This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer (raw, json) Hash identifier: bv9UZevy8Nbnp0YfH5/+MLRWx+Ez1zc3zrcxRDbFZn4= Subject key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8B41B345E549D219ED0B5252133BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.127.28.0/22 IP: 185.245.100.0/22 IP: 2a0c:3c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b4:1b:34:5e:54:9d:21:9e:d0:b5:25:21:33:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:94:ae:31:b2:43:62:2b:7f:cb:8a:53:e5: 12:80:d5:d1:6b:86:f2:8f:21:fd:84:7e:31:0c:8e: fd:c9:0b:ef:d8:b2:63:40:00:55:25:55:c1:2a:a9: c2:15:3b:20:f7:ad:74:29:02:f6:01:68:7b:a0:32: 78:9d:14:ef:d5:1d:d2:cd:2d:8a:48:05:bd:2b:ec: ed:f0:51:b1:8d:dd:25:ee:02:96:98:49:ae:13:02: 9c:76:0b:29:2f:a5:2a:1a:89:91:f1:ab:02:b0:95: a8:35:93:8b:f9:9a:ee:f2:d3:96:8e:13:10:b9:11: 9a:ba:2f:0a:ce:3b:bf:d8:e3:f3:d1:12:4f:e3:19: ec:7e:2d:a6:13:83:e7:d9:5b:57:e5:0c:10:c6:df: c8:28:1c:74:06:f8:ba:54:f3:cb:75:9b:ea:4f:57: 21:89:9a:8f:a2:8e:2f:f8:e3:df:03:8f:c3:45:4b: 25:0e:c8:93:fd:49:65:87:b9:9a:78:cc:cc:7f:88: 99:e7:3d:20:7a:2f:64:c0:47:15:49:88:ee:d4:9e: 8f:8f:22:a6:1c:af:a6:b5:72:52:86:f6:e4:61:ce: 32:22:fe:a7:7a:6e:18:6a:dc:4d:e3:ae:db:7b:4c: 42:d3:ff:c8:cb:d5:11:a6:4c:88:3c:fd:9c:4c:8a: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.28.0/22 185.245.100.0/22 IPv6: 2a0c:3c0::/32 Signature Algorithm: sha256WithRSAEncryption 39:6d:75:f9:3d:76:09:d7:9a:7a:1c:ae:4b:a9:a9:63:11:39: a5:4a:45:db:c5:5e:ff:94:52:2e:47:b5:45:cd:95:0c:6c:bd: 96:d5:da:5f:b0:e7:f4:7a:ee:e1:ec:10:fd:d6:ff:5a:46:83: 78:c3:7f:00:3d:01:cd:9b:a3:39:c1:24:9b:cb:42:18:53:95: 47:19:8b:75:9a:9e:7e:f7:90:98:e5:cf:fe:c5:e1:ba:d5:97: 35:ea:03:bf:0b:76:15:06:46:e3:b3:65:46:a2:95:4a:72:1d: 1e:63:2d:7e:7c:f1:81:a2:93:65:72:14:ae:ca:a2:f7:f5:58: 12:f4:99:d8:0a:1c:67:a0:45:9f:3a:e8:45:8c:4a:c8:e6:14: 69:c0:93:7c:9e:87:cd:e1:58:0c:f3:c9:10:43:92:c2:01:88: 55:89:c1:d0:4e:48:10:01:6b:8b:ce:12:28:a7:53:69:0c:82: f0:a8:61:9d:36:7d:4e:cc:c9:81:c2:d9:04:5e:d0:05:bc:1b: 46:ef:e1:fa:37:e9:aa:fa:79:12:be:72:49:1e:fb:31:4c:d8: 65:fb:9c:7e:6a:b0:1c:58:1d:aa:85:83:38:2f:e3:69:33:c8: a0:dd:77:ab:a7:37:79:bb:8f:50:e6:12:95:cf:13:2b:4d:cf: f5:72:01:b2 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6yLQbNF5UnSGe0LUlITO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTBiMGRjYjZhZDBjYTgxNmQyYmQyMDRlMTNmMWVhZjExMDQyNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OyUrjGyQ2Irf8uKU+USgNXRa4by jyH9hH4xDI79yQvv2LJjQABVJVXBKqnCFTsg9610KQL2AWh7oDJ4nRTv1R3SzS2K SAW9K+zt8FGxjd0l7gKWmEmuEwKcdgspL6UqGomR8asCsJWoNZOL+Zru8tOWjhMQ uRGaui8Kzju/2OPz0RJP4xnsfi2mE4Pn2VtX5QwQxt/IKBx0Bvi6VPPLdZvqT1ch iZqPoo4v+OPfA4/DRUslDsiT/Ullh7maeMzMf4iZ5z0gei9kwEcVSYju1J6PjyKm HK+mtXJShvbkYc4yIv6nem4YatxN467be0xC0//Iy9URpkyIPP2cTIpCtwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFA4LDctq0MqBbSvSBOE/Hq8RBCdMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2YxOWQw Ni1jN2ZhLTQwZTUtYjgxMy03ZmUzOTUxYTczNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZjE5ZDA2 LWM3ZmEtNDBlNS1iODEzLTdmZTM5NTFhNzM1Yi8xL0Rnc055MnJReW9GdEs5SUU0 VDhlcnhFRUowdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuX8cAwQCufVkMA0EAgACMAcDBQAqDAPAMA0G CSqGSIb3DQEBCwUAA4IBAQA5bXX5PXYJ15p6HK5LqaljETmlSkXbxV7/lFIuR7VF zZUMbL2W1dpfsOf0eu7h7BD91v9aRoN4w38APQHNm6M5wSSby0IYU5VHGYt1mp5+ 95CY5c/+xeG61Zc16gO/C3YVBkbjs2VGopVKch0eYy1+fPGBopNlchSuyqL39VgS 9JnYChxnoEWfOuhFjErI5hRpwJN8nofN4VgM88kQQ5LCAYhVicHQTkgQAWuLzhIo p1NpDILwqGGdNn1OzMmBwtkEXtAFvBtG7+H6N+mq+nkSvnJJHvsxTNhl+5x+arAc WB2qhYM4L+NpM8ig3Xerpzd5u49Q5hKVzxMrTc/1cgGy -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:50 2026 by rpki-client