This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer (raw, json) Hash identifier: IMmSO4Fam0E5PW4qhDeK/UaRp6BxTpMW+ajRZUJuCV8= Subject key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15E259FB34D7CC12B2F9C84ABC389C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31244 IP: 45.129.64.0/22 IP: 193.25.112.0/23 IP: 194.117.236.0/23 IP: 2a0e:4540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e2:59:fb:34:d7:cc:12:b2:f9:c8:4a:bc:38:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:05:d5:6c:f7:a9:85:91:03:8f:8f:09:af: f4:b7:59:a5:64:de:bb:79:59:2e:50:86:02:6d:a7: ac:0f:65:b2:5d:b0:96:56:79:03:f3:ac:ee:79:0a: 6d:62:17:05:91:c3:52:f1:6d:a6:a6:94:dc:20:36: ea:87:f9:c0:82:a8:32:b7:5f:34:dd:b1:48:98:b8: f2:47:0f:48:da:a0:cc:2b:aa:47:e9:be:00:bd:91: 12:6b:8d:cb:1a:fb:ca:d7:9e:22:cc:47:2a:c2:cf: bf:14:a8:45:94:36:ee:80:2d:50:ba:3b:d2:f5:9f: 83:63:8c:4f:24:97:bf:77:48:8c:58:1c:f8:ce:76: 23:98:53:91:fb:b7:68:56:2e:bd:18:42:1e:cc:1e: 02:21:81:1e:06:eb:6a:df:09:e1:4f:c2:9d:88:99: 15:d3:dd:ba:8b:22:c1:b3:f4:17:e1:39:0f:3f:0c: 18:b1:97:d5:aa:ea:80:78:5f:e7:4a:85:0b:f8:ca: 2d:86:8e:12:0c:9e:d8:95:8b:da:72:49:53:55:c0: ea:0c:ce:8e:14:66:e7:3c:0d:58:81:55:3d:2a:4c: 31:f1:41:fb:90:47:0a:39:79:3e:74:f2:da:12:37: 2c:12:66:fa:f4:98:8e:d8:22:0f:6a:14:a1:a7:c6: 3d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.64.0/22 193.25.112.0/23 194.117.236.0/23 IPv6: 2a0e:4540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31244 Signature Algorithm: sha256WithRSAEncryption 7c:8a:ef:b3:22:c8:b3:da:4a:a7:f7:36:14:7a:4d:9b:74:04: 79:fb:c4:a7:e5:7f:18:d0:2c:e8:48:0f:b7:7e:1a:f3:98:a4: db:11:59:1b:ad:19:27:01:cd:91:e4:c0:69:75:6e:43:4e:12: b1:7e:63:9b:67:f2:59:b3:66:b1:bf:df:da:69:1c:6e:9f:a7: 1e:72:df:89:b5:49:a8:08:b3:ea:93:c8:0e:84:a8:b5:43:e8: 59:39:14:a2:79:4b:7a:3f:43:26:89:6f:e3:79:80:02:66:1e: 6d:43:33:a7:4f:c4:20:8e:86:6a:a2:54:cb:ee:40:21:a3:66: d7:40:fe:31:0f:62:db:8b:38:f6:5d:f3:1c:2f:13:19:5a:46: cb:5a:53:4b:f4:a3:b5:70:b2:69:b1:e9:1c:94:72:d2:c0:40: f2:93:dd:66:02:f7:18:44:33:86:ee:f1:6b:a9:4f:cc:7f:cf: 13:40:50:0d:2b:ff:25:06:22:26:95:58:0f:fb:d6:93:57:cf: f2:b4:15:a7:5e:54:00:da:fa:de:3a:26:2a:52:98:a8:e2:06: 00:3b:a6:58:82:31:08:3c:85:12:65:cc:f3:be:4c:91:4f:f4: b8:a0:f0:10:a6:7b:a7:7c:fe:48:a9:9e:25:7b:77:39:65:4e: 50:8c:ef:c7 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt/FeJZ+zTXzBKy+chKvDicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDcwMmM1M2NiODAzYjE0NjQ0ZTY3NTg3ZTVkNmZkNjEyYjY0YmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XgF1Wz3qYWRA4+PCa/0t1mlZN67 eVkuUIYCbaesD2WyXbCWVnkD86zueQptYhcFkcNS8W2mppTcIDbqh/nAgqgyt180 3bFImLjyRw9I2qDMK6pH6b4AvZESa43LGvvK154izEcqws+/FKhFlDbugC1QujvS 9Z+DY4xPJJe/d0iMWBz4znYjmFOR+7doVi69GEIezB4CIYEeButq3wnhT8KdiJkV 0926iyLBs/QX4TkPPwwYsZfVquqAeF/nSoUL+Motho4SDJ7YlYvacklTVcDqDM6O FGbnPA1YgVU9Kkwx8UH7kEcKOXk+dPLaEjcsEmb69JiO2CIPahShp8Y9/wIDAQAB o4ICujCCArYwHQYDVR0OBBYEFA1wLFPLgDsUZE5nWH5db9YStkvMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2QzZDEw NS1mOTcyLTRjN2MtYmZlYS0zZjI1MzkyZGU3ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZDNkMTA1 LWY5NzItNGM3Yy1iZmVhLTNmMjUzOTJkZTdmOS8xL0RYQXNVOHVBT3hSa1RtZFlm bDF2MWhLMlM4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLYFAAwQBwRlwAwQBwnXsMA0EAgACMAcDBQMq DkVAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnoMMA0GCSqGSIb3DQEBCwUAA4IB AQB8iu+zIsiz2kqn9zYUek2bdAR5+8Sn5X8Y0CzoSA+3fhrzmKTbEVkbrRknAc2R 5MBpdW5DThKxfmObZ/JZs2axv9/aaRxun6cect+JtUmoCLPqk8gOhKi1Q+hZORSi eUt6P0MmiW/jeYACZh5tQzOnT8QgjoZqolTL7kAho2bXQP4xD2Lbizj2XfMcLxMZ WkbLWlNL9KO1cLJpsekclHLSwEDyk91mAvcYRDOG7vFrqU/Mf88TQFANK/8lBiIm lVgP+9aTV8/ytBWnXlQA2vreOiYqUpio4gYAO6ZYgjEIPIUSZczzvkyRT/S4oPAQ pnunfP5IqZ4le3c5ZU5QjO/H -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:45 2026 by rpki-client