This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer (raw, json) Hash identifier: ovjJ8HGE73ZI1j1Ny+iD1qVsXjX62de7Uq8hM7tXm0k= Subject key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE0C48AD4B119D048FE3D1A72A3B9B010 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 21 Jan 2026 13:35:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.97.224.0/22 IP: 2a06:8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:c4:8a:d4:b1:19:d0:48:fe:3d:1a:72:a3:b9:b0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 21 13:35:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:db:75:1b:0c:d1:d5:8e:a2:e6:cc:30:6a: 1e:98:16:bd:d8:84:03:56:9f:04:57:18:2e:3f:1a: 80:d8:bc:d1:35:9c:cd:c4:39:f4:e4:0d:85:7c:b1: f9:9c:55:2b:6b:1a:06:c7:57:bd:d3:68:0a:04:34: 9d:7a:ff:dd:c9:fd:d1:07:6a:be:98:cc:cd:1a:03: 91:d9:aa:a9:e4:56:7c:91:e2:bb:65:1e:6b:d1:14: 20:81:1e:9f:f5:59:e4:fc:13:9e:e6:b3:7b:10:cb: ac:46:d9:30:89:49:f7:0e:fe:69:7f:dd:8f:ef:52: 68:37:9c:2b:4a:00:07:10:b8:94:23:8c:4a:f9:b4: 86:2a:89:0d:bc:d5:80:3d:3d:13:e6:81:c4:06:be: 76:1e:66:a4:d9:ad:e3:02:a9:5f:38:79:77:b9:f6: 49:cf:cc:5e:5d:11:a8:9f:72:d7:e7:94:f2:e1:eb: cd:52:0d:c1:64:6e:77:a1:60:08:12:f2:1a:36:f6: 41:95:59:fe:a9:3c:ab:11:c7:53:85:d8:ab:ee:ce: 43:89:9c:9f:3b:3c:4f:ce:3f:48:8a:26:9a:fa:52: 6e:9d:e9:de:7e:01:44:87:f7:37:45:89:b5:86:1f: e8:23:8c:27:87:c3:06:ce:4e:43:1d:d5:8d:8b:04: 4d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.224.0/22 IPv6: 2a06:8c0::/29 Signature Algorithm: sha256WithRSAEncryption 61:bf:34:34:81:62:bd:d5:d9:47:fd:62:dc:0e:2d:9b:d8:2a: f8:30:2d:73:64:0f:9b:37:ba:c9:34:6d:f0:8c:d7:f6:d0:82: d1:4b:b1:5e:6f:4c:bb:5a:6b:f4:70:4a:2e:e0:98:68:88:ed: 72:90:c3:97:12:0d:32:a8:80:77:32:1b:32:43:8b:f7:3b:c8: ae:49:11:98:b6:40:cd:14:15:23:03:4e:9a:0c:86:35:37:c0: 4b:0d:07:07:55:58:c8:af:dc:28:68:34:f8:f4:28:4f:68:d7: 58:62:4e:cf:c6:16:d2:2d:18:f7:32:c8:93:99:cc:fe:9c:d0: b2:69:df:a5:7d:4b:bc:4b:42:82:3f:5e:b7:9a:9b:2e:91:ff: 0a:91:1f:49:bb:f9:e4:fe:8b:e5:bd:75:8a:24:bb:d6:fd:da: c0:ee:47:ef:f9:ef:61:49:9d:84:38:c4:a3:d9:75:ac:9a:6b: 4a:d7:69:14:f5:3b:c7:35:b5:e1:90:5d:ed:e8:aa:8e:f2:03: 0a:7d:fa:87:58:44:5a:84:47:94:72:d1:9d:05:87:33:17:af: 7e:38:92:28:ed:0f:72:2d:49:96:26:b8:ad:7d:62:b9:b0:90: 64:93:41:3e:5f:ca:12:d6:6a:db:31:95:fe:ff:a6:8c:29:4b: d0:fa:73:cc -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZvgxIrUsRnQSP49GnKjubAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIxMTMzNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDkzMDJkNTQ2ZTA2OGMyZmQ3Njc3ZDlkNTIwMGFkZDM2YzhiY2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq7bdRsM0dWOoubMMGoemBa92IQD Vp8EVxguPxqA2LzRNZzNxDn05A2FfLH5nFUraxoGx1e902gKBDSdev/dyf3RB2q+ mMzNGgOR2aqp5FZ8keK7ZR5r0RQggR6f9Vnk/BOe5rN7EMusRtkwiUn3Dv5pf92P 71JoN5wrSgAHELiUI4xK+bSGKokNvNWAPT0T5oHEBr52Hmak2a3jAqlfOHl3ufZJ z8xeXRGon3LX55Ty4evNUg3BZG53oWAIEvIaNvZBlVn+qTyrEcdThdir7s5DiZyf OzxPzj9Iiiaa+lJunenefgFEh/c3RYm1hh/oI4wnh8MGzk5DHdWNiwRNNwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFA2TAtVG4GjC/XZ32dUgCt02yLzVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzAxMDE2 MS1iODQwLTQ0OTctYWZiZS00YmVmNDNkM2ZiMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvMDEwMTYx LWI4NDAtNDQ5Ny1hZmJlLTRiZWY0M2QzZmIxNy8xL0RaTUMxVWJnYU1MOWRuZlox U0FLM1RiSXZOVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWHgMA0EAgACMAcDBQMqBgjAMA0GCSqGSIb3 DQEBCwUAA4IBAQBhvzQ0gWK91dlH/WLcDi2b2Cr4MC1zZA+bN7rJNG3wjNf20ILR S7Feb0y7Wmv0cEou4JhoiO1ykMOXEg0yqIB3MhsyQ4v3O8iuSRGYtkDNFBUjA06a DIY1N8BLDQcHVVjIr9woaDT49ChPaNdYYk7PxhbSLRj3MsiTmcz+nNCyad+lfUu8 S0KCP163mpsukf8KkR9Ju/nk/ovlvXWKJLvW/drA7kfv+e9hSZ2EOMSj2XWsmmtK 12kU9TvHNbXhkF3t6KqO8gMKffqHWERahEeUctGdBYczF69+OJIo7Q9yLUmWJrit fWK5sJBkk0E+X8oS1mrbMZX+/6aMKUvQ+nPM -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:19 2026 by rpki-client