This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer (raw, json) Hash identifier: iRQMWzYZT2FrG57yGJZcTbA+2+v5iVyoL8VE0XU1+oU= Subject key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EED7EEF18D7575BA7F69382F61E3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198401 IP: 31.24.83.0/24 IP: 31.193.187.0/24 IP: 45.82.144.0/22 IP: 62.3.27.0/24 IP: 91.234.12.0/22 IP: 176.126.118.0/24 IP: 185.87.136.0/22 IP: 185.96.52.0/22 IP: 185.146.244.0/22 IP: 2a07:5040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:ed:7e:ef:18:d7:57:5b:a7:f6:93:82:f6:1e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:21:eb:6c:4c:d9:97:70:43:93:ca:33:9c: cd:44:e3:8c:f4:5a:22:09:45:5e:bf:de:a0:67:43: df:f3:e5:0b:98:ec:85:d8:30:40:15:0f:de:79:07: 98:09:1e:06:a3:5c:7a:04:8c:c2:f6:8e:1a:3a:89: 3f:2a:f5:fe:65:7e:4e:10:b1:fd:f8:1f:d2:d2:b7: ec:a1:2b:e6:75:27:05:51:f3:d5:41:45:cb:84:b1: c1:ec:87:1d:b2:c0:ba:5a:cf:1c:0d:8c:0d:6f:21: 4d:47:ee:df:09:75:3e:d8:53:f6:ce:8d:b5:14:97: 9b:df:8c:4f:ad:cc:bf:26:e9:e1:53:d4:2b:ba:6e: 7f:4c:4e:f9:03:97:18:6e:16:ec:93:ee:fd:61:77: 88:93:0b:8c:2f:48:30:04:23:1f:52:cb:45:64:0f: 8c:e4:1b:98:f0:1c:67:66:d0:f5:2e:f5:76:e0:7f: 85:9a:27:19:dd:8e:00:3f:f4:90:78:82:56:f7:dc: b2:35:69:e6:7a:7d:9b:79:76:cf:f5:91:49:bf:64: f8:03:20:0e:26:95:e9:f2:ad:1f:1e:e7:5c:39:b6: bf:37:6a:e9:79:4e:0c:53:c7:ce:27:75:78:fd:c8: 67:30:ce:fe:a9:5f:16:f6:a0:5e:b1:4c:6c:6a:4f: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.83.0/24 31.193.187.0/24 45.82.144.0/22 62.3.27.0/24 91.234.12.0/22 176.126.118.0/24 185.87.136.0/22 185.96.52.0/22 185.146.244.0/22 IPv6: 2a07:5040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198401 Signature Algorithm: sha256WithRSAEncryption 8d:4b:8a:2b:cd:dd:df:0b:b9:e7:d6:42:3a:7e:a0:8e:74:34: 2c:49:66:f3:ae:8d:27:2c:f5:4d:8e:3c:3b:57:dc:60:c5:21: 6f:1c:ca:9a:b7:7b:0f:ea:5e:25:dd:89:33:c4:1b:93:9b:bd: 68:87:ea:78:0c:54:95:eb:c5:f6:4b:42:f6:0b:07:a0:5b:36: 21:7e:37:5c:e1:d3:a9:ee:af:06:ea:ae:92:91:d2:9b:8a:bc: d2:27:bc:e1:5c:9a:3c:91:40:05:3f:b1:33:04:14:6a:e9:02: d1:3f:ba:c8:45:0b:85:08:07:33:23:fc:db:c1:7d:7a:f9:a4: 3e:4d:57:54:a7:20:7a:18:b1:3f:9e:72:30:5a:13:e3:28:f4: 11:c5:7b:a5:4a:2c:88:c8:46:d6:03:2c:91:55:fe:f2:9a:f3: 51:2f:de:d0:37:cf:c4:e6:11:d7:70:97:be:9b:c5:87:c9:06: e3:1e:92:33:5d:96:e9:a4:c5:6a:07:38:49:12:16:71:7a:d7: 20:f9:a6:50:cf:cf:0c:59:c5:a6:65:ff:6c:1a:19:2c:6b:0b: 85:ec:e0:42:78:69:1c:81:ad:cc:99:ec:92:ba:89:28:00:15: bc:29:dd:53:b3:34:32:5a:7b:17:02:0c:87:d0:d2:88:ad:20: 83:95:85:5a -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZt8fu1+7xjXV1un9pOC9h4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDc4NGJkOTZhNDRiYzM2MWQxMzM0NGQ1NGM4YmM1MWZmNjdhODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbgh62xM2ZdwQ5PKM5zNROOM9Foi CUVev96gZ0Pf8+ULmOyF2DBAFQ/eeQeYCR4Go1x6BIzC9o4aOok/KvX+ZX5OELH9 +B/S0rfsoSvmdScFUfPVQUXLhLHB7IcdssC6Ws8cDYwNbyFNR+7fCXU+2FP2zo21 FJeb34xPrcy/JunhU9Qrum5/TE75A5cYbhbsk+79YXeIkwuML0gwBCMfUstFZA+M 5BuY8BxnZtD1LvV24H+FmicZ3Y4AP/SQeIJW99yyNWnmen2beXbP9ZFJv2T4AyAO JpXp8q0fHudcOba/N2rpeU4MU8fOJ3V4/chnMM7+qV8W9qBesUxsak/5yQIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFA14S9lqRLw2HRM0TVTIvFH/Z6gCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzQyNWMy NC1iZmUwLTQ3OTAtYjI1MC1kNGM2NmY0ZjNiNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvNDI1YzI0 LWJmZTAtNDc5MC1iMjUwLWQ0YzY2ZjRmM2I2ZS8xL0RYaEwyV3BFdkRZZEV6Uk5W TWk4VWY5bnFBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQAHxhTAwQAH8G7AwQCLVKQAwQAPgMbAwQCW+oM AwQAsH52AwQCuVeIAwQCuWA0AwQCuZL0MA0EAgACMAcDBQMqB1BAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMHATANBgkqhkiG9w0BAQsFAAOCAQEAjUuKK83d3wu5 59ZCOn6gjnQ0LElm866NJyz1TY48O1fcYMUhbxzKmrd7D+peJd2JM8Qbk5u9aIfq eAxUlevF9ktC9gsHoFs2IX43XOHTqe6vBuqukpHSm4q80ie84VyaPJFABT+xMwQU aukC0T+6yEULhQgHMyP828F9evmkPk1XVKcgehixP55yMFoT4yj0EcV7pUosiMhG 1gMskVX+8przUS/e0DfPxOYR13CXvpvFh8kG4x6SM12W6aTFagc4SRIWcXrXIPmm UM/PDFnFpmX/bBoZLGsLhezgQnhpHIGtzJnskrqJKAAVvCndU7M0Mlp7FwIMh9DS iK0gg5WFWg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:41:54 2026 by rpki-client