This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer File: DwJfo1fCCrvxGEJiNGWOYtfccHY.cer (raw, json) Hash identifier: 6DVzt2qOE8ZbcyqyARkr0Zomz+0lcigQ7BaPSRl3PNw= Subject key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE5DEBB2FAF2EBA4F934F591F000180A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 13:22:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214294 IP: 123.100.225.0/24 IP: 185.166.94.0/24 IP: 2a01:ee80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:de:bb:2f:af:2e:ba:4f:93:4f:59:1f:00:01:80:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 13:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f025fa357c20abbf118426234658e62d7dc7076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:20:01:72:53:74:79:c5:e4:cb:99:a1:e7:3a: 85:ca:f7:33:62:42:93:cc:34:fa:44:67:f1:ca:98: eb:04:6d:78:89:50:28:0d:77:5e:8c:ed:fd:d3:34: 54:db:b1:1b:43:93:33:e9:bf:64:1b:16:30:fe:6b: 78:f3:59:92:a9:d7:5a:6f:46:01:9e:75:f4:5a:e2: 13:3e:d1:bd:88:29:3d:54:68:9e:ca:82:cb:6e:0e: 26:6d:71:6a:69:64:63:b7:95:5f:72:bb:e2:91:ee: fc:5e:d0:0d:21:23:93:11:ee:f3:6d:65:01:30:90: 78:93:c6:bc:25:02:7b:52:0c:ca:01:9a:87:55:fe: 72:25:45:e6:c1:4f:b2:6d:72:8d:be:80:68:59:07: a9:54:a5:a2:b7:e7:5a:c5:a4:5c:62:4a:0f:1a:d5: 48:72:50:30:7d:63:f8:d7:79:25:2c:37:be:42:e8: b3:8a:ca:75:57:9d:a8:6c:79:f4:1d:bb:16:c1:d2: c7:91:e1:b2:d5:0e:1c:b0:c1:c9:86:20:90:5b:a5: 15:a2:ef:13:ca:39:8f:f0:a0:c4:02:42:7f:2c:a2: 21:e1:f3:af:76:41:a0:47:6c:88:6c:7b:72:34:db: bd:8e:fd:34:a9:29:35:30:ec:b0:0b:77:83:cd:b2: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.100.225.0/24 185.166.94.0/24 IPv6: 2a01:ee80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214294 Signature Algorithm: sha256WithRSAEncryption 7a:69:98:94:3a:39:57:e6:b0:37:28:05:cb:6b:11:3f:0d:94: 0a:ed:96:dd:13:2e:54:af:f1:93:53:f4:30:62:8d:47:8c:4a: b5:18:8f:6c:2d:d7:a9:a2:17:a2:fd:31:58:3d:0b:e4:90:be: b0:d7:c9:fa:4d:fb:b7:44:18:61:29:b4:ba:99:75:27:ec:83: d2:37:8f:da:11:29:21:87:e0:89:ff:7b:4d:6a:5f:0a:24:33: c3:cf:8d:0b:92:90:ab:a7:ba:23:39:0e:40:af:dc:d6:96:95: f0:ee:8b:90:82:e3:db:5d:d0:58:55:51:6c:bb:37:ab:ef:44: bd:95:34:63:87:f1:98:ff:74:49:13:d9:15:4d:37:13:95:c7: b5:54:be:a4:3b:c7:a9:04:9b:ca:d4:86:db:41:e6:c3:e5:2d: 6b:23:cb:c5:99:53:ed:e0:f0:90:f0:80:70:ce:5a:56:dc:f3: 1a:62:3e:0c:09:0e:0c:e2:cc:b1:2a:1c:35:46:1f:98:b7:a5: fe:97:88:1f:c1:9c:f4:83:20:c6:d0:e1:b0:1a:e2:bc:20:e7: e2:50:94:85:93:28:ca:f4:db:6e:44:e5:45:20:05:60:36:96: eb:a8:e1:87:b4:79:b3:d3:5f:63:8e:eb:4e:aa:88:70:fc:87: e1:d9:5e:21 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZvl3rsvry66T5NPWR8AAYCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMTMyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjAyNWZhMzU3YzIwYWJiZjExODQyNjIzNDY1OGU2MmQ3ZGM3MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CABclN0ecXky5mh5zqFyvczYkKT zDT6RGfxypjrBG14iVAoDXdejO390zRU27EbQ5Mz6b9kGxYw/mt481mSqddab0YB nnX0WuITPtG9iCk9VGieyoLLbg4mbXFqaWRjt5Vfcrvike78XtANISOTEe7zbWUB MJB4k8a8JQJ7UgzKAZqHVf5yJUXmwU+ybXKNvoBoWQepVKWit+daxaRcYkoPGtVI clAwfWP413klLDe+Quizisp1V52obHn0HbsWwdLHkeGy1Q4csMHJhiCQW6UVou8T yjmP8KDEAkJ/LKIh4fOvdkGgR2yIbHtyNNu9jv00qSk1MOywC3eDzbKSEwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFA8CX6NXwgq78RhCYjRljmLX3HB2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzExNGEx MC04ZWY3LTQ5MDMtOTYzZS1kNGQ1OWEwOTVjN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMTE0YTEw LThlZjctNDkwMy05NjNlLWQ0ZDU5YTA5NWM3Zi8xL0R3SmZvMWZDQ3J2eEdFSmlO R1dPWXRmY2NIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAe2ThAwQAuaZeMA0EAgACMAcDBQAqAe6AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNFFjANBgkqhkiG9w0BAQsFAAOCAQEAemmY lDo5V+awNygFy2sRPw2UCu2W3RMuVK/xk1P0MGKNR4xKtRiPbC3XqaIXov0xWD0L 5JC+sNfJ+k37t0QYYSm0upl1J+yD0jeP2hEpIYfgif97TWpfCiQzw8+NC5KQq6e6 IzkOQK/c1paV8O6LkILj213QWFVRbLs3q+9EvZU0Y4fxmP90SRPZFU03E5XHtVS+ pDvHqQSbytSG20Hmw+UtayPLxZlT7eDwkPCAcM5aVtzzGmI+DAkODOLMsSocNUYf mLel/peIH8Gc9IMgxtDhsBrivCDn4lCUhZMoyvTbbkTlRSAFYDaW66jhh7R5s9Nf Y47rTqqIcPyH4dleIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:59:41 2026 by rpki-client