5:91:23:b5:ed:b7:32:88:5e: b5:a4:2f:36:db:e8:07:55:20:13:a6:bf:5a:d1:69:65:dc:7b: 8e:0c:d6:a6:cc:ec:5a:7c:57:e5:26:4a:22:65:b4:44:f5:61: ef:74:65:13:ab:7b:1b:24:fa:7f:c3:38:46:15:ee:86:9b:ef: a2:4c:87:3f:6a:0c:3e:9b:ac:1b:11:22:34:61:a7:2f:c1:ee: bf:aa:c1:34:3c:cb:2a:5c:43:ae:4b:39:b7:43:25:fc:a2:d9: 04:d1:10:9f:ef:f3:c9:12:3b:2c:9a:dd:86:bc:6f:fc:8a:46: b0:44:3c:a3:2e:a2:4d:fe:18:82:f5:7c:f1:7f:53:a5:bb:2b: e5:3f:7d:0c:31:ff:80:e3:68:d3:26:3e:e9:78:16:d5:fb:70: 63:d4:5b:51:a3:a2:08:52:59:74:5e:cf:6e:ed:af:12:84:22: dd:97:d5:74:8c:d3:b5:11:32:88:9d:5a:a6:c4:a3:e9:63:1f: e2:1e:ca:d2:02:73:79:d5:c0:36:4c:be:09:24:3d:d6:ea:e5: c0:47:32:84 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZt87iexCL3cRhESqJSNV9BKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDIwODdiMGY2NzE2ZDIzYzhkMjNlYjNkMDM5MmI2YmY2NDJhZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXWPCoxLtibZSprLnUo7fmKmseYK +cKB6QR+ISscSUY1wL097U8nQ529kc21at2xE59Y5LkyaOv75JuHfDAIQUuOemU9 Yikq6BWsGK/d1Qt8rswIx7LqR59Iix9Q/fkDL1Tnby9SC4BjUOkXGp8Gq0S7M4WE hjSIFrfmbVn6Okkd/6X2HCUPXvslkWu3TrI0N97MOT4JzGYUFPG57CalRHuBxwX5 n7U6DYMNyNB/ZPEqwkCnv2KHTmEezJr5Lv8CU2/fx4UL7gL6Ws7zKiU+5oWkNk5w UoeOMKqm2nB90vhgxhSzvBEF28qND8As7YMxSL4bJTIQ5OFe6wkSI1dcmwIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFA0gh7D2cW0jyNI+s9A5K2v2Qq1LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2ZjYjcy OS1jMjg4LTRlMTUtOTM4NC1hMjBkMmQ3NTFlYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZmNiNzI5 LWMyODgtNGUxNS05Mzg0LWEyMGQyZDc1MWViNS8xL0RTQ0hzUFp4YlNQSTBqNnow RGtyYV9aQ3JVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGCCsGAQUF BwEHAQH/BE0wSzA6BAIAATA0MAwDBAcuN4ADBAIuN/gDBARevoAwDAMEBV6+oAME AF6+wgMEAl6+/AMEArlZfAMEArnwkDANBAIAAjAHAwUAKgODQDAeBggrBgEFBQcB CAEB/wQPMA2gCzAJAgIx/AIDAMl+MA0GCSqGSIb3DQEBCwUAA4IBAQCpMtsx5G7e X5SUrnYyPZ96tRuPlbFjPuo1+/c9PXZRgJwDGpgtC6RYz+e3Clr1kSO17bcyiF61 pC822+gHVSATpr9a0Wll3HuODNamzOxafFflJkoiZbRE9WHvdGUTq3sbJPp/wzhG Fe6Gm++iTIc/agw+m6wbESI0Yacvwe6/qsE0PMsqXEOuSzm3QyX8otkE0RCf7/PJ Ejssmt2GvG/8ikawRDyjLqJN/hiC9Xzxf1OluyvlP30MMf+A42jTJj7peBbV+3Bj 1FtRo6IIUll0Xs9u7a8ShCLdl9V0jNO1ETKInVqmxKPpYx/iHsrSAnN51cA2TL4J JD3W6uXARzKE -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:07 2026 by rpki-client