This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer File: DmT4G542uEmRd4dnjQFNtL_O8xE.cer (raw, json) Hash identifier: NmwW4mx/urlfajsm5ZVstAK15HaDLPe7giuIFqCPZDc= Subject key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2A656C337F0A3A9B4E30404246C1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3258 AS: 215871 IP: 91.243.68.0/24 IP: 146.19.19.0/24 IP: 146.19.163.0/24 IP: 194.50.154.0/24 IP: 2a12:a300::/29 IP: 2a14:1f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a6:56:c3:37:f0:a3:a9:b4:e3:04:04:24:6c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e64f81b9e36b849917787678d014db4bfcef311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:9b:65:ee:f2:16:7d:48:d8:ca:15:68:44: 94:da:4c:e7:12:06:16:98:ec:d0:b2:b9:ad:46:7f: 14:55:a1:a4:79:fb:7a:0d:6f:85:cc:09:ec:6a:c0: 87:ad:4f:e1:21:2a:3c:26:b6:82:58:67:c7:7f:a8: 1d:c0:ac:ca:2b:de:34:ec:49:ae:c1:f6:ba:e5:b0: ae:ee:78:b4:e3:bf:44:e3:8c:2d:93:f5:6e:0a:11: 18:93:57:0c:2c:c5:e0:91:cb:5b:55:9a:fe:72:31: 56:8d:cc:38:c7:21:ad:0b:7b:15:37:b2:7b:36:59: dc:bc:61:f1:2f:31:22:4b:81:71:ec:b2:15:92:16: 50:0b:54:63:fc:fb:a7:dc:3a:20:96:58:a3:2a:e7: 38:05:49:dc:cd:29:c0:44:fb:92:9d:e7:f2:68:b8: bf:8b:af:c7:63:fb:96:bf:cd:c7:8c:10:0a:97:11: 75:bf:14:c0:55:89:66:e5:bb:a5:ec:8f:3b:12:35: 94:6e:17:36:5d:6d:b1:a5:c3:3c:24:99:b0:ca:63: 56:5d:aa:9a:b6:7a:f9:4f:d4:67:65:25:cd:e7:f7: 20:32:09:2f:d9:0a:16:b9:ac:4c:48:38:70:cf:19: b6:0a:bd:28:38:d0:db:95:af:2e:f1:50:61:ab:d7: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.68.0/24 146.19.19.0/24 146.19.163.0/24 194.50.154.0/24 IPv6: 2a12:a300::/29 2a14:1f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3258 215871 Signature Algorithm: sha256WithRSAEncryption ac:14:15:15:40:c9:3a:c2:b9:48:d4:30:05:9d:9d:6e:59:ae: 79:54:ff:f8:39:2f:bf:10:4a:ba:c5:de:e2:ce:a8:e6:d7:89: 44:77:1c:4b:62:39:53:87:aa:dd:a2:f1:2e:ee:2d:1d:2a:c4: 41:ed:73:f8:a2:d2:7f:86:68:d9:38:70:f8:6b:95:a8:78:ee: fc:f4:5f:04:24:13:3e:fe:21:40:dd:f0:75:31:a4:a3:51:c4: 8e:12:2e:64:a5:5b:90:1d:61:e7:1d:40:f0:55:d9:4a:22:d0: b2:4f:0d:7a:b4:ca:b5:b1:cd:26:07:29:78:26:f5:b5:82:35: bf:96:56:17:5e:57:25:b6:75:b7:14:b1:f4:8e:8b:ea:f1:f4: f6:c1:a3:0a:89:7d:2c:dd:ba:4a:45:da:a4:34:9c:37:2c:48: f6:4f:1e:09:0d:8b:65:55:b0:71:58:4c:7d:1c:af:f4:a2:88: 29:47:a3:3e:42:69:32:aa:9f:9f:56:c9:d8:b0:48:58:d2:21: e6:9b:1a:69:b2:23:45:4f:b1:55:b3:c6:e6:30:be:da:64:0e: 31:0c:8b:09:7c:4a:f0:28:55:ad:9c:46:54:99:ec:13:12:ce: 82:ba:44:d8:8d:84:b0:a7:02:78:ab:81:30:51:2a:75:f8:fa: d9:5d:8a:6c -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt4oqZWwzfwo6m04wQEJGwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTY0ZjgxYjllMzZiODQ5OTE3Nzg3Njc4ZDAxNGRiNGJmY2VmMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi32bZe7yFn1I2MoVaESU2kznEgYW mOzQsrmtRn8UVaGkeft6DW+FzAnsasCHrU/hISo8JraCWGfHf6gdwKzKK9407Emu wfa65bCu7ni0479E44wtk/VuChEYk1cMLMXgkctbVZr+cjFWjcw4xyGtC3sVN7J7 NlncvGHxLzEiS4Fx7LIVkhZQC1Rj/Pun3DogllijKuc4BUnczSnARPuSnefyaLi/ i6/HY/uWv83HjBAKlxF1vxTAVYlm5bul7I87EjWUbhc2XW2xpcM8JJmwymNWXaqa tnr5T9RnZSXN5/cgMgkv2QoWuaxMSDhwzxm2Cr0oONDbla8u8VBhq9fMQwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFA5k+BueNrhJkXeHZ40BTbS/zvMRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzU5NGQy NS1mMWM2LTQwNDQtYThhNy1jOGYxODJlOTVlYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvNTk0ZDI1 LWYxYzYtNDA0NC1hOGE3LWM4ZjE4MmU5NWVhNS8xL0RtVDRHNTQydUVtUmQ0ZG5q UUZOdExfTzh4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQAW/NEAwQAkhMTAwQAkhOjAwQAwjKaMBQEAgAC MA4DBQMqEqMAAwUDKhQfgDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIMugIDA0s/ MA0GCSqGSIb3DQEBCwUAA4IBAQCsFBUVQMk6wrlI1DAFnZ1uWa55VP/4OS+/EEq6 xd7izqjm14lEdxxLYjlTh6rdovEu7i0dKsRB7XP4otJ/hmjZOHD4a5WoeO789F8E JBM+/iFA3fB1MaSjUcSOEi5kpVuQHWHnHUDwVdlKItCyTw16tMq1sc0mByl4JvW1 gjW/llYXXlcltnW3FLH0jovq8fT2waMKiX0s3bpKRdqkNJw3LEj2Tx4JDYtlVbBx WEx9HK/0oogpR6M+Qmkyqp+fVsnYsEhY0iHmmxppsiNFT7FVs8bmML7aZA4xDIsJ fErwKFWtnEZUmewTEs6CukTYjYSwpwJ4q4EwUSp1+PrZXYps -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:09 2026 by rpki-client