This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer File: Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer (raw, json) Hash identifier: 9PwKNRvmEBiP//1q9HmQIzbCLN/+TV2HVRdTKdAeGH8= Subject key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1812967B5959E9DE981989B6F64A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16204 AS: 42214 AS: 44574 AS: 59676 IP: 91.230.181.0/24 IP: 91.246.28.0/23 IP: 95.215.174.0/23 IP: 193.104.113.0/24 IP: 193.150.34.0/24 IP: 193.227.246.0/23 IP: 193.238.80.0/22 IP: 2001:678:47c::/48 IP: 2001:678:498::/48 IP: 2001:678:49c::/48 IP: 2001:678:4a0::/48 IP: 2001:678:4a4::/48 IP: 2001:678:4bc::/48 IP: 2001:67c:16d0::/47 IP: 2001:67c:1954::/48 IP: 2001:67c:2278::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:18:12:96:7b:59:59:e9:de:98:19:89:b6:f6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:63:38:0b:88:77:42:68:c4:9f:d4:ba:8a: f0:8b:50:fc:ad:93:9d:41:35:01:a3:17:cc:7b:8a: c2:09:11:90:59:09:7c:df:1b:af:ea:fc:cc:0a:37: 86:57:48:07:c6:fa:35:fd:e7:6e:bb:10:c1:e6:de: 35:02:f9:6a:1d:43:24:d0:bf:13:d0:3f:d6:93:a2: 21:67:05:0b:fb:34:a4:7d:c9:a0:2a:72:dc:de:b1: d2:2a:ed:2e:4d:35:c8:9a:58:43:c4:ad:f1:62:43: d7:a5:44:29:00:81:91:69:6c:f1:10:67:d5:be:98: 78:26:07:d5:9e:cf:40:0c:7d:22:cb:6e:5a:61:58: 96:a6:1d:a9:a1:85:5c:fd:df:fe:e8:4c:b7:e4:fa: 53:b4:e7:00:79:a2:96:2e:d1:97:d2:57:68:94:1e: 99:14:0f:4e:ef:04:24:25:37:ec:39:e5:f6:90:33: 8b:0e:12:3e:42:10:16:62:fa:1f:75:7d:18:b9:de: 2a:17:53:4f:62:18:29:cd:77:dd:72:fe:fc:d1:eb: 55:52:23:b6:b9:ea:51:d6:5b:74:40:c8:75:0f:8a: 6f:0f:46:b3:38:f6:0a:96:a5:1c:0c:74:be:d1:53: be:1d:30:18:40:4e:91:47:70:9f:65:64:98:20:bc: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.181.0/24 91.246.28.0/23 95.215.174.0/23 193.104.113.0/24 193.150.34.0/24 193.227.246.0/23 193.238.80.0/22 IPv6: 2001:678:47c::/48 2001:678:498::/48 2001:678:49c::/48 2001:678:4a0::/48 2001:678:4a4::/48 2001:678:4bc::/48 2001:67c:16d0::/47 2001:67c:1954::/48 2001:67c:2278::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16204 42214 44574 59676 Signature Algorithm: sha256WithRSAEncryption 43:b5:95:32:a4:ba:c7:88:ea:e8:b3:20:c8:dc:3d:48:e8:70: 5f:0b:1e:cf:c6:3c:f7:80:eb:f5:02:a1:61:21:4e:29:58:a0: c7:4d:b3:be:3d:3b:f8:a1:61:e4:83:4f:3d:0d:97:a2:bf:0b: