This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer (raw, json) Hash identifier: 0rxn5xufD7QPCLTdT2theADYCo82tKmHW7tQZUZ179M= Subject key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6704F2EEAB35FB8F5DDC8C8CA662B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.247.32.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:70:4f:2e:ea:b3:5f:b8:f5:dd:c8:c8:ca:66:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:b9:39:66:13:63:b3:e6:48:a0:5a:63:50: 82:1e:79:05:6f:4e:3c:1f:aa:48:63:22:f1:35:5d: 60:c8:97:e0:20:b5:ec:2a:5a:0c:94:d7:7f:9c:fb: 2e:90:32:2b:a2:cc:6e:81:e8:5f:23:01:98:ec:47: 1f:94:cd:a8:4a:bb:e1:96:49:ad:bd:60:d4:b8:6a: 53:97:d9:7a:0c:0a:83:f8:04:14:26:0a:65:c3:7a: 5d:7c:56:b1:6d:3d:16:63:7b:ea:9e:55:7d:37:a9: d7:d8:bb:b3:33:9a:e0:52:49:7e:15:06:58:30:be: 9c:91:4b:6b:c2:e8:ed:98:42:50:84:c6:58:d8:f8: 5f:8d:c7:6d:e6:e2:dc:3a:f7:fe:ea:45:64:1f:96: 6d:2c:0e:77:63:23:01:a6:c8:e1:05:af:4d:56:09: 1c:e2:ec:bd:4f:85:82:23:da:87:43:9f:c7:56:8b: 2d:d5:b6:8d:78:5f:08:1d:98:5b:b0:17:26:0e:6c: c7:47:8e:0d:c3:29:fd:84:2b:f5:60:21:71:ad:08: b1:22:11:ee:de:21:13:84:69:7d:cf:d1:c9:ec:a3: ad:86:a7:20:e8:71:25:ed:be:4c:ae:b9:6b:80:98: 34:4d:3f:fa:7a:d6:ea:ee:e1:70:52:b7:29:a8:c3: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.32.0/22 Signature Algorithm: sha256WithRSAEncryption 48:4f:25:94:a4:65:1f:55:bb:c5:eb:e3:0f:5e:0a:88:b0:51: c6:b2:f6:8e:ee:3e:58:6b:36:3a:69:c1:26:69:87:0c:cf:e6: 13:ad:dd:62:fd:b8:4c:27:fc:8f:0b:b6:ce:52:76:fc:2f:c0: 55:ef:75:d7:88:c9:68:fb:ab:4f:30:f7:f2:65:80:07:36:d4: 51:23:64:d2:ae:2f:d5:5a:87:d1:b5:79:bc:26:79:87:c7:66: 33:53:ca:04:f7:ea:99:fc:83:0a:ef:4f:f9:e0:43:3c:e3:f2: c4:d2:e6:da:3d:d4:22:60:26:1c:6c:a0:1e:8a:19:3e:3a:57: d9:f3:1a:85:5d:75:cb:b9:99:72:92:f4:57:53:a9:14:66:2b: e3:42:e5:d3:0d:cd:97:6f:9e:e6:19:f0:98:50:54:c9:a9:ff: 3c:88:37:b3:aa:19:8e:84:bb:85:48:9c:64:6a:42:14:2f:81: 02:ba:58:db:2a:f2:2d:3b:4d:64:5e:a1:90:fd:1f:f4:eb:ff: 66:11:34:2e:e1:c4:b2:0a:d9:e2:bc:73:38:59:db:bf:bc:bf: fa:79:0d:7e:a0:34:73:5d:bd:c7:71:e0:ad:fc:4c:b2:7c:fa: 61:2f:88:b1:d0:81:98:2f:59:a4:27:09:36:b4:c9:06:ca:c1: 2e:9b:1b:74 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xnBPLuqzX7j13cjIymYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjNmMTMzMmNmZjA1YjIyYTNhNjZhNmQ0YzM0OGZiYzAxZGUxMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2W5OWYTY7PmSKBaY1CCHnkFb048 H6pIYyLxNV1gyJfgILXsKloMlNd/nPsukDIrosxugehfIwGY7EcflM2oSrvhlkmt vWDUuGpTl9l6DAqD+AQUJgplw3pdfFaxbT0WY3vqnlV9N6nX2LuzM5rgUkl+FQZY ML6ckUtrwujtmEJQhMZY2Phfjcdt5uLcOvf+6kVkH5ZtLA53YyMBpsjhBa9NVgkc 4uy9T4WCI9qHQ5/HVost1baNeF8IHZhbsBcmDmzHR44Nwyn9hCv1YCFxrQixIhHu 3iEThGl9z9HJ7KOthqcg6HEl7b5MrrlrgJg0TT/6etbq7uFwUrcpqMMjmQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFA8/EzLP8Fsio6ZqbUw0j7wB3hFcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzUyM2I5 NS0zZGRjLTQ4MTgtOTI2NS1kYWFmMjkyMTE5NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvNTIzYjk1 LTNkZGMtNDgxOC05MjY1LWRhYWYyOTIxMTk0OS8xL0R6OFRNc193V3lLanBtcHRU RFNQdkFIZUVWdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCufcgMA0GCSqGSIb3DQEBCwUAA4IBAQBITyWU pGUfVbvF6+MPXgqIsFHGsvaO7j5YazY6acEmaYcMz+YTrd1i/bhMJ/yPC7bOUnb8 L8BV73XXiMlo+6tPMPfyZYAHNtRRI2TSri/VWofRtXm8JnmHx2YzU8oE9+qZ/IMK 70/54EM84/LE0ubaPdQiYCYcbKAeihk+OlfZ8xqFXXXLuZlykvRXU6kUZivjQuXT Dc2Xb57mGfCYUFTJqf88iDezqhmOhLuFSJxkakIUL4ECuljbKvItO01kXqGQ/R/0 6/9mETQu4cSyCtnivHM4Wdu/vL/6eQ1+oDRzXb3HceCt/EyyfPphL4ix0IGYL1mk Jwk2tMkGysEumxt0 -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:21 2026 by rpki-client