This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer File: DrG9MNMZGofH0KRi5nkyQxYz3R4.cer (raw, json) Hash identifier: wBXRI3IsaPwYHkVWUFbJznNdkDnRBG8EDoIHLweVcNA= Subject key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1320BD4C0EEBEF9F8875E9731B3198 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 171.25.228.0/24 IP: 2001:67c:2664::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:20:bd:4c:0e:eb:ef:9f:88:75:e9:73:1b:31:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:20:c3:92:63:51:c6:67:6a:70:1b:51:8d: a9:d2:ea:db:c5:57:ee:3c:53:b0:e0:d0:c3:f4:09: fe:ef:15:63:2f:a7:8d:4e:5b:a6:c4:00:66:f1:b3: b1:08:82:04:00:ee:11:25:3a:70:c1:29:ec:a1:41: 3a:ce:e6:33:4b:01:5a:c9:b2:58:c5:9c:bb:52:8e: 3e:9c:26:9a:b1:6e:3d:2e:e9:9a:53:55:8e:95:cc: ed:b8:4a:3d:0a:c7:50:74:7b:5a:35:c5:16:18:c2: 16:5b:43:61:ec:94:d1:10:2f:7a:5f:2c:17:c0:3b: 77:f3:b9:55:bc:24:e3:2d:f8:bf:b7:fd:20:32:69: 70:b6:17:68:31:a0:13:e7:8f:79:36:7a:83:45:06: 6d:5c:2f:64:f6:7b:4e:97:2d:e6:12:b6:bd:83:20: 9d:7d:e4:7a:e8:1e:7e:74:cc:3a:d9:5d:72:d6:e0: 60:8d:7f:16:b1:d2:74:62:09:49:4f:cc:56:44:4b: a3:44:a0:fe:ab:80:3e:e3:83:85:34:b7:18:0d:cd: 98:8f:2b:2d:81:54:f6:bb:d2:74:7f:a9:e6:b4:70: 9c:a2:0e:0e:46:44:d6:22:15:6e:bd:95:a0:b4:39: 5c:72:fe:0c:a1:c1:04:6b:df:30:d4:fd:41:bd:76: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.228.0/24 IPv6: 2001:67c:2664::/48 Signature Algorithm: sha256WithRSAEncryption 04:0e:80:58:2d:ce:b8:1c:b1:a1:03:3a:89:3a:59:a8:f7:2c: 82:6b:85:a8:48:15:48:34:53:67:7e:19:c4:a0:d5:21:0e:8c: 56:2e:d6:4e:68:8b:18:57:cd:d0:d6:8b:c3:fe:48:10:d4:ae: 5e:0a:6a:96:d0:a3:9c:8e:43:f9:cd:02:97:07:e3:7a:b8:a7: 2c:34:19:b9:bf:3a:e1:a2:c3:85:2c:01:31:ee:f3:c6:fe:1a: 5e:d8:ae:56:4e:1e:1f:a5:5e:fe:dc:f6:33:44:1e:d6:15:b8: 52:9e:ed:e4:ea:b4:19:db:27:2c:4a:08:20:4a:46:d1:09:42: 8f:4f:a9:50:b5:50:ef:d7:dd:f2:9d:c4:22:81:7b:c3:a3:71: 78:f5:85:88:78:6f:89:82:e9:07:16:01:cb:65:09:72:b1:00: 73:37:52:88:ed:dd:ee:5c:68:3e:21:4c:3e:b2:c0:07:92:80: ae:73:3f:f4:1d:92:c2:6e:92:f7:f6:ee:41:b0:54:08:95:8a: 26:5b:52:95:45:6b:7f:81:a6:a2:30:f8:94:d0:e7:54:34:e7: b6:bd:1d:7b:4b:15:cc:0b:b4:9c:b2:5d:0d:39:e8:65:e0:3b: 33:40:ca:b5:43:8f:36:6c:95:0d:56:cb:31:b6:f8:c7:36:0d: 38:ca:cc:f0 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt8EyC9TA7r75+IdelzGzGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWIxYmQzMGQzMTkxYTg3YzdkMGE0NjJlNjc5MzI0MzE2MzNkZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKQgw5JjUcZnanAbUY2p0urbxVfu PFOw4NDD9An+7xVjL6eNTlumxABm8bOxCIIEAO4RJTpwwSnsoUE6zuYzSwFaybJY xZy7Uo4+nCaasW49LumaU1WOlcztuEo9CsdQdHtaNcUWGMIWW0Nh7JTREC96XywX wDt387lVvCTjLfi/t/0gMmlwthdoMaAT5495NnqDRQZtXC9k9ntOly3mEra9gyCd feR66B5+dMw62V1y1uBgjX8WsdJ0YglJT8xWREujRKD+q4A+44OFNLcYDc2Yjyst gVT2u9J0f6nmtHCcog4ORkTWIhVuvZWgtDlccv4MocEEa98w1P1BvXbO4wIDAQAB o4IClTCCApEwHQYDVR0OBBYEFA6xvTDTGRqHx9CkYuZ5MkMWM90eMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzcyZTkx YS0wMTRmLTQ4M2EtYTU0NC00ZTMzNDI3ZjczNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvNzJlOTFh LTAxNGYtNDgzYS1hNTQ0LTRlMzM0MjdmNzM0ZS8xL0RyRzlNTk1aR29mSDBLUmk1 bmt5UXhZejNSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAqxnkMA8EAgACMAkDBwAgAQZ8JmQwDQYJKoZI hvcNAQELBQADggEBAAQOgFgtzrgcsaEDOok6Waj3LIJrhahIFUg0U2d+GcSg1SEO jFYu1k5oixhXzdDWi8P+SBDUrl4KapbQo5yOQ/nNApcH43q4pyw0Gbm/OuGiw4Us ATHu88b+Gl7YrlZOHh+lXv7c9jNEHtYVuFKe7eTqtBnbJyxKCCBKRtEJQo9PqVC1 UO/X3fKdxCKBe8OjcXj1hYh4b4mC6QcWActlCXKxAHM3Uojt3e5caD4hTD6ywAeS gK5zP/QdksJukvf27kGwVAiViiZbUpVFa3+BpqIw+JTQ51Q057a9HXtLFcwLtJyy XQ056GXgOzNAyrVDjzZslQ1WyzG2+Mc2DTjKzPA= -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:45 2026 by rpki-client