This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer (raw, json) Hash identifier: bqtAfBgxlpIdZovFLxZyO3KNGcc6CW1eJFG6IUyA0JE= Subject key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF0563628A3C3203E49E84D411A7AFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.44.75.0 -- 192.44.77.255 IP: 192.108.115.0 -- 192.108.119.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:56:36:28:a3:c3:20:3e:49:e8:4d:41:1a:7a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:81:2a:c1:f5:91:84:36:fd:e5:e8:e6:ac: 85:e7:39:25:a4:bc:ef:35:a8:75:f5:6b:43:9c:47: d5:10:12:b3:04:d2:c3:78:1d:2b:5b:ce:03:fc:be: e2:2e:8a:bd:2c:54:89:2d:c7:15:4d:00:b1:b7:5b: 51:f7:6b:3a:03:b2:47:04:de:1b:69:af:d5:9a:16: 19:03:e4:82:bb:1b:f8:78:7f:97:64:8f:e9:73:e6: 21:2f:b8:78:be:c8:b6:bd:ff:2f:68:68:ef:4b:02: 36:4a:f7:a2:91:ab:f6:55:fe:6c:94:54:2a:4c:de: dd:2e:de:07:9e:c5:1c:46:78:4e:37:85:e2:76:27: 3c:f1:81:bd:60:3f:99:23:24:ab:49:3b:76:f6:69: cb:8c:41:81:90:e8:70:9a:02:16:22:b9:ed:32:2d: e7:4c:56:6c:d8:19:34:cb:fb:92:48:37:bf:db:64: c9:73:87:a7:99:32:c1:a4:8f:41:f7:6b:44:06:e3: 6d:5e:d0:ac:68:f7:c4:ee:d1:b9:09:13:01:68:3c: 96:25:a5:69:3b:7e:16:2d:85:db:fc:b5:42:c7:db: 63:0a:00:0c:14:9d:d0:2f:cc:97:75:d8:59:7c:bc: 3d:d1:ca:2b:73:d3:fd:e4:1a:05:d2:6f:d9:cd:87: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.44.75.0-192.44.77.255 192.108.115.0-192.108.119.255 Signature Algorithm: sha256WithRSAEncryption 76:23:69:0b:46:83:8b:49:90:32:84:f7:c2:16:45:d4:4b:ff: f8:4d:60:d1:e2:a3:6e:2e:73:a3:43:38:69:35:c4:14:68:1e: 87:43:3d:48:49:88:ba:26:cb:a9:3f:a8:84:8c:23:c8:56:91: 61:11:f6:e2:3b:43:ed:69:5a:71:46:5a:3f:69:d4:55:e6:6e: b1:cb:1d:1a:ba:87:06:6e:f0:03:b6:40:7f:ae:48:ae:72:16: 48:a2:50:27:65:56:a5:a9:e3:d1:d9:b5:e0:72:56:c9:f4:87: 29:a5:e6:44:58:ae:93:a9:ab:7b:2f:c1:60:2a:57:1b:7a:b9: 17:32:b2:22:93:20:d3:85:07:5e:c2:9b:3d:1f:22:84:90:66: 29:37:e9:e5:2a:25:ab:9e:08:fc:f6:31:14:9b:f9:b8:03:05: 73:85:a5:60:9d:ff:31:14:a6:e0:cb:ad:ad:6c:da:90:00:50: ec:ea:18:fd:b3:46:e2:29:01:bf:af:2c:6a:69:71:ec:71:5e: a7:f8:8f:99:dc:5b:71:4d:0d:62:d8:32:a1:15:b9:a7:a7:4b: b7:9e:c2:d6:69:8a:ee:0b:46:9b:60:0c:67:8b:72:09:37:f7: 70:b1:0f:92:b6:db:65:c0:d1:0a:56:f4:20:fc:70:32:48:5f: b4:9e:00:de -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt/8FY2KKPDID5J6E1BGnr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDI2N2YzZWNmY2M2MTY2OGUwNTAxYmNhNjBjZWQ2ZGQ3NWQzNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0uBKsH1kYQ2/eXo5qyF5zklpLzv Nah19WtDnEfVEBKzBNLDeB0rW84D/L7iLoq9LFSJLccVTQCxt1tR92s6A7JHBN4b aa/VmhYZA+SCuxv4eH+XZI/pc+YhL7h4vsi2vf8vaGjvSwI2Sveikav2Vf5slFQq TN7dLt4HnsUcRnhON4Xidic88YG9YD+ZIySrSTt29mnLjEGBkOhwmgIWIrntMi3n TFZs2Bk0y/uSSDe/22TJc4enmTLBpI9B92tEBuNtXtCsaPfE7tG5CRMBaDyWJaVp O34WLYXb/LVCx9tjCgAMFJ3QL8yXddhZfLw90corc9P95BoF0m/ZzYekHwIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFHQmfz7PzGFmjgUBvKYM7W3XXTR8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzcwY2I4 MC00ZTZkLTQ2YTUtYjFiNC00ZTNmNGQ2OGY2ODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNzBjYjgw LTRlNmQtNDZhNS1iMWI0LTRlM2Y0ZDY4ZjY4Mi8xL2RDWl9Qc19NWVdhT0JRRzhw Z3p0YmRkZE5Idy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAiBAIAATAcMAwDBADALEsDBAHALEwwDAMEAMBscwMEA8BscDAN BgkqhkiG9w0BAQsFAAOCAQEAdiNpC0aDi0mQMoT3whZF1Ev/+E1g0eKjbi5zo0M4 aTXEFGgeh0M9SEmIuibLqT+ohIwjyFaRYRH24jtD7WlacUZaP2nUVeZuscsdGrqH Bm7wA7ZAf65IrnIWSKJQJ2VWpanj0dm14HJWyfSHKaXmRFiuk6mrey/BYCpXG3q5 FzKyIpMg04UHXsKbPR8ihJBmKTfp5Solq54I/PYxFJv5uAMFc4WlYJ3/MRSm4Mut rWzakABQ7OoY/bNG4ikBv68samlx7HFep/iPmdxbcU0NYtgyoRW5p6dLt57C1mmK 7gtGm2AMZ4tyCTf3cLEPkrbbZcDRClb0IPxwMkhftJ4A3g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:24 2026 by rpki-client