This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer File: DX_64wDe8Idr-EiQ-26he-hBpNM.cer (raw, json) Hash identifier: Mo2+SCqK7OyDkWCm2ENUAiy+tlskaIetNi20jcO0BgM= Subject key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78351A2AE004D41F0F8D32AF1C4A0604 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212045 IP: 85.117.228.0/22 IP: 185.213.248.0/22 IP: 194.34.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1a:2a:e0:04:d4:1f:0f:8d:32:af:1c:4a:06:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:ee:27:90:1d:f4:17:05:76:8d:cc:3f:9f: 36:10:59:28:b7:46:f4:c7:d6:e3:34:bf:d6:49:01: d6:dc:9c:5b:e7:26:4d:36:08:0a:5d:76:eb:a5:11: 0d:22:cc:d9:15:20:bc:a2:a1:82:c2:d8:b6:06:9c: 54:8f:9a:f2:aa:cc:db:b2:47:cc:8e:af:ae:39:45: d2:1e:eb:b3:35:11:c4:26:c1:3e:38:8f:85:77:bf: d3:64:8b:e5:5e:8d:a5:95:39:48:2a:9d:59:6a:4d: 20:3a:5c:92:82:38:fe:41:51:a7:aa:fb:fd:28:4f: 45:16:43:cc:08:8f:76:56:56:8c:2b:8e:6f:c3:74: f2:a3:2c:8f:c6:21:3d:55:79:c0:97:89:8d:f1:21: 85:49:3b:37:3e:1c:4e:f0:51:9e:5c:52:a8:03:2c: d8:fc:13:52:ed:33:25:a0:ec:3c:fc:92:3e:f6:ab: 50:3d:cb:1f:09:f0:b0:69:44:a1:5f:fd:d1:5c:8f: cc:fe:ce:17:49:09:13:7f:90:72:af:4a:a0:3f:49: 37:9e:56:15:7f:d3:2c:0b:22:f6:70:d5:61:13:82: 50:03:d7:5f:a2:7a:2c:ff:fb:03:79:5e:ec:e8:52: ef:f4:74:a0:7a:ce:8f:12:51:b6:c7:2f:56:42:29: 38:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.228.0/22 185.213.248.0/22 194.34.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212045 Signature Algorithm: sha256WithRSAEncryption a0:fd:10:ff:38:83:7a:7b:22:0c:25:fe:a7:6e:fd:dd:fb:d9: 8c:7a:95:80:62:95:41:a4:ba:df:b6:f1:05:f9:61:6d:b6:89: 27:44:bb:11:53:b0:91:69:15:09:66:a5:6e:0e:eb:f1:c6:58: e0:91:72:93:07:26:52:7e:4a:c6:a8:be:81:d8:db:e6:4e:3f: 1e:4d:7e:62:8f:8d:51:4e:0c:5d:61:ae:6d:99:5d:0b:d0:d4: 50:29:6b:e5:9b:73:2e:a2:cd:b9:21:d8:37:3b:18:fc:84:8d: 33:70:0a:3d:67:bb:fc:35:60:99:da:fe:a0:cb:09:52:e9:80: 93:18:ed:8c:23:ce:97:96:25:e4:88:88:2a:56:0e:c0:12:a0: d5:94:d1:99:dd:af:ed:57:c8:99:33:b7:b2:c2:2a:79:5f:14: 08:ec:38:10:20:23:73:48:60:f4:68:c6:99:8c:a3:dd:b6:00: 17:1a:f2:e6:70:40:73:c3:b4:aa:9e:33:d3:08:7f:42:d3:22: d9:59:c4:ce:9f:2a:e8:d6:01:e8:cc:d2:c7:4b:cc:7a:ea:9f: 93:33:18:f5:4c:e1:4d:f5:93:7b:dd:92:65:93:cd:66:ff:05: e5:90:1c:f7:ac:ff:82:50:a4:f6:6b:cd:27:ba:e1:fd:51:e8: 86:a1:84:a2 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt4NRoq4ATUHw+NMq8cSgYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDdmZmFlMzAwZGVmMDg3NmJmODQ4OTBmYjZlYTE3YmU4NDFhNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+XuJ5Ad9BcFdo3MP582EFkot0b0 x9bjNL/WSQHW3Jxb5yZNNggKXXbrpRENIszZFSC8oqGCwti2BpxUj5ryqszbskfM jq+uOUXSHuuzNRHEJsE+OI+Fd7/TZIvlXo2llTlIKp1Zak0gOlySgjj+QVGnqvv9 KE9FFkPMCI92VlaMK45vw3TyoyyPxiE9VXnAl4mN8SGFSTs3PhxO8FGeXFKoAyzY /BNS7TMloOw8/JI+9qtQPcsfCfCwaUShX/3RXI/M/s4XSQkTf5Byr0qgP0k3nlYV f9MsCyL2cNVhE4JQA9dfonos//sDeV7s6FLv9HSges6PElG2xy9WQik4hQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFA1/+uMA3vCHa/hIkPtuoXvoQaTTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzgxMTNk ZGE2LTdhZGUtNDQ1ZC04YzZlLTQ0OGE3OGU0OGNhMS8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODEx M2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMEQ3RkZBRTMwMERF RjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgME AlV15AMEArnV+AMEAsIi/DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDPE0wDQYJ KoZIhvcNAQELBQADggEBAKD9EP84g3p7Igwl/qdu/d372Yx6lYBilUGkut+28QX5 YW22iSdEuxFTsJFpFQlmpW4O6/HGWOCRcpMHJlJ+SsaovoHY2+ZOPx5NfmKPjVFO DF1hrm2ZXQvQ1FApa+Wbcy6izbkh2Dc7GPyEjTNwCj1nu/w1YJna/qDLCVLpgJMY 7YwjzpeWJeSIiCpWDsASoNWU0Zndr+1XyJkzt7LCKnlfFAjsOBAgI3NIYPRoxpmM o922ABca8uZwQHPDtKqeM9MIf0LTItlZxM6fKujWAejM0sdLzHrqn5MzGPVM4U31 k3vdkmWTzWb/BeWQHPes/4JQpPZrzSe64f1R6IahhKI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:52 2026 by rpki-client