This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer File: DjagX652BpH3DPtbT2JJlHq63oc.cer (raw, json) Hash identifier: XWNHn/VhBObzEqCuvvLr12ewQKusruT8hZpHdBiidrY= Subject key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A22613673E0DADF477221B384FDB6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3290 IP: 185.124.244.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:26:13:67:3e:0d:ad:f4:77:22:1b:38:4f:db:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e36a05fae760691f70cfb5b4f6249947abade87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:50:fd:9b:b4:c0:38:d5:ee:5d:71:b9:aa: 16:0c:d6:27:42:45:1d:4f:74:65:d1:9a:81:a6:5b: 09:4d:8a:48:c2:e6:f8:73:9c:b8:93:a4:9a:44:ed: 8e:18:0b:57:25:35:ce:8b:aa:46:0b:ee:14:b6:0d: 39:d8:14:2b:15:e3:61:94:a3:93:13:41:db:e0:f4: f1:c9:f4:e4:d7:1c:30:38:ee:d3:3f:fc:2f:18:f1: 6d:d6:af:9f:dd:8d:e8:42:13:b5:46:10:3c:82:3f: 06:2f:c0:56:90:f9:62:49:ba:1d:66:08:7b:12:64: 1b:45:a0:5c:7b:f2:3a:42:2d:9a:42:54:29:06:83: 31:24:9d:ef:b2:ef:eb:ab:e1:7f:91:5b:62:64:eb: 07:4e:3c:2d:be:ca:65:08:2a:90:fc:60:0a:c3:f8: 3d:00:2f:d0:48:9f:8c:da:56:20:53:9c:11:62:a0: 3d:c0:12:8c:1e:1e:9f:54:af:15:e7:df:bd:56:1e: 4a:4f:cd:de:4f:d6:28:9c:d6:ea:df:ee:47:06:3b: 77:97:0c:ca:2b:34:dd:e4:4b:44:e4:77:c7:49:28: 08:a2:d9:c2:d8:ba:c5:e3:56:d4:90:9d:ce:2c:cd: 27:78:9f:af:9a:71:d4:5b:79:11:fc:cd:86:62:db: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.244.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3290 Signature Algorithm: sha256WithRSAEncryption a4:43:f7:f0:01:57:13:9f:2f:3f:43:bb:19:ca:80:5f:fb:51: fe:c4:49:40:1a:8f:24:46:c7:f0:f5:77:a7:b6:7e:e1:1c:cd: 5f:8e:7b:13:18:fd:92:41:68:1b:38:8e:48:10:ea:6a:49:64: bf:e7:8b:7e:ff:8f:f6:28:2b:58:d3:f9:f7:35:ab:0f:70:4b: 0b:0c:6e:7f:6c:78:14:b5:32:f3:00:7a:a3:02:f2:49:92:e6: b3:2e:30:ef:49:ef:66:07:78:c8:4b:fc:c6:3b:ac:16:e5:0e: 4f:b6:dc:96:2d:e4:99:51:c5:43:c0:42:b9:6f:c4:f4:08:8c: 6a:da:1a:15:0e:d0:31:c5:3b:bc:4b:f4:39:77:c8:e2:a1:3c: 1d:85:5d:c8:79:56:db:31:64:4d:1e:09:31:9e:c0:69:ec:42: 91:29:35:ba:2c:72:98:37:22:81:f3:ea:23:bb:4c:70:0c:bb: a2:65:aa:ae:ef:b9:14:91:54:ae:32:d9:e3:0d:03:4e:8b:23: 96:e1:32:a4:dc:8d:b3:73:ed:e3:bf:d3:8b:07:a4:da:4a:37: 62:da:19:60:44:72:d6:7b:35:6a:66:b9:76:ce:95:4d:64:b3: ad:e1:fb:75:23:18:cb:d8:f6:05:0e:a8:96:5d:a4:c1:0b:8c: 7c:52:8b:72 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4oiYTZz4NrfR3Ihs4T9tqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTM2YTA1ZmFlNzYwNjkxZjcwY2ZiNWI0ZjYyNDk5NDdhYmFkZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PpQ/Zu0wDjV7l1xuaoWDNYnQkUd T3Rl0ZqBplsJTYpIwub4c5y4k6SaRO2OGAtXJTXOi6pGC+4Utg052BQrFeNhlKOT E0Hb4PTxyfTk1xwwOO7TP/wvGPFt1q+f3Y3oQhO1RhA8gj8GL8BWkPliSbodZgh7 EmQbRaBce/I6Qi2aQlQpBoMxJJ3vsu/rq+F/kVtiZOsHTjwtvsplCCqQ/GAKw/g9 AC/QSJ+M2lYgU5wRYqA9wBKMHh6fVK8V59+9Vh5KT83eT9YonNbq3+5HBjt3lwzK KzTd5EtE5HfHSSgIotnC2LrF41bUkJ3OLM0neJ+vmnHUW3kR/M2GYtsqIQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFA42oF+udgaR9wz7W09iSZR6ut6HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzczNWQz Ny0zOTFhLTRhYTItYWM4My0wYjM2YWM4ZTIzYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNzM1ZDM3 LTM5MWEtNGFhMi1hYzgzLTBiMzZhYzhlMjNjNy8xL0RqYWdYNjUyQnBIM0RQdGJU MkpKbEhxNjNvYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXz0MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AgzaMA0GCSqGSIb3DQEBCwUAA4IBAQCkQ/fwAVcTny8/Q7sZyoBf+1H+xElAGo8k Rsfw9Xentn7hHM1fjnsTGP2SQWgbOI5IEOpqSWS/54t+/4/2KCtY0/n3NasPcEsL DG5/bHgUtTLzAHqjAvJJkuazLjDvSe9mB3jIS/zGO6wW5Q5PttyWLeSZUcVDwEK5 b8T0CIxq2hoVDtAxxTu8S/Q5d8jioTwdhV3IeVbbMWRNHgkxnsBp7EKRKTW6LHKY NyKB8+oju0xwDLuiZaqu77kUkVSuMtnjDQNOiyOW4TKk3I2zc+3jv9OLB6TaSjdi 2hlgRHLWezVqZrl2zpVNZLOt4ft1IxjL2PYFDqiWXaTBC4x8Uoty -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:31 2026 by rpki-client