This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer (raw, json) Hash identifier: +EgZA/76yEaB8k8dTPJvl3MfWuRhGQPbU5IrN6HteDQ= Subject key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C676FF761C9DBFF9016D2958E0463F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 87.120.132.0/24 IP: 91.92.176.0/23 IP: 94.156.66.0/24 IP: 94.156.227.0/24 IP: 185.230.208.0/22 IP: 212.87.206.0/24 IP: 2a0d:e880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:76:ff:76:1c:9d:bf:f9:01:6d:29:58:e0:46:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:75:9a:23:eb:06:03:65:3c:3e:91:36:3e: 69:9d:9c:53:c8:d3:a3:97:fc:5b:94:8d:65:33:2a: ae:72:01:11:cd:0d:dd:6d:ff:b2:f1:18:b8:88:60: 91:42:f3:29:e0:da:5f:19:0d:62:df:b4:80:66:8c: 80:f8:d7:2f:48:9d:17:2e:fc:2e:e6:3d:cf:ad:20: f8:72:a9:f9:01:26:d4:15:87:d1:e1:98:da:91:ee: 2b:f0:96:8e:d9:a9:12:39:85:56:e7:af:08:88:f1: 0c:6f:a2:1a:5b:27:ac:b3:68:d8:39:17:79:94:f5: c8:31:6f:0b:1a:91:cc:cb:41:43:c8:63:fc:e7:d5: db:67:74:56:f0:31:f1:53:30:52:51:9b:7d:b4:4e: cf:aa:da:24:66:83:22:d3:69:83:2f:4b:d4:ac:36: fb:a9:de:4b:93:3a:46:33:80:6e:15:db:3a:33:93: ea:26:ca:17:89:aa:39:b7:0b:6d:ac:b3:fe:ee:ad: e1:2c:2a:9a:7e:e6:16:a4:99:68:63:11:10:7c:98: 2d:63:33:e6:52:3c:89:ea:4e:b8:f4:1f:9f:0c:12: 48:03:3f:fe:29:b6:17:8a:c4:41:2f:b9:b7:e0:b7: ae:33:1a:12:6b:07:df:f8:9f:57:c7:c6:41:b6:9e: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.132.0/24 91.92.176.0/23 94.156.66.0/24 94.156.227.0/24 185.230.208.0/22 212.87.206.0/24 IPv6: 2a0d:e880::/29 Signature Algorithm: sha256WithRSAEncryption 50:ac:72:1a:79:16:46:2e:3b:e1:fc:68:ac:ef:25:a1:a6:db: 30:a5:a9:c8:aa:87:7a:86:b1:b3:f0:02:7c:e9:a8:95:46:b1: 90:6b:b7:c0:3a:f0:31:f0:fe:37:d1:1d:43:38:af:64:26:35: 91:46:0f:d2:b9:26:e3:5c:7a:8a:00:cb:79:46:cd:52:3f:66: 9c:e6:ab:dd:17:b5:91:46:65:0b:5f:23:24:f5:ac:09:57:bd: 9b:51:69:d5:82:58:78:a8:49:c2:b0:c1:45:15:7a:a2:b4:3e: d3:d8:e1:a4:5f:86:41:1b:75:2c:48:98:03:f4:02:b6:46:4c: 4b:1a:a4:c9:bf:91:90:56:0d:7b:34:bf:1b:46:a6:4e:31:15: f8:d3:9d:43:bc:8c:f0:33:0f:16:cd:ef:52:6a:f5:17:9b:af: 1e:b5:ef:56:fc:be:e4:71:f4:a4:fc:f1:53:b1:b1:f6:66:88: 4e:e1:e6:50:e6:70:a3:50:e4:21:02:78:2a:fe:ad:07:1c:84: f2:b6:3e:6c:f9:cc:d9:95:d9:c7:01:fa:f2:7c:e2:fa:7d:36: 65:83:7d:ad:b7:1a:b7:c4:0a:09:c6:fc:48:c3:fb:9a:eb:15: db:51:c6:2b:93:47:02:e4:8d:6b:e6:59:f4:93:dc:13:4d:b0: 8c:85:87:93 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt3xnb/dhydv/kBbSlY4EY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDlkOGE0MzI4OTMwYjkzOGZhODYwMThiMWU0NDdlZTRkOGRhOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBR1miPrBgNlPD6RNj5pnZxTyNOj l/xblI1lMyqucgERzQ3dbf+y8Ri4iGCRQvMp4NpfGQ1i37SAZoyA+NcvSJ0XLvwu 5j3PrSD4cqn5ASbUFYfR4Zjake4r8JaO2akSOYVW568IiPEMb6IaWyess2jYORd5 lPXIMW8LGpHMy0FDyGP859XbZ3RW8DHxUzBSUZt9tE7PqtokZoMi02mDL0vUrDb7 qd5LkzpGM4BuFds6M5PqJsoXiao5twttrLP+7q3hLCqafuYWpJloYxEQfJgtYzPm UjyJ6k649B+fDBJIAz/+KbYXisRBL7m34LeuMxoSawff+J9Xx8ZBtp4JuwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFHSdikMokwuTj6hgGLHkR+5Njaj5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzNmYTIx Ny04NWY1LTRmMTktYjkxZS0wODg5ZTNlY2QxZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvM2ZhMjE3 LTg1ZjUtNGYxOS1iOTFlLTA4ODllM2VjZDFmNi8xL2RKMktReWlUQzVPUHFHQVlz ZVJIN2syTnFQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAV3iEAwQBW1ywAwQAXpxCAwQAXpzjAwQCuebQ AwQA1FfOMA0EAgACMAcDBQMqDeiAMA0GCSqGSIb3DQEBCwUAA4IBAQBQrHIaeRZG Ljvh/Gis7yWhptswpanIqod6hrGz8AJ86aiVRrGQa7fAOvAx8P430R1DOK9kJjWR Rg/SuSbjXHqKAMt5Rs1SP2ac5qvdF7WRRmULXyMk9awJV72bUWnVglh4qEnCsMFF FXqitD7T2OGkX4ZBG3UsSJgD9AK2RkxLGqTJv5GQVg17NL8bRqZOMRX4051DvIzw Mw8Wze9SavUXm68ete9W/L7kcfSk/PFTsbH2ZohO4eZQ5nCjUOQhAngq/q0HHITy tj5s+czZldnHAfryfOL6fTZlg32ttxq3xAoJxvxIw/ua6xXbUcYrk0cC5I1r5ln0 k9wTTbCMhYeT -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:33 2026 by rpki-client