This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer File: DsodW91QNE_174hKZg6C66g7wNs.cer (raw, json) Hash identifier: /8W0ytncu0xsbk2NnKv5u9Q4TbjXOh0slHeTnkJduQU= Subject key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C808BBCCC4A220C24483A2702F4F166 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3327 IP: 62.128.96.0/19 IP: 87.98.0.0/17 IP: 89.219.0.0/22 IP: 89.219.128.0/22 IP: 89.219.134.0 -- 89.219.154.255 IP: 89.219.161.0 -- 89.219.162.255 IP: 89.219.168.0/24 IP: 195.137.179.0/24 IP: 195.222.0.0/19 IP: 212.27.224.0/19 IP: 212.47.192.0/19 IP: 212.49.0.0/19 IP: 217.28.240.0/20 IP: 2001:7f8:39::/48 IP: 2001:ad0::/32 IP: 2a01:80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8b:bc:cc:4a:22:0c:24:48:3a:27:02:f4:f1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a5:42:10:95:45:92:47:b7:d2:47:56:3e:1b: 98:49:69:b1:ed:25:0c:8c:11:a5:e9:1d:df:18:ea: 13:92:6a:dc:b4:8d:8a:c4:88:03:fc:75:21:16:cb: 56:d7:e7:da:48:63:76:6d:9b:7d:0b:8a:ef:d1:a7: 44:73:02:e4:71:fb:c3:9b:9c:91:ea:03:45:e9:c8: cb:0d:0f:9c:8b:86:75:b5:57:6c:1e:75:b9:0d:cf: fb:c4:ad:ae:6a:b5:f1:df:bf:0e:a5:6c:83:af:11: 10:ae:25:e5:59:2b:46:e7:b1:68:b2:5e:54:6f:09: f7:cb:4f:94:13:c4:e5:b3:86:c8:8b:0e:76:49:6f: 5a:9c:3e:88:c2:86:e4:aa:69:d0:2c:b4:30:2a:1b: 81:82:68:7d:2b:6a:b1:55:e2:07:e0:ab:74:06:5d: 79:35:90:52:1f:1c:fb:c6:cb:4c:45:d8:e8:41:5e: 21:70:3c:3f:6d:49:aa:fb:cf:f1:f6:a0:9e:ac:25: 39:5e:bb:92:ec:2b:b5:3c:a1:c9:02:77:76:eb:52: 1c:84:52:00:72:57:86:15:66:45:cf:23:5e:46:7c: 08:4e:41:70:a3:18:2c:6b:e5:f1:2f:3e:39:2c:a6: d1:b6:4d:84:ce:14:77:11:25:bc:98:c2:47:73:e5: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.128.96.0/19 87.98.0.0/17 89.219.0.0/22 89.219.128.0/22 89.219.134.0-89.219.154.255 89.219.161.0-89.219.162.255 89.219.168.0/24 195.137.179.0/24 195.222.0.0/19 212.27.224.0/19 212.47.192.0/19 212.49.0.0/19 217.28.240.0/20 IPv6: 2001:7f8:39::/48 2001:ad0::/32 2a01:80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3327 Signature Algorithm: sha256WithRSAEncryption 29:70:fa:b5:48:29:01:82:ee:4d:7d:f2:28:2f:fe:6e:ed:02: 28:38:ab:df:81:39:be:8b:05:5b:48:6e:5f:d5:d5:52:40:5e: 73:9b:d2:bf:09:35:8d:dd:18:e4:e4:3d:c9:46:f3:75:5d:79: 73:33:74:2b:a5:14:37:ab:24:aa:f2:45:39:64:d3:5b:d8:f8: 