This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer (raw, json) Hash identifier: UhbFc69mx3ASp2H27BAQQ4RoadXRVUzlS+qkf6WpW+w= Subject key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B97189BC9C387BDD655E4914F5FAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.176.112.0/22 IP: 2a0d:74c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:18:9b:c9:c3:87:bd:d6:55:e4:91:4f:5f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:99:5d:08:f9:8c:62:b3:e5:29:33:09:72: 58:d4:fe:cb:1a:53:f5:bb:03:e8:ea:6b:ab:5c:62: 37:9a:7a:07:d6:5c:35:f4:c9:f1:91:85:00:4e:51: 48:1c:e1:c8:48:a2:57:f5:2f:06:2b:bc:4f:91:a7: f7:0c:4c:71:8a:56:cd:28:99:51:fd:31:6d:53:6f: 17:64:b0:d0:cc:0a:41:a6:cc:25:b8:9b:bc:16:39: 47:14:15:41:9b:14:24:76:d1:dd:01:22:26:d3:b1: 2c:14:23:98:ae:ce:8c:7f:d4:ca:4d:fe:fb:63:f0: 1c:26:46:75:33:83:fa:bc:3a:d8:b7:52:5e:61:05: 17:02:89:5e:87:39:f3:d1:a5:d8:d6:a1:89:03:1c: 90:5a:25:88:ee:ef:9d:c1:fc:02:07:8d:20:eb:d9: 62:91:cb:0f:60:a1:1e:b3:3d:4f:e7:52:ea:4b:a6: 76:6e:d4:f3:0d:b0:c6:66:ca:ee:4d:bd:e6:0c:62: c8:1c:e0:3a:0f:db:e7:d4:28:50:63:91:00:ef:72: 17:19:c4:19:d2:ab:a4:5a:c8:22:b1:d4:5d:2c:0b: 0d:d2:dc:20:79:17:3e:12:bd:d0:e9:31:4f:10:65: b3:d8:7b:60:2b:1f:3b:c4:49:5b:b8:55:50:9d:0d: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.112.0/22 IPv6: 2a0d:74c0::/29 Signature Algorithm: sha256WithRSAEncryption 78:9a:41:ba:fd:91:99:49:7a:a3:84:09:96:ea:e4:28:02:0d: f5:4a:04:74:78:97:e2:23:d5:4a:89:a1:7b:99:83:3d:3c:5d: 04:4e:e4:95:a1:61:fa:aa:48:94:81:8a:47:d8:2d:76:58:c3: 59:3a:3c:8d:f7:44:de:7b:a4:54:c0:c8:72:96:79:97:7e:39: fc:c1:17:6b:a3:38:91:bc:e4:23:a6:ad:64:f5:5e:fe:27:e2: 54:ff:15:6f:11:b5:00:5a:85:99:ea:0f:97:ab:f9:c2:1c:6f: ec:1a:c3:f6:58:5d:9f:29:94:fa:e1:53:27:c8:34:fd:22:28: 94:29:04:7a:2a:10:f0:8e:89:7d:d1:ba:92:53:49:1f:c2:4e: 4e:ea:ef:16:5f:cd:fb:55:6f:64:4b:95:d4:1b:6c:65:8b:ec: 4c:9f:dc:25:0f:4d:0e:6a:38:9c:b4:26:03:04:73:0a:d3:34: a5:08:b5:07:63:2f:0a:e2:20:81:b4:58:3c:1b:9d:a3:c6:80: e5:2d:40:76:d7:6c:ea:a6:e4:c1:22:2a:be:1b:bb:6f:91:03: 52:fa:e8:93:d6:f8:50:97:74:31:08:a0:dc:30:f8:4c:1a:21: f1:36:8a:04:4d:8c:38:55:ad:b8:b6:d7:32:76:99:f6:8e:f0: 4e:19:63:7e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W5cYm8nDh73WVeSRT1+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGVkNjZkMmM1YTQ5M2EwOTUzNDM1N2U1Y2EyNmYwM2QxYTRkZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeKZXQj5jGKz5SkzCXJY1P7LGlP1 uwPo6murXGI3mnoH1lw19MnxkYUATlFIHOHISKJX9S8GK7xPkaf3DExxilbNKJlR /TFtU28XZLDQzApBpswluJu8FjlHFBVBmxQkdtHdASIm07EsFCOYrs6Mf9TKTf77 Y/AcJkZ1M4P6vDrYt1JeYQUXAolehznz0aXY1qGJAxyQWiWI7u+dwfwCB40g69li kcsPYKEesz1P51LqS6Z2btTzDbDGZsruTb3mDGLIHOA6D9vn1ChQY5EA73IXGcQZ 0qukWsgisdRdLAsN0twgeRc+Er3Q6TFPEGWz2HtgKx87xElbuFVQnQ2nsQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFA3tZtLFpJOglTQ1flyibwPRpN3UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2Q5Y2M1 Yi1mODY4LTQzZmUtOWM1Yy0zN2I5NmZmYmE3NmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvZDljYzVi LWY4NjgtNDNmZS05YzVjLTM3Yjk2ZmZiYTc2YS8xL0RlMW0wc1drazZDVk5EVi1Y S0p2QTlHazNkUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwbBwMA0EAgACMAcDBQMqDXTAMA0GCSqGSIb3 DQEBCwUAA4IBAQB4mkG6/ZGZSXqjhAmW6uQoAg31SgR0eJfiI9VKiaF7mYM9PF0E TuSVoWH6qkiUgYpH2C12WMNZOjyN90Tee6RUwMhylnmXfjn8wRdroziRvOQjpq1k 9V7+J+JU/xVvEbUAWoWZ6g+Xq/nCHG/sGsP2WF2fKZT64VMnyDT9IiiUKQR6KhDw jol90bqSU0kfwk5O6u8WX837VW9kS5XUG2xli+xMn9wlD00OajictCYDBHMK0zSl CLUHYy8K4iCBtFg8G52jxoDlLUB212zqpuTBIiq+G7tvkQNS+uiT1vhQl3QxCKDc MPhMGiHxNooETYw4Va24ttcydpn2jvBOGWN+ -----END CERTIFICATE-----Generated at Mon Jan 26 05:53:04 2026 by rpki-client