This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer File: d92irQmMangU-yWLRpsNhM4kxKc.cer (raw, json) Hash identifier: pMGlz9DTZQT4PHGn8mHaHehrZzAYTyi13qLPK9pwhPo= Subject key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834BEC75459D454E328EC8E948B18D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197648 IP: 91.217.246.0/24 IP: 91.223.208.0/24 IP: 185.106.100.0/22 IP: 185.205.184.0/22 IP: 2a06:3c80::/29 IP: 2a0c:5cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:be:c7:54:59:d4:54:e3:28:ec:8e:94:8b:18:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:cf:a5:e3:b8:ce:16:c2:87:47:a2:fc:2b: ca:d8:ff:52:d2:81:ca:d4:b8:97:9e:8a:87:da:45: 26:fc:e2:92:cb:21:9b:85:40:7f:0e:d6:a9:b0:ff: b6:ca:64:cb:47:4e:c4:e1:8a:90:2a:a9:2c:5d:a9: 04:26:92:e4:e9:3f:c5:96:4a:9d:70:63:04:3f:2c: 97:cc:f6:02:ec:3e:8d:23:45:a5:40:d8:34:82:26: cc:3f:6b:20:69:23:f4:b0:80:38:f9:b8:85:ab:2a: 1e:69:da:5b:1f:88:50:ce:91:3d:f9:0e:ab:a7:99: 56:90:38:92:ad:0e:d8:54:09:e2:cf:ed:c5:26:0b: a7:74:d4:7c:fe:74:a9:23:70:91:9c:7d:8b:a1:84: 1b:a7:65:1f:6d:6a:12:eb:7b:2a:97:c8:df:cf:12: 2a:fe:7d:b5:36:81:e8:4c:86:a4:92:95:69:5c:af: f9:6d:d6:48:58:26:a4:c0:5d:a9:d1:2f:53:1c:e6: 15:c0:2e:b5:ff:d3:70:a4:17:c4:8d:02:94:07:db: 6b:8f:c6:8a:25:78:25:5f:29:c5:e3:70:da:ba:65: 18:28:b7:e5:ff:36:43:46:e8:32:a6:38:93:d4:16: 4c:95:4e:e5:29:62:32:f3:20:a0:3a:00:73:60:46: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.246.0/24 91.223.208.0/24 185.106.100.0/22 185.205.184.0/22 IPv6: 2a06:3c80::/29 2a0c:5cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197648 Signature Algorithm: sha256WithRSAEncryption 8a:d2:6d:21:c9:f0:eb:a9:5d:26:fd:dc:d2:02:20:bc:bf:1a: 98:a3:54:ea:50:ac:92:b2:4b:d2:39:9c:b0:08:f2:ae:87:c3: 47:97:cb:d7:d0:ef:10:a9:ac:6a:1d:85:82:66:69:28:f8:96: 4d:ee:c6:c3:8f:71:cd:7f:82:34:63:7e:0c:7c:57:ec:5f:19: 49:de:5a:1e:83:f6:9d:e2:e8:12:5c:91:cd:64:b2:2a:c6:49: 57:50:41:b7:c3:ec:c7:49:48:e2:6b:cf:86:fa:cc:26:de:cc: e8:59:6f:85:dc:7a:f3:ea:8c:76:c1:a3:15:19:3a:e2:de:f4: 35:d6:01:b8:20:e0:d3:67:f7:ad:30:36:47:1a:4f:00:ee:71: 4e:a7:e1:55:86:5b:e0:e0:73:3b:97:dc:7b:09:5c:30:36:35: 38:1e:22:39:c9:bb:6c:d4:6f:46:2f:f5:1e:83:ac:11:94:de: 01:1a:4f:4d:73:e8:c8:6b:10:f2:8b:c7:3b:06:a7:6b:d7:6d: 41:10:f2:3a:ce:1e:7c:f3:bc:48:ec:e0:71:3d:00:0b:ac:96: ab:7d:a6:4e:6f:de:17:58:d4:32:1b:b1:5d:19:74:0e:27:fd: 96:76:6a:1a:c7:2d:98:e9:bf:31:57:bb:96:5b:b1:8f:0f:02: 93:22:9b:6c -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt4NL7HVFnUVOMo7I6UixjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2RkYTJhZDA5OGM2YTc4MTRmYjI1OGI0NjliMGQ4NGNlMjRjNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UjPpeO4zhbCh0ei/CvK2P9S0oHK 1LiXnoqH2kUm/OKSyyGbhUB/DtapsP+2ymTLR07E4YqQKqksXakEJpLk6T/Flkqd cGMEPyyXzPYC7D6NI0WlQNg0gibMP2sgaSP0sIA4+biFqyoeadpbH4hQzpE9+Q6r p5lWkDiSrQ7YVAniz+3FJgundNR8/nSpI3CRnH2LoYQbp2UfbWoS63sql8jfzxIq /n21NoHoTIakkpVpXK/5bdZIWCakwF2p0S9THOYVwC61/9NwpBfEjQKUB9trj8aK JXglXynF43DaumUYKLfl/zZDRugypjiT1BZMlU7lKWIy8yCgOgBzYEZcZwIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFHfdoq0JjGp4FPsli0abDYTOJMSnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4Lzg4NTQ1 Ny03MGYyLTQ0MTAtYmU3Yy04MTQ3NmRiYWIxNDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvODg1NDU3 LTcwZjItNDQxMC1iZTdjLTgxNDc2ZGJhYjE0NC8xL2Q5MmlyUW1NYW5nVS15V0xS cHNOaE00a3hLYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQAW9n2AwQAW9/QAwQCuWpkAwQCuc24MBQEAgAC MA4DBQMqBjyAAwUDKgxcwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDBBAwDQYJ KoZIhvcNAQELBQADggEBAIrSbSHJ8OupXSb93NICILy/GpijVOpQrJKyS9I5nLAI 8q6Hw0eXy9fQ7xCprGodhYJmaSj4lk3uxsOPcc1/gjRjfgx8V+xfGUneWh6D9p3i 6BJckc1ksirGSVdQQbfD7MdJSOJrz4b6zCbezOhZb4XcevPqjHbBoxUZOuLe9DXW Abgg4NNn960wNkcaTwDucU6n4VWGW+DgczuX3HsJXDA2NTgeIjnJu2zUb0Yv9R6D rBGU3gEaT01z6MhrEPKLxzsGp2vXbUEQ8jrOHnzzvEjs4HE9AAuslqt9pk5v3hdY 1DIbsV0ZdA4n/ZZ2ahrHLZjpvzFXu5ZbsY8PApMim2w= -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:53 2026 by rpki-client