This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer File: DXIuRROjlnjYqyOy1kl3U0BRjLk.cer (raw, json) Hash identifier: DW5ackwVuiwqcnJlzhoOtoU/fTV50M9HMw4U7Q5aLBg= Subject key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF06AC83C66526DBD5209BF42F915 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.249.192.0/20 IP: 185.21.252.0/22 IP: 212.42.192.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f0:6a:c8:3c:66:52:6d:bd:52:09:bf:42:f9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c1:12:0b:e9:29:cb:98:a1:a2:86:9b:3a:e3: 48:3f:bd:24:29:58:95:2c:7c:10:fd:19:e4:27:75: 16:15:b0:23:4c:58:df:0d:7d:f1:b6:4b:90:0c:aa: f7:ca:5a:d0:95:e0:6f:83:93:d5:d7:60:58:f6:73: 40:5c:42:82:7e:2d:65:bf:e1:e5:f0:b8:a7:bd:09: f7:21:e6:a1:3f:19:db:a1:fb:80:cd:11:ca:49:56: 43:c1:23:f0:24:2a:7a:00:2e:7e:cf:63:39:76:70: b6:97:95:4c:95:e7:6b:21:d2:04:d8:5d:88:72:d9: e1:cd:34:e0:fb:15:bd:b4:36:aa:0f:78:30:ac:ce: 88:48:56:9d:54:38:36:13:04:64:e2:60:23:52:1b: 85:f8:39:cb:75:a5:d4:6d:d2:6e:04:4a:63:34:54: e9:39:d6:c4:27:2c:38:d0:a2:4b:21:70:1b:67:0f: 72:83:ed:d3:97:c4:a2:cf:35:9e:ca:ec:51:a7:6c: b1:cc:bc:99:2f:20:4e:a6:41:70:7c:69:02:cc:aa: d0:76:94:f0:1e:86:93:fb:c6:24:f1:27:84:0c:cd: 91:8e:e5:e1:87:ac:96:84:c8:9e:a7:69:fe:29:ed: 89:d1:a8:45:eb:dc:da:dc:73:85:74:6f:65:aa:d6: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.192.0/20 185.21.252.0/22 212.42.192.0/19 Signature Algorithm: sha256WithRSAEncryption 79:f4:b0:c8:38:88:41:73:d5:64:e4:c4:90:74:c9:37:3e:80: f8:d6:f1:68:3d:d5:cc:c1:ea:a9:e9:0a:ae:5c:db:12:42:91: 63:03:46:ea:4f:86:c6:fe:37:81:6f:f1:8f:f7:89:1c:ef:14: 05:83:a4:52:5c:cc:53:6e:98:3c:e9:04:60:90:ab:81:31:a8: 28:b5:f9:43:a9:32:96:ee:48:01:69:ef:0c:17:f0:be:b5:b6: 8c:59:80:02:6d:70:bc:b2:00:de:61:eb:21:1e:fe:71:4b:8b: ea:45:3b:ca:5a:c6:c4:9a:9e:46:0a:ee:10:9b:9d:2f:db:7c: 2b:2d:15:ba:b7:58:45:a1:4f:b6:2c:c3:6f:38:a1:c9:24:3c: 99:c3:6f:b9:c2:a5:76:a8:d1:ce:45:3d:25:19:8b:2c:44:7f: 10:1a:ef:ad:dd:31:44:37:a6:1d:7e:a9:b0:ad:6d:98:34:8f: 51:dd:59:ef:4e:f2:6e:2b:74:d0:54:e9:b5:9d:e0:0a:d2:36: 33:7f:ce:6c:e6:dd:cc:64:bb:1a:42:26:d7:6e:21:9e:d1:f1: 55:2b:20:50:30:ab:c5:e6:5a:2c:80:e5:6e:4b:8f:ba:7c:9d: 59:bf:ef:60:0c:93:37:64:e5:ca:69:1c:f3:2f:c0:7c:92:b3: 34:e7:2d:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt5fvBqyDxmUm29Ugm/QvkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDcyMmU0NTEzYTM5Njc4ZDhhYjIzYjJkNjQ5Nzc1MzQwNTE4Y2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58ESC+kpy5ihooabOuNIP70kKViV LHwQ/RnkJ3UWFbAjTFjfDX3xtkuQDKr3ylrQleBvg5PV12BY9nNAXEKCfi1lv+Hl 8LinvQn3IeahPxnbofuAzRHKSVZDwSPwJCp6AC5+z2M5dnC2l5VMledrIdIE2F2I ctnhzTTg+xW9tDaqD3gwrM6ISFadVDg2EwRk4mAjUhuF+DnLdaXUbdJuBEpjNFTp OdbEJyw40KJLIXAbZw9yg+3Tl8SizzWeyuxRp2yxzLyZLyBOpkFwfGkCzKrQdpTw HoaT+8Yk8SeEDM2RjuXhh6yWhMiep2n+Ke2J0ahF69za3HOFdG9lqtar/QIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFA1yLkUTo5Z42KsjstZJd1NAUYy5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzFjMDg0 Yy05ODJkLTQwOTgtYWY0Mi0zNDI1YjEyNWVhYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvMWMwODRj LTk4MmQtNDA5OC1hZjQyLTM0MjViMTI1ZWFhNy8xL0RYSXVSUk9qbG5qWXF5T3kx a2wzVTBCUmpMay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQEWfnAAwQCuRX8AwQF1CrAMA0GCSqGSIb3DQEB CwUAA4IBAQB59LDIOIhBc9Vk5MSQdMk3PoD41vFoPdXMweqp6QquXNsSQpFjA0bq T4bG/jeBb/GP94kc7xQFg6RSXMxTbpg86QRgkKuBMagotflDqTKW7kgBae8MF/C+ tbaMWYACbXC8sgDeYeshHv5xS4vqRTvKWsbEmp5GCu4Qm50v23wrLRW6t1hFoU+2 LMNvOKHJJDyZw2+5wqV2qNHORT0lGYssRH8QGu+t3TFEN6YdfqmwrW2YNI9R3Vnv TvJuK3TQVOm1neAK0jYzf85s5t3MZLsaQibXbiGe0fFVKyBQMKvF5losgOVuS4+6 fJ1Zv+9gDJM3ZOXKaRzzL8B8krM05y3t -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:01 2026 by rpki-client