This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer File: DbPDFk09jCZEzymzI2dhpXHuWLo.cer (raw, json) Hash identifier: mueDqZWfphITyFp7Zlw3oJ3cfnxa+MF8ugrEEHk/JCM= Subject key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F809155185B9BC71FE5CE9CDBAB8B75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.35.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:91:55:18:5b:9b:c7:1f:e5:ce:9c:db:ab:8b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:16:42:75:18:06:aa:5d:f5:09:ca:b4:26: 5e:91:05:42:8e:ab:9d:cc:3f:ab:77:6b:2b:c8:23: c8:c1:d7:0e:e8:c3:17:42:c1:f1:c1:7c:e2:ff:99: 2a:e5:a4:9f:73:b1:18:ff:2f:78:4a:05:22:2d:2e: 5c:e2:d1:3b:88:0c:3d:33:c6:65:7a:ad:2d:b6:d1: 26:31:3b:5a:0a:4a:bf:a3:b7:b4:88:fb:9f:e5:28: 15:a5:ed:f9:c3:9b:e6:16:6e:f0:f0:00:df:d3:17: 05:2f:c1:ef:7c:27:b5:44:ee:6c:36:e7:ab:41:bd: 5f:6a:30:9d:19:7e:d3:64:61:eb:15:65:32:60:ef: f8:06:ce:65:01:b0:ad:11:e1:51:c6:4d:96:f8:f1: 40:ba:da:fa:e1:da:ce:8a:56:60:7a:a7:91:ce:89: d7:1f:ca:23:84:3c:8c:98:d4:95:75:67:71:75:fe: ec:62:a4:e3:de:7a:f5:9f:70:4f:39:4c:d5:19:03: e4:8a:50:d6:a9:a5:5f:4d:8e:f9:77:57:5e:a8:12: af:84:76:81:d7:57:48:de:87:84:fd:44:7a:c8:4f: bc:46:ac:71:3e:09:ee:c8:32:7c:01:be:20:e5:db: e1:58:7c:bb:c1:40:43:60:a8:36:dd:be:4d:4c:4f: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.252.0/22 Signature Algorithm: sha256WithRSAEncryption 10:80:fb:37:a1:70:9e:d3:1e:b2:9f:62:72:ef:43:f0:14:c8: 2e:94:3e:56:58:87:cc:10:f8:a2:72:3f:8e:4c:93:6c:e3:7f: 25:91:fa:ec:c7:2d:ce:09:44:9d:38:f1:c3:6b:a1:1b:32:e3: b4:a6:84:cc:0f:62:54:e1:42:6c:bc:c5:3d:67:e6:ca:4f:e2: fc:b4:d6:e6:6e:63:35:76:59:7d:d5:de:1c:78:26:8f:38:3d: 36:15:13:60:30:d7:20:74:79:6f:0b:72:10:4a:27:0f:b2:0b: a6:eb:1a:01:3b:11:42:59:e4:91:77:00:fe:81:6a:e3:19:d0: 7a:d9:b7:5c:cd:7d:87:31:a7:0d:e0:6a:f7:a4:de:1c:e0:2a: 32:f8:24:6b:76:92:a8:50:be:8c:de:5c:ad:1a:b8:ed:db:5f: c6:b5:05:11:17:0a:32:53:6a:6a:29:82:5e:71:68:bb:6f:c9: 1b:55:29:20:cb:20:3a:5c:00:00:b1:22:c0:e4:7d:b7:b1:62: 47:ed:c3:33:a9:03:bd:1b:d7:39:6e:6f:e0:ce:a0:46:93:3a: 8a:f1:2e:16:6f:cb:f8:e2:5d:d9:97:bb:e2:bb:48:c3:90:4c: 06:cf:b1:67:21:9d:14:c8:29:3a:da:1a:79:54:97:86:5d:51: fe:2a:88:fc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/gJFVGFubxx/lzpzbq4t1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGIzYzMxNjRkM2Q4YzI2NDRjZjI5YjMyMzY3NjFhNTcxZWU1OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTgWQnUYBqpd9QnKtCZekQVCjqud zD+rd2sryCPIwdcO6MMXQsHxwXzi/5kq5aSfc7EY/y94SgUiLS5c4tE7iAw9M8Zl eq0tttEmMTtaCkq/o7e0iPuf5SgVpe35w5vmFm7w8ADf0xcFL8HvfCe1RO5sNuer Qb1fajCdGX7TZGHrFWUyYO/4Bs5lAbCtEeFRxk2W+PFAutr64drOilZgeqeRzonX H8ojhDyMmNSVdWdxdf7sYqTj3nr1n3BPOUzVGQPkilDWqaVfTY75d1deqBKvhHaB 11dI3oeE/UR6yE+8RqxxPgnuyDJ8Ab4g5dvhWHy7wUBDYKg23b5NTE97HwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFA2zwxZNPYwmRM8psyNnYaVx7li6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzZjZDM2 Ni0zNTU3LTQyYjItODg1Yi0zZDQ2NDM5YWE0MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvNmNkMzY2 LTM1NTctNDJiMi04ODViLTNkNDY0MzlhYTQxYy8xL0RiUERGazA5akNaRXp5bXpJ MmRocFhIdVdMby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwiP8MA0GCSqGSIb3DQEBCwUAA4IBAQAQgPs3 oXCe0x6yn2Jy70PwFMgulD5WWIfMEPiicj+OTJNs438lkfrsxy3OCUSdOPHDa6Eb MuO0poTMD2JU4UJsvMU9Z+bKT+L8tNbmbmM1dll91d4ceCaPOD02FRNgMNcgdHlv C3IQSicPsgum6xoBOxFCWeSRdwD+gWrjGdB62bdczX2HMacN4Gr3pN4c4Coy+CRr dpKoUL6M3lytGrjt21/GtQURFwoyU2pqKYJecWi7b8kbVSkgyyA6XAAAsSLA5H23 sWJH7cMzqQO9G9c5bm/gzqBGkzqK8S4Wb8v44l3Zl7viu0jDkEwGz7FnIZ0UyCk6 2hp5VJeGXVH+Koj8 -----END CERTIFICATE-----Generated at Mon Jan 26 18:20:40 2026 by rpki-client