This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer File: V4DOZAV5R263qnPBnLdOvt_daCs.cer (raw, json) Hash identifier: jIR5vA5B13ncA83s5YLAwUoaca6+KJGzNfB0Pb3X35Q= Subject key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D128B211C7A74112A8A394055283A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.168.1.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:12:8b:21:1c:7a:74:11:2a:8a:39:40:55:28:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:28:ae:82:2e:33:46:33:75:2b:a8:f0:e1: e5:12:3f:4c:95:1d:66:81:84:65:dd:3a:a8:ff:e0: 95:d8:40:38:32:cc:18:b7:06:16:98:b2:73:0e:d6: 9f:0a:9c:63:2b:ad:a5:bf:ec:65:6c:fa:fa:c0:a5: db:91:33:6f:ae:2e:35:a2:3e:ae:08:d8:3a:c8:2e: e7:6e:31:a8:a8:01:3b:dd:c8:b6:53:fa:85:3a:83: e1:ac:80:3b:92:1d:a2:75:b5:5f:99:b9:07:7f:81: 65:ee:d2:ea:c5:df:28:dd:04:69:06:98:e2:7d:9b: e8:00:32:9d:84:4a:be:90:c1:0e:d2:51:35:41:db: 45:98:72:dd:06:0b:ce:ba:89:14:59:06:d0:64:87: 39:c7:fe:7a:e1:fa:5d:60:e5:28:20:16:71:37:71: 58:70:e1:ba:ef:e1:89:d6:75:5c:3d:7a:91:0f:84: e1:60:87:7e:c1:f3:56:83:87:71:15:b3:86:bd:6b: cb:af:df:29:35:e0:e8:13:e6:d5:80:5f:0c:be:bc: a1:6f:0b:aa:63:ec:95:31:f2:f9:cd:fe:bc:55:7d: eb:0a:b3:ed:d8:fb:7f:ef:bd:d2:6a:5f:92:f7:a1: 3f:da:93:ea:b4:0f:96:c6:92:51:9b:bb:1f:8f:20: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:6a:e2:81:75:8e:67:07:08:61:47:dc:a6:2b:42:ac:af:f6: ea:65:7f:1b:ff:d3:87:5a:aa:a3:2a:a1:96:b4:c2:6b:40:a8: 05:d5:fb:c5:60:8d:98:1f:18:74:1f:ac:ad:1e:b1:c8:3c:ba: 97:02:17:e3:e2:00:c9:08:b6:e6:d4:19:9b:d0:2c:34:86:bd: ea:44:52:fb:77:8d:6c:0d:3e:c9:0f:16:dd:57:5b:1b:e4:50: 19:53:cc:ed:6e:1b:d3:2a:ba:01:a0:72:f7:4b:f8:5b:e5:db: 3b:59:b3:fc:9a:32:ce:af:e6:ce:b4:0c:dc:de:0f:76:41:ef: f5:c9:12:f1:1e:ac:74:06:7b:31:f6:7f:2a:a5:6e:b2:0b:6e: 0b:b0:ce:34:0f:c1:00:64:0e:00:9c:1c:e6:08:a8:98:4a:91: 54:99:00:7d:81:c5:f4:2e:9b:cc:37:e8:bb:da:69:8d:7f:17: 11:07:2a:4d:93:f4:ff:94:e2:95:8c:30:80:c6:33:51:7c:7b: 9f:49:37:80:3c:15:18:f4:f1:66:e2:c5:e9:ba:a7:6c:b9:d0: 70:a9:e9:4b:0d:aa:db:f5:74:29:34:50:94:fc:be:cb:45:5a: 81:40:a6:52:4f:28:a1:77:ca:19:ea:3f:2d:ff:f0:be:32:42: eb:e2:13:ab -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9XRKLIRx6dBEqijlAVSg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzgwY2U2NDA1Nzk0NzZlYjdhYTczYzE5Y2I3NGViZWRmZGQ2ODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul0oroIuM0YzdSuo8OHlEj9MlR1m gYRl3Tqo/+CV2EA4MswYtwYWmLJzDtafCpxjK62lv+xlbPr6wKXbkTNvri41oj6u CNg6yC7nbjGoqAE73ci2U/qFOoPhrIA7kh2idbVfmbkHf4Fl7tLqxd8o3QRpBpji fZvoADKdhEq+kMEO0lE1QdtFmHLdBgvOuokUWQbQZIc5x/564fpdYOUoIBZxN3FY cOG67+GJ1nVcPXqRD4ThYId+wfNWg4dxFbOGvWvLr98pNeDoE+bVgF8Mvryhbwuq Y+yVMfL5zf68VX3rCrPt2Pt/773Sal+S96E/2pPqtA+WxpJRm7sfjyCf0wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFeAzmQFeUdut6pzwZy3Tr7f3WgrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2RkNmRi NC1mNTIzLTRkZTYtOGJlNi1lN2U5NzE1ZTc4MTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZGQ2ZGI0 LWY1MjMtNGRlNi04YmU2LWU3ZTk3MTVlNzgxMy8xL1Y0RE9aQVY1UjI2M3FuUEJu TGRPdnRfZGFDcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwagBMA0GCSqGSIb3DQEBCwUAA4IBAQA7auKB dY5nBwhhR9ymK0Ksr/bqZX8b/9OHWqqjKqGWtMJrQKgF1fvFYI2YHxh0H6ytHrHI PLqXAhfj4gDJCLbm1Bmb0Cw0hr3qRFL7d41sDT7JDxbdV1sb5FAZU8ztbhvTKroB oHL3S/hb5ds7WbP8mjLOr+bOtAzc3g92Qe/1yRLxHqx0Bnsx9n8qpW6yC24LsM40 D8EAZA4AnBzmCKiYSpFUmQB9gcX0LpvMN+i72mmNfxcRBypNk/T/lOKVjDCAxjNR fHufSTeAPBUY9PFm4sXpuqdsudBwqelLDarb9XQpNFCU/L7LRVqBQKZSTyihd8oZ 6j8t//C+MkLr4hOr -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:57 2026 by rpki-client