6a:ef:6c:15:16:dc:94:50:1f:99:5a:5b:1c:46:fc:d7:18:30: d8:0d:88:d5:78:4d:57:d2:1e:89:26:57:18:79:99:6a:3a:8c: 2c:a6:f8:7e:7b:b8:fb:03:2e:32:17:bd:7a:83:08:b0:06:90: 9e:9b:83:dc:2e:96:73:cb:bd:0e:fd:4b:7b:d0:12:2b:5a:cb: 63:63:14:f3:35:62:c3:23:3b:22:ba:c7:96:6a:a8:58:0d:48: a7:76:ce:63:74:f3:6f:d0:c2:b0:a2:e3:d8:4d:5f:07:72:1a: 14:d3:f6:59:e6:da:6d:f5:17:25:cb:dc:99:0f:04:18:3a:e4: ed:d6:68:36:ce:27:88:1c:9d:72:ea:75:0e:7e:c4:51:26:9b: 64:ca:31:64:0f:86:47:7e:61:ff:9e:ec:11:26:37:23:a6:50: fd:af:c0:ca:38:96:df:f7:57:78:78:12:1b:4e:bb:ac:94:79: 96:9a:02:fc -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISAZt8gIu8zEoiDCRIOicC9PFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWNhMWQ1YmRkNTAzNDRmZjVlZjg4NGE2NjBlODJlYmE4M2JjMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqVCEJVFkke30kdWPhuYSWmx7SUM jBGl6R3fGOoTkmrctI2KxIgD/HUhFstW1+faSGN2bZt9C4rv0adEcwLkcfvDm5yR 6gNF6cjLDQ+ci4Z1tVdsHnW5Dc/7xK2uarXx378OpWyDrxEQriXlWStG57Fosl5U bwn3y0+UE8Tls4bIiw52SW9anD6IwobkqmnQLLQwKhuBgmh9K2qxVeIH4Kt0Bl15 NZBSHxz7xstMRdjoQV4hcDw/bUmq+8/x9qCerCU5XruS7Cu1PKHJAnd261IchFIA cleGFWZFzyNeRnwITkFwoxgsa+XxLz45LKbRtk2EzhR3ESW8mMJHc+WLPwIDAQAB o4IDGTCCAxUwHQYDVR0OBBYEFA7KHVvdUDRP9e+ISmYOguuoO8DbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2JlN2Zj Yi0wNzU1LTRjMWUtYWM3Ny03YzdmMDBhOTUzZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYmU3ZmNi LTA3NTUtNGMxZS1hYzc3LTdjN2YwMGE5NTNlMS8xL0Rzb2RXOTFRTkVfMTc0aEta ZzZDNjZnN3dOcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGYBggrBgEF BQcBBwEB/wSBiDCBhTBkBAIAATBeAwQFPoBgAwQHV2IAAwQCWdsAAwQCWduAMAwD BAFZ24YDBABZ25owDAMEAFnboQMEAFnbogMEAFnbqAMEAMOJswMEBcPeAAMEBdQb 4AMEBdQvwAMEBdQxAAMEBNkc8DAdBAIAAjAXAwcAIAEH+AA5AwUAIAEK0AMFACoB AIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICDP8wDQYJKoZIhvcNAQELBQADggEB AClw+rVIKQGC7k198igv/m7tAig4q9+BOb6LBVtIbl/V1VJAXnOb0r8JNY3dGOTk PclG83VdeXMzdCulFDerJKryRTlk01vY+GrvbBUW3JRQH5laWxxG/NcYMNgNiNV4 TVfSHokmVxh5mWo6jCym+H57uPsDLjIXvXqDCLAGkJ6bg9wulnPLvQ79S3vQEita y2NjFPM1YsMjOyK6x5ZqqFgNSKd2zmN082/QwrCi49hNXwdyGhTT9lnm2m31FyXL 3JkPBBg65O3WaDbOJ4gcnXLqdQ5+xFEmm2TKMWQPhkd+Yf+e7BEmNyOmUP2vwMo4 lt/3V3h4EhtOu6yUeZaaAvw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:44 2026 by rpki-client