b5:f4:a2:e2:1b:a1:4a:15:32:02:72:bd:ad:3f:21:be:b9:3e: 02:9c:b3:f2:f7:46:b3:ef:b4:96:88:c0:6e:68:9a:ad:17:61: c8:b8:e7:6f:8a:e2:b0:8e:da:81:8d:d4:b6:c0:16:93:3e:92: c0:3e:60:c8:ce:b0:93:2d:fe:68:19:a4:8b:b7:b8:96:65:00: 2d:de:11:f9:7a:17:c9:4a:87:11:d5:d8:6e:b2:c1:6f:c9:d2: e7:80:e0:c5:43:a0:84:6d:16:fa:56:46:4e:1e:87:81:5d:2c: 4a:4e:15:c1:ee:e0:e2:73:09:38:15:20:16:76:fd:62:c8:24: 42:dd:c4:41:1f:41:29:35:db:8e:44:4d:7a:fe:02:24:0d:53: 24:cc:a9:f7:23:a3:df:17:45:05:56:37:1c:46:e5:34:4f:59: ae:bb:0c:20:2d:f2:14:2f:71:f2:4d:73:fe:36:1b:3b:0e:cd: 43:56:e0:d1:f5:fa:ac:a3:bb:97:1b:6c:ba:20:93:33:b1:c8: 6d:93:88:19 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgISAZt5fxgSlntZWenemBmJtvZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTJlNGZkMjE5ZjViNzdjZTgwY2RmYWY5ZTNhNjQ0MWRlYzUwMDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzNjOAuId0JoxJ/Uuorwi1D8rZOd QTUBoxfMe4rCCRGQWQl83xuv6vzMCjeGV0gHxvo1/eduuxDB5t41AvlqHUMk0L8T 0D/Wk6IhZwUL+zSkfcmgKnLc3rHSKu0uTTXImlhDxK3xYkPXpUQpAIGRaWzxEGfV vph4JgfVns9ADH0iy25aYViWph2poYVc/d/+6Ey35PpTtOcAeaKWLtGX0ldolB6Z FA9O7wQkJTfsOeX2kDOLDhI+QhAWYvofdX0Yud4qF1NPYhgpzXfdcv780etVUiO2 uepR1lt0QMh1D4pvD0azOPYKlqUcDHS+0VO+HTAYQE6RR3CfZWSYILyzPwIDAQAB o4IDLjCCAyowHQYDVR0OBBYEFA4uT9IZ9bd86Azfr546ZEHexQBCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2UxMTIy NC02MWM3LTQ3ODYtODZlOS0yMzhmZWU2OTI0MzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvZTExMjI0 LTYxYzctNDc4Ni04NmU5LTIzOGZlZTY5MjQzMC8xL0RpNVAwaG4xdDN6b0ROLXZu anBrUWQ3RkFFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGeBggrBgEF BQcBBwEB/wSBjjCBizAwBAIAATAqAwQAW+a1AwQBW/YcAwQBX9euAwQAwWhxAwQA wZYiAwQBweP2AwQCwe5QMFcEAgACMFEDBwAgAQZ4BHwDBwAgAQZ4BJgDBwAgAQZ4 BJwDBwAgAQZ4BKADBwAgAQZ4BKQDBwAgAQZ4BLwDBwEgAQZ8FtADBwAgAQZ8GVQD BwAgAQZ8IngwKAYIKwYBBQUHAQgBAf8EGTAXoBUwEwICP0wCAwCk5gIDAK4eAgMA 6RwwDQYJKoZIhvcNAQELBQADggEBAEO1lTKkuseI6uizIMjcPUjocF8LHs/GPPeA 6/UCoWEhTilYoMdNs749O/ihYeSDTz0Nl6K/C7X0ouIboUoVMgJyva0/Ib65PgKc s/L3RrPvtJaIwG5omq0XYci452+K4rCO2oGN1LbAFpM+ksA+YMjOsJMt/mgZpIu3 uJZlAC3eEfl6F8lKhxHV2G6ywW/J0ueA4MVDoIRtFvpWRk4eh4FdLEpOFcHu4OJz CTgVIBZ2/WLIJELdxEEfQSk1245ETXr+AiQNUyTMqfcjo98XRQVWNxxG5TRPWa67 DCAt8hQvcfJNc/42GzsOzUNW4NH1+qyju5cbbLogkzOxyG2TiBk= -----END CERTIFICATE-----Generated at Sun Jan 25 07:44:37 2026 by rpki-client