This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer File: DkOg3wWaUlGkALWh8TIboA0xINI.cer (raw, json) Hash identifier: 7juuKGc2zDj9ilLzKWVrwv6LLsX+R86ZOEXky2YkJl4= Subject key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1F24D7DD3F30AB14F27768F88744F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.159.104.0/22 IP: 2a07:b880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f2:4d:7d:d3:f3:0a:b1:4f:27:76:8f:88:74:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:dd:40:7c:88:9a:08:32:bb:27:57:6d:28: d4:4c:f9:ff:c0:8a:97:de:4e:08:a4:d8:f9:75:d8: 7d:8c:06:f4:70:0a:92:a0:11:ce:61:8b:f9:32:b1: 7e:7d:c8:2f:dc:d1:a9:c3:5e:b3:7f:51:18:0c:8c: ae:71:1e:49:c0:cc:6d:5a:78:5d:3b:96:ba:81:7a: fd:7b:f9:89:a5:e8:10:ea:bd:5e:80:04:f1:65:84: 37:08:1b:bb:d8:71:37:e4:45:6c:0e:89:81:fe:60: 36:ca:2f:33:3a:9d:13:64:4c:08:52:55:9a:08:0c: 5f:f3:6d:4a:78:2a:2d:bc:5a:b9:36:89:8a:39:b9: 6b:10:a7:97:50:20:e6:88:62:f6:4b:3d:14:63:1f: 8f:1f:48:34:95:59:5d:0f:15:b5:1e:36:b0:9f:37: a3:e5:b3:d4:f1:71:bd:9e:7a:72:b4:26:79:55:23: c4:1d:74:d1:b8:8a:d2:7a:bf:62:5e:88:e0:23:45: fe:6b:66:b0:ea:c9:f8:8f:4d:0d:b0:c5:e0:0c:99: ae:3c:50:0b:77:ac:33:4f:42:14:45:88:b6:09:ab: ca:7d:5d:b7:69:eb:43:03:91:c7:15:47:a6:ab:48: f0:9d:0d:f6:7f:ed:fa:c2:6b:78:cd:83:4b:3c:2d: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.104.0/22 IPv6: 2a07:b880::/29 Signature Algorithm: sha256WithRSAEncryption 58:ce:a7:b0:74:46:1e:c9:2e:ec:62:e7:11:19:f9:a8:5e:f9: 2a:cf:f7:cd:5a:0d:5a:f0:1f:c0:d4:20:9b:fc:32:51:bc:c3: fc:ec:31:0f:80:2b:e2:3e:61:de:2b:29:7f:d3:d6:0f:a9:ac: e7:5b:94:e4:25:61:77:53:56:8b:ba:40:23:b3:8a:88:48:ad: ad:40:55:85:85:d0:7e:ae:94:8a:87:6f:7c:58:c1:0d:8f:08: 58:48:53:d3:f9:c4:d1:66:22:2e:8f:a2:a4:00:d6:49:94:ca: 53:28:8f:bb:af:0e:92:85:9e:56:bd:53:b0:be:42:be:db:69: f5:3c:96:95:24:61:3c:06:43:dc:fc:e5:ac:f7:8c:3e:83:ee: a1:8e:b8:f7:a5:b5:1a:89:ab:16:59:9a:8f:4d:1e:26:0c:1e: 86:f9:31:ad:6b:6c:97:69:56:79:d3:e0:64:82:5a:75:aa:33: a6:7c:a8:a8:1f:da:08:69:a0:cc:01:18:69:84:aa:ab:38:c0: 60:77:38:7e:73:61:53:22:10:a3:bb:25:d9:e9:c2:bc:74:d9: 87:f3:73:29:66:80:72:9e:fe:f2:ac:55:9e:ce:4a:d1:80:04: 6d:ef:01:c9:f5:6c:5e:2e:0a:00:b1:65:4f:d0:4f:75:c9:d6: 3f:31:0b:21 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/8fJNfdPzCrFPJ3aPiHRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTQzYTBkZjA1OWE1MjUxYTQwMGI1YTFmMTMyMWJhMDBkMzEyMGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B3dQHyImggyuydXbSjUTPn/wIqX 3k4IpNj5ddh9jAb0cAqSoBHOYYv5MrF+fcgv3NGpw16zf1EYDIyucR5JwMxtWnhd O5a6gXr9e/mJpegQ6r1egATxZYQ3CBu72HE35EVsDomB/mA2yi8zOp0TZEwIUlWa CAxf821KeCotvFq5NomKOblrEKeXUCDmiGL2Sz0UYx+PH0g0lVldDxW1Hjawnzej 5bPU8XG9nnpytCZ5VSPEHXTRuIrSer9iXojgI0X+a2aw6sn4j00NsMXgDJmuPFAL d6wzT0IURYi2CavKfV23aetDA5HHFUemq0jwnQ32f+36wmt4zYNLPC3RVwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFA5DoN8FmlJRpAC1ofEyG6ANMSDSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzBiYjMz Yi02OGY3LTQ3NDgtODRhYy0wMDRmZTQzM2M3YzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMGJiMzNi LTY4ZjctNDc0OC04NGFjLTAwNGZlNDMzYzdjOC8xL0RrT2czd1dhVWxHa0FMV2g4 VElib0EweElOSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ9oMA0EAgACMAcDBQMqB7iAMA0GCSqGSIb3 DQEBCwUAA4IBAQBYzqewdEYeyS7sYucRGfmoXvkqz/fNWg1a8B/A1CCb/DJRvMP8 7DEPgCviPmHeKyl/09YPqaznW5TkJWF3U1aLukAjs4qISK2tQFWFhdB+rpSKh298 WMENjwhYSFPT+cTRZiIuj6KkANZJlMpTKI+7rw6ShZ5WvVOwvkK+22n1PJaVJGE8 BkPc/OWs94w+g+6hjrj3pbUaiasWWZqPTR4mDB6G+TGta2yXaVZ50+Bkglp1qjOm fKioH9oIaaDMARhphKqrOMBgdzh+c2FTIhCjuyXZ6cK8dNmH83MpZoBynv7yrFWe zkrRgARt7wHJ9WxeLgoAsWVP0E91ydY/MQsh -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:38 2026 by rpki-client