This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer File: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer (raw, json) Hash identifier: IuJET2vbWnu5IUSu2NN3xXBm1ZnoNXF2d+XhGju+sRw= Subject key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CEA7D4F761D15090F4912151DA480 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207505 IP: 104.129.174.0/23 IP: 185.242.219.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ea:7d:4f:76:1d:15:09:0f:49:12:15:1d:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ef47d753d25289fd98794974aa0536010567bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:e5:f2:a8:c2:a8:41:0a:17:58:22:2d:4a: d6:f6:15:cd:f6:8a:5b:4f:ee:d9:20:10:86:df:37: 2e:fe:02:0f:e5:0b:73:99:63:e5:73:2f:6c:7e:79: a4:e0:f1:3b:ff:90:e4:99:44:10:08:0b:f1:23:e9: df:a2:db:f9:d3:de:49:9e:ba:19:1a:af:36:43:ec: 5a:36:1d:93:9b:ce:95:ae:65:f2:76:92:bc:8e:74: e6:5d:cd:2b:ec:2f:f7:5d:1f:84:8f:81:c6:e3:65: ac:6b:1a:06:11:7b:ed:9b:a3:da:bb:74:f6:46:92: 3e:ad:36:88:fa:86:a1:69:56:be:1e:4e:d6:1d:ca: d9:98:fd:38:2e:7d:20:1e:f5:9d:3b:8f:2b:47:fc: f3:b1:39:f9:c4:69:cd:00:cc:96:5a:e0:2a:42:bf: a4:52:57:a6:07:e9:f4:e0:35:a2:01:9e:b6:80:32: 44:18:76:9b:17:7b:ea:ff:b2:26:a2:91:3f:82:57: 06:c2:b1:db:4c:e9:bf:7c:a1:b1:e4:9c:c1:45:f8: 49:be:35:62:03:a9:42:c3:d9:c7:2a:22:e3:20:2d: 02:98:16:df:44:da:3f:a4:05:ae:56:e3:e4:6c:f8: 4d:25:ec:63:ba:93:bd:aa:43:4f:60:4c:ff:b1:c1: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.129.174.0/23 185.242.219.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207505 Signature Algorithm: sha256WithRSAEncryption 9b:34:2b:c4:ff:b6:f0:45:1d:3e:c3:a1:2f:b5:45:67:a7:22: 25:1b:2e:d3:1b:f3:fa:dc:c6:1c:57:a3:ce:15:1a:d0:4f:f6: 9e:db:b8:cd:e6:8a:c0:86:4e:6a:74:e6:84:ac:cf:c2:48:e5: 50:4c:fc:76:f4:df:a3:d2:39:20:24:65:3b:38:f1:5a:a4:07: 58:58:ba:b3:a0:08:d9:4c:c5:ed:70:71:b7:2c:1d:b6:30:78: 34:7a:58:28:86:f2:65:49:e1:1a:4a:53:ac:48:a6:d3:6f:e7: 6d:51:cf:5a:5e:03:44:9c:e6:1a:14:15:7b:10:08:9c:a2:1a: 2a:d8:b3:62:d5:1b:3a:28:04:12:c0:8c:9a:ab:64:99:e0:6d: cf:2b:81:c0:d5:c0:1b:2c:5b:fa:22:b9:39:78:e1:84:72:45: 01:df:f7:b8:ad:e0:bd:3c:52:2d:35:95:7b:16:c4:ca:57:a0: 86:90:a6:90:dd:64:84:18:a9:b2:9d:a4:19:45:47:d5:66:de: dd:1d:1c:43:54:a7:8d:e6:67:5c:91:7a:64:71:a6:bb:a0:63: 0d:20:5a:6b:01:3b:59:81:16:13:d7:eb:10:66:cb:a4:87:4d: 48:40:91:35:d5:1c:a0:23:cc:89:a9:35:e5:ec:4c:7a:dc:25: 84:ea:c8:fd -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt9XOp9T3YdFQkPSRIVHaSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWY0N2Q3NTNkMjUyODlmZDk4Nzk0OTc0YWEwNTM2MDEwNTY3YmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLLl8qjCqEEKF1giLUrW9hXN9opb T+7ZIBCG3zcu/gIP5QtzmWPlcy9sfnmk4PE7/5DkmUQQCAvxI+nfotv5095JnroZ Gq82Q+xaNh2Tm86VrmXydpK8jnTmXc0r7C/3XR+Ej4HG42WsaxoGEXvtm6Pau3T2 RpI+rTaI+oahaVa+Hk7WHcrZmP04Ln0gHvWdO48rR/zzsTn5xGnNAMyWWuAqQr+k UlemB+n04DWiAZ62gDJEGHabF3vq/7ImopE/glcGwrHbTOm/fKGx5JzBRfhJvjVi A6lCw9nHKiLjIC0CmBbfRNo/pAWuVuPkbPhNJexjupO9qkNPYEz/scHE7QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFA70fXU9JSif2YeUl0qgU2AQVnvZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2RkOGJj NS04NmVmLTQxMzUtYmYxZi1hNGM4ZDk4OTVhNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvZGQ4YmM1 LTg2ZWYtNDEzNS1iZjFmLWE0YzhkOTg5NWE0My8xL0R2UjlkVDBsS0pfWmg1U1hT cUJUWUJCV2U5ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBaIGuAwQAufLbMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMqkTANBgkqhkiG9w0BAQsFAAOCAQEAmzQrxP+28EUdPsOhL7VFZ6ci JRsu0xvz+tzGHFejzhUa0E/2ntu4zeaKwIZOanTmhKzPwkjlUEz8dvTfo9I5ICRl OzjxWqQHWFi6s6AI2UzF7XBxtywdtjB4NHpYKIbyZUnhGkpTrEim02/nbVHPWl4D RJzmGhQVexAInKIaKtizYtUbOigEEsCMmqtkmeBtzyuBwNXAGyxb+iK5OXjhhHJF Ad/3uK3gvTxSLTWVexbEyleghpCmkN1khBipsp2kGUVH1Wbe3R0cQ1SnjeZnXJF6 ZHGmu6BjDSBaawE7WYEWE9frEGbLpIdNSECRNdUcoCPMiak15exMetwlhOrI/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 13:45:13 2026 by rpki-client