This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer File: dGNlNVtmVWSiEMNYxooBF7f765o.cer (raw, json) Hash identifier: C7wMkFuzb6eTrH1fQ/R1tXoJ12Y2F0DaCtpDIDKhUog= Subject key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB3A7BCE31FFDC0F9CD817EF1C21DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.65.200.0/22 IP: 185.120.56.0/22 IP: 185.126.180.0/22 IP: 185.255.176.0/22 IP: 194.124.36.0/22 IP: 212.22.64.0/19 IP: 2a06:c3c0::/29 IP: 2a09:d000::/29 IP: 2a0c:5ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3a:7b:ce:31:ff:dc:0f:9c:d8:17:ef:1c:21:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=746365355b665564a210c358c68a0117b7fbeb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:63:44:a1:5b:6d:14:2b:af:e2:40:9c:3c: bf:eb:61:ed:e1:33:5b:ea:e2:15:2a:f5:0e:d5:26: c3:c5:5c:3d:5f:a0:3f:61:fe:df:aa:33:1b:1a:cb: d1:51:9d:31:e9:6c:ac:90:47:35:6f:41:4f:5b:9d: 44:ae:8c:e7:df:8a:2b:61:54:62:7a:be:c4:95:34: 30:5d:59:54:ac:77:1e:cb:11:47:7b:7a:88:d8:f3: 20:1c:df:68:ad:c0:54:25:59:45:34:5e:3e:fd:af: ad:38:0a:61:8c:b2:c4:8a:59:3d:ff:ed:54:57:c4: af:a3:d0:4e:76:3d:00:41:26:df:0b:05:d6:59:d4: e3:a3:25:89:ad:6b:f0:f9:18:d3:89:10:8e:a0:87: de:5c:47:2b:74:13:bb:fc:aa:f4:c8:9a:3b:f4:ac: 4c:09:0f:09:2c:b4:9e:08:f4:6a:78:f3:4f:d8:88: d1:db:b1:60:c0:8c:22:a5:84:4d:cb:cf:b2:a9:a0: 81:0d:18:12:92:5d:ae:ce:1a:7f:ee:ec:03:f8:16: 15:03:1c:0b:ef:e6:a1:6d:e5:56:78:c4:67:24:af: 48:19:63:4f:37:14:5c:bd:c6:1f:59:79:29:25:31: 3d:f4:7f:dd:26:9b:11:14:b0:85:09:88:0c:a9:4c: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.200.0/22 185.120.56.0/22 185.126.180.0/22 185.255.176.0/22 194.124.36.0/22 212.22.64.0/19 IPv6: 2a06:c3c0::/29 2a09:d000::/29 2a0c:5ec0::/29 Signature Algorithm: sha256WithRSAEncryption b0:7d:1c:62:64:1a:1d:21:64:98:96:89:d5:f9:74:38:44:f5: e3:89:0f:22:c0:0e:b4:88:11:a7:53:6d:09:14:37:38:5d:bf: b6:54:fd:a9:64:d5:27:b3:f9:1b:70:c4:17:7a:1e:61:52:bc: 9a:2f:31:1a:98:f0:77:92:7f:98:53:ce:29:ae:63:b8:8a:24: 95:8f:f3:fe:52:e0:23:78:56:b1:74:34:ee:06:2e:85:05:2e: 05:69:e2:59:d3:02:89:42:dd:0b:2e:90:92:39:a4:8e:7e:9f: c8:c7:9b:33:64:21:92:d0:41:b7:dc:ab:fe:13:65:70:59:9b: 38:d3:28:44:a5:4d:39:79:0e:f1:63:9a:37:69:d5:38:79:0a: e2:9c:fa:67:eb:aa:a7:85:d5:ce:c3:fe:64:b7:0f:73:94:0d: 8b:72:d7:ef:35:c6:c6:0c:59:86:5f:4d:5f:70:ea:0d:89:47: d5:39:9a:aa:52:1e:c7:72:41:f6:3a:f8:53:09:d3:8d:67:b4: 9b:1c:54:3e:73:5d:32:67:fb:d4:ff:b4:99:e2:ab:7f:ce:8b: 40:45:32:8c:32:06:c6:a1:fd:78:4d:f9:17:47:0d:f5:72:d8: 3b:1a:d0:db:39:e4:3d:29:5c:32:91:db:5d:8d:71:ef:41:be: a5:65:5e:9f -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt9yzp7zjH/3A+c2BfvHCHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDYzNjUzNTViNjY1NTY0YTIxMGMzNThjNjhhMDExN2I3ZmJlYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8RjRKFbbRQrr+JAnDy/62Ht4TNb 6uIVKvUO1SbDxVw9X6A/Yf7fqjMbGsvRUZ0x6WyskEc1b0FPW51Erozn34orYVRi er7ElTQwXVlUrHceyxFHe3qI2PMgHN9orcBUJVlFNF4+/a+tOAphjLLEilk9/+1U V8Svo9BOdj0AQSbfCwXWWdTjoyWJrWvw+RjTiRCOoIfeXEcrdBO7/Kr0yJo79KxM CQ8JLLSeCPRqePNP2IjR27FgwIwipYRNy8+yqaCBDRgSkl2uzhp/7uwD+BYVAxwL 7+ahbeVWeMRnJK9IGWNPNxRcvcYfWXkpJTE99H/dJpsRFLCFCYgMqUwwswIDAQAB o4ICvzCCArswHQYDVR0OBBYEFHRjZTVbZlVkohDDWMaKARe3++uaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2FlYTM2 ZC1iYWJmLTQ0NzQtYTc4Yi02YTRlY2FmOGIzYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvYWVhMzZk LWJhYmYtNDQ3NC1hNzhiLTZhNGVjYWY4YjNiMS8xL2RHTmxOVnRtVldTaUVNTll4 b29CRjdmNzY1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTAqBAIAATAkAwQCuUHIAwQCuXg4AwQCuX60AwQCuf+wAwQCwnwk AwQF1BZAMBsEAgACMBUDBQMqBsPAAwUDKgnQAAMFAyoMXsAwDQYJKoZIhvcNAQEL BQADggEBALB9HGJkGh0hZJiWidX5dDhE9eOJDyLADrSIEadTbQkUNzhdv7ZU/alk 1Sez+RtwxBd6HmFSvJovMRqY8HeSf5hTzimuY7iKJJWP8/5S4CN4VrF0NO4GLoUF LgVp4lnTAolC3QsukJI5pI5+n8jHmzNkIZLQQbfcq/4TZXBZmzjTKESlTTl5DvFj mjdp1Th5CuKc+mfrqqeF1c7D/mS3D3OUDYty1+81xsYMWYZfTV9w6g2JR9U5mqpS HsdyQfY6+FMJ041ntJscVD5zXTJn+9T/tJniq3/Oi0BFMowyBsah/XhN+RdHDfVy 2Dsa0Ns55D0pXDKR212Nce9BvqVlXp8= -----END CERTIFICATE-----Generated at Sun Jan 25 05:39:03 2026 by rpki-client