This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer File: DigqFcGl0VS72ocrNXYHqR-VCqU.cer (raw, json) Hash identifier: 5kOsKdFXKXzqMTRtDB0/BBsirwTkgJvoTnZQUo5BvhM= Subject key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A34B249F336D1CD0C64EDFA75F2504 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.107.82.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4b:24:9f:33:6d:1c:d0:c6:4e:df:a7:5f:25:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e282a15c1a5d154bbda872b357607a91f950aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1c:14:c2:36:ee:83:f6:b0:65:ad:ec:6c:03: ed:2e:31:fd:60:32:89:67:0d:6b:df:60:5d:fd:94: f0:9f:3b:18:78:29:f4:3c:ae:d4:f0:a3:2c:6f:61: 8b:29:0e:c9:5a:65:73:db:d5:99:ea:b4:58:09:9a: c1:c7:d2:20:cc:a0:3a:22:27:2b:c9:90:0f:a2:3b: 78:3d:5e:cd:98:21:75:4d:1b:55:e0:8f:42:c9:52: 20:86:23:e3:5d:09:b3:b1:68:fc:37:34:7b:ec:08: bb:63:49:75:3b:c1:01:5c:ba:bd:ce:93:fd:af:ed: d0:23:bc:99:8c:cc:5d:61:73:2e:1f:89:15:53:5d: cc:6e:76:82:54:40:9b:cc:8b:0f:c4:05:21:54:f8: 2d:a0:7d:1d:8c:a8:06:8f:ca:3b:4c:5b:20:cb:6f: 9c:f4:ac:8e:81:f1:d3:e0:96:c7:63:f4:a5:d9:e4: fa:a9:99:a8:f5:99:e4:da:79:a6:d6:ab:eb:c8:8e: 45:7d:3a:d8:15:70:82:ef:5d:20:d7:1b:7d:09:7d: a1:ea:76:d4:a4:61:1e:7c:71:34:f8:82:08:02:79: 09:17:8b:18:cd:07:88:22:19:0e:d6:62:64:b3:ff: b4:60:7d:a8:ae:6b:82:e0:fa:10:6a:37:0c:c5:5c: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.82.0/24 Signature Algorithm: sha256WithRSAEncryption 43:28:23:d2:30:6a:4c:4d:a1:1a:66:02:5d:6d:b9:1e:ce:6d: 14:17:ba:8d:4b:6e:48:f2:81:61:60:bb:49:b8:ba:f7:71:05: 77:d3:4d:00:0e:3f:fa:3b:f4:79:f7:6d:a3:29:39:f6:df:d9: 3b:6d:9e:9a:04:33:78:7c:0d:1f:9c:d6:c2:45:d9:17:1c:fb: dd:a1:47:21:52:da:f3:a2:9e:4b:43:33:28:87:8b:aa:3e:43: 12:52:87:a3:e3:15:4f:d4:c0:9a:73:89:e8:22:cd:0b:0b:29: 41:df:86:a8:a7:04:bb:b5:a4:30:1e:b2:60:9e:0c:af:41:f0: b7:57:6a:10:89:e6:12:7b:8c:29:59:af:8a:00:ad:9c:05:70: b7:d9:d9:46:f5:4e:29:de:bf:4e:fc:0e:65:18:ed:1e:f3:f5: 9c:fa:d7:35:18:75:5f:44:cc:4b:a3:7b:bb:5b:ea:36:a5:e1: f3:5c:14:05:53:e9:96:29:8d:bb:dc:d7:f0:ac:e6:9f:e8:8c: fe:19:f5:4b:d2:2a:7a:3b:5a:8b:cc:d2:3c:4c:45:5d:4a:44: b4:b7:14:ef:31:72:3a:f0:33:47:07:80:d3:9f:a6:c1:19:1e: 6b:58:5e:76:17:6c:c9:25:0c:4f:67:e8:07:32:5b:d4:af:ef: 4e:ed:6f:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o0sknzNtHNDGTt+nXyUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTI4MmExNWMxYTVkMTU0YmJkYTg3MmIzNTc2MDdhOTFmOTUwYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xwUwjbug/awZa3sbAPtLjH9YDKJ Zw1r32Bd/ZTwnzsYeCn0PK7U8KMsb2GLKQ7JWmVz29WZ6rRYCZrBx9IgzKA6Iicr yZAPojt4PV7NmCF1TRtV4I9CyVIghiPjXQmzsWj8NzR77Ai7Y0l1O8EBXLq9zpP9 r+3QI7yZjMxdYXMuH4kVU13MbnaCVECbzIsPxAUhVPgtoH0djKgGj8o7TFsgy2+c 9KyOgfHT4JbHY/Sl2eT6qZmo9Znk2nmm1qvryI5FfTrYFXCC710g1xt9CX2h6nbU pGEefHE0+IIIAnkJF4sYzQeIIhkO1mJks/+0YH2ormuC4PoQajcMxVw9fwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFA4oKhXBpdFUu9qHKzV2B6kflQqlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2RhZjFh ZS1kNWViLTRjYTQtOGFhZi03ODc0MWFjOTNiMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvZGFmMWFl LWQ1ZWItNGNhNC04YWFmLTc4NzQxYWM5M2IzMC8xL0RpZ3FGY0dsMFZTNzJvY3JO WFlIcVItVkNxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWtSMA0GCSqGSIb3DQEBCwUAA4IBAQBDKCPS MGpMTaEaZgJdbbkezm0UF7qNS25I8oFhYLtJuLr3cQV3000ADj/6O/R5922jKTn2 39k7bZ6aBDN4fA0fnNbCRdkXHPvdoUchUtrzop5LQzMoh4uqPkMSUoej4xVP1MCa c4noIs0LCylB34aopwS7taQwHrJgngyvQfC3V2oQieYSe4wpWa+KAK2cBXC32dlG 9U4p3r9O/A5lGO0e8/Wc+tc1GHVfRMxLo3u7W+o2peHzXBQFU+mWKY273NfwrOaf 6Iz+GfVL0ip6O1qLzNI8TEVdSkS0txTvMXI68DNHB4DTn6bBGR5rWF52F2zJJQxP Z+gHMlvUr+9O7W+m -----END CERTIFICATE-----Generated at Sun Jan 25 18:23:10 2026 by rpki-client