This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer File: Di1CDmYchlcQif8LUZZahuDXvHU.cer (raw, json) Hash identifier: LyzIiJN41Q+Df3YRB4JUngwyEoBKqcD8fngdYtPEQmU= Subject key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E7D07E74DF2E8D6D83F0B26F5A470 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39743 IP: 37.221.160.0/20 IP: 109.163.224.0/20 IP: 185.5.172.0/22 IP: 195.60.76.0/23 IP: 2a03:5180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7d:07:e7:4d:f2:e8:d6:d8:3f:0b:26:f5:a4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:67:3f:21:dd:8b:fd:de:8d:ba:64:41:41:3a: ae:9c:37:5f:cb:d8:64:97:7d:7f:a7:83:4f:73:2c: e8:39:97:03:bb:83:3a:97:2b:71:f3:8a:9e:f2:3c: 45:9c:9f:e6:96:a1:e6:54:25:22:43:a8:72:11:9d: 99:d2:56:8b:f3:d0:55:61:7a:92:da:cb:18:c1:b4: 4f:df:d2:e7:6c:00:95:d5:e2:34:37:2c:b0:a5:dc: ef:8d:22:7b:75:93:da:f7:8c:78:e8:26:70:37:19: bc:12:9c:73:74:f8:fc:ad:0f:b7:56:2a:21:36:5e: bd:96:fb:b3:27:88:eb:dc:85:f3:8b:fd:14:bd:9f: 5b:81:e9:cf:b2:77:a3:24:58:3a:f0:20:17:4e:dd: 99:8b:9f:b1:2a:38:ec:36:63:95:b9:fc:a0:86:63: 78:f8:79:13:5d:37:ff:44:a2:f2:68:1a:69:33:1b: 95:c7:c7:85:c2:7d:67:bd:85:17:dd:ee:d3:34:13: 5c:1f:38:56:2b:55:c6:9c:55:89:5f:23:0e:bd:8e: fa:d9:60:89:23:f6:b4:87:34:c9:96:86:8b:24:3d: 93:2d:ea:d1:02:68:32:fb:c2:36:c1:d8:21:56:00: 68:a5:cd:76:3b:32:7e:d8:74:bb:d1:49:43:bf:95: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.160.0/20 109.163.224.0/20 185.5.172.0/22 195.60.76.0/23 IPv6: 2a03:5180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39743 Signature Algorithm: sha256WithRSAEncryption 93:4e:60:a2:41:15:80:95:45:08:ed:70:85:b0:6b:14:64:2d: 96:55:bf:26:f4:00:83:c9:9a:27:ca:7d:e9:01:94:83:96:11: a7:d8:fb:c8:c0:c0:7c:4b:f4:db:ae:98:3b:1b:7b:fe:bc:66: af:25:7d:16:da:04:13:4b:6a:c3:38:5b:98:ca:ad:c1:78:35: f9:d2:f8:cf:d3:c3:4f:9c:5a:56:46:d3:5c:32:2d:5f:f5:1a: 02:03:3e:c7:65:bf:19:a9:c7:c1:08:17:29:5f:33:68:70:18: 11:75:2a:91:29:1e:46:a6:d2:2f:16:8d:7b:6d:b2:62:b9:65: 7c:6a:55:3e:24:aa:0d:af:31:b1:d9:2b:64:eb:34:50:3b:74: dc:5e:35:30:e0:0c:55:58:b4:6f:12:00:b2:34:e1:60:10:4d: b7:17:0e:ff:83:04:29:79:1c:58:39:a4:2e:03:53:ab:54:dc: cb:ef:cf:c9:e5:00:09:e7:07:a2:c8:0d:56:a9:c4:b8:7e:5e: 9a:4f:c0:6c:f6:3f:89:48:6e:71:34:73:75:00:74:3f:fa:ab: 35:a5:aa:07:46:4c:ae:37:f2:4d:20:b7:ff:da:9c:9d:52:4b: 44:87:c5:e9:df:a6:97:4a:3b:8a:8a:c0:9c:d2:e4:10:31:25: a3:5a:5f:c3 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5fn0H503y6NbYPwsm9aRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTJkNDIwZTY2MWM4NjU3MTA4OWZmMGI1MTk2NWE4NmUwZDdiYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmc/Id2L/d6NumRBQTqunDdfy9hk l31/p4NPcyzoOZcDu4M6lytx84qe8jxFnJ/mlqHmVCUiQ6hyEZ2Z0laL89BVYXqS 2ssYwbRP39LnbACV1eI0NyywpdzvjSJ7dZPa94x46CZwNxm8EpxzdPj8rQ+3Vioh Nl69lvuzJ4jr3IXzi/0UvZ9bgenPsnejJFg68CAXTt2Zi5+xKjjsNmOVufyghmN4 +HkTXTf/RKLyaBppMxuVx8eFwn1nvYUX3e7TNBNcHzhWK1XGnFWJXyMOvY762WCJ I/a0hzTJloaLJD2TLerRAmgy+8I2wdghVgBopc12OzJ+2HS70UlDv5X/GwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFA4tQg5mHIZXEIn/C1GWWobg17x1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzc1MDAw OS02ZmExLTRlZjEtODMyYS03NTE4OGIzYzExMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNzUwMDA5 LTZmYTEtNGVmMS04MzJhLTc1MTg4YjNjMTEyZS8xL0RpMUNEbVljaGxjUWlmOExV WlphaHVEWHZIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEJd2gAwQEbaPgAwQCuQWsAwQBwzxMMA0EAgAC MAcDBQAqA1GAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCbPzANBgkqhkiG9w0B AQsFAAOCAQEAk05gokEVgJVFCO1whbBrFGQtllW/JvQAg8maJ8p96QGUg5YRp9j7 yMDAfEv0266YOxt7/rxmryV9FtoEE0tqwzhbmMqtwXg1+dL4z9PDT5xaVkbTXDIt X/UaAgM+x2W/GanHwQgXKV8zaHAYEXUqkSkeRqbSLxaNe22yYrllfGpVPiSqDa8x sdkrZOs0UDt03F41MOAMVVi0bxIAsjThYBBNtxcO/4MEKXkcWDmkLgNTq1Tcy+/P yeUACecHosgNVqnEuH5emk/AbPY/iUhucTRzdQB0P/qrNaWqB0ZMrjfyTSC3/9qc nVJLRIfF6d+ml0o7iorAnNLkEDElo1pfww== -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:55 2026 by rpki-client