This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer File: dJEiw1Q4pOsmIz_cbkux3y2q70I.cer (raw, json) Hash identifier: QkQ4BsuaRBmhp634rThHTf0y7wVP1bHan7FN8mpwcaM= Subject key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F847CBB7A9033844D5BEAE39BB2E608 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44546 IP: 31.148.0.0/16 IP: 91.201.20.0/22 IP: 92.38.0.0/17 IP: 92.253.128.0/17 IP: 93.170.0.0/15 IP: 95.46.0.0/15 IP: 146.120.0.0/16 IP: 146.158.0.0/17 IP: 151.249.128.0/17 IP: 185.67.252.0/22 IP: 195.178.4.0/23 IP: 2a02:128::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7c:bb:7a:90:33:84:4d:5b:ea:e3:9b:b2:e6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:b1:cb:3f:a7:af:66:56:09:70:38:3c:fe: 22:5d:cb:e4:7e:65:bc:0a:d8:75:af:c9:de:b9:7e: 1e:1b:eb:ce:c1:af:a9:93:f8:17:e3:90:29:14:18: 0a:b5:e6:fc:1f:64:91:71:f1:5a:c1:a0:3e:bc:ed: bf:b3:40:5d:f9:3a:81:61:82:b5:f2:6f:45:87:5c: 2c:a1:16:08:0f:65:7c:9b:ae:65:d6:27:d9:f6:a2: 7a:f7:15:c4:34:77:7f:f9:9d:9e:70:ba:62:2d:3a: b4:37:23:17:0b:35:dd:cb:61:66:19:50:44:50:02: d1:2b:33:6c:1e:f8:3d:7d:80:b9:b6:b8:20:87:4f: 86:12:c1:09:0e:6d:01:83:8f:23:ac:fc:90:56:7d: 0e:e4:68:e0:41:86:e1:83:a0:2a:95:69:54:92:20: dc:62:26:bd:c4:18:ea:40:a1:f7:95:6b:85:92:52: 4e:f4:4e:0a:2a:a7:96:88:eb:d3:65:0e:34:69:8a: 2b:e6:9e:5c:46:e6:da:a6:26:27:5c:ab:f2:8c:0b: 77:39:08:00:b9:ee:83:d8:03:f4:3d:ae:67:27:4a: e2:72:00:c9:05:01:ce:2c:3d:a7:0b:ad:c0:10:87: ad:44:bd:7b:59:f0:ba:b7:77:83:59:36:7e:04:80: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.0.0/16 91.201.20.0/22 92.38.0.0/17 92.253.128.0/17 93.170.0.0/15 95.46.0.0/15 146.120.0.0/16 146.158.0.0/17 151.249.128.0/17 185.67.252.0/22 195.178.4.0/23 IPv6: 2a02:128::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44546 Signature Algorithm: sha256WithRSAEncryption 21:46:3a:be:0b:ef:62:81:fb:d0:f7:23:1b:8d:09:84:5e:b5: da:04:b8:e2:63:a6:9a:b8:58:54:d0:7f:c8:2a:15:86:e5:6f: e1:fd:fc:4d:48:74:c9:84:c1:27:88:b1:b6:41:96:9c:d2:7f: ae:19:e3:3c:3e:96:ca:f0:e3:f9:72:9e:90:db:64:04:32:f3: 5b:6c:e9:ca:ee:9e:24:ba:de:82:5d:f6:f1:48:25:5d:dc:d2: 22:e8:fd:ea:9d:8a:70:5f:8d:26:4f:45:5d:cf:9d:e8:82:bc: 88:80:bf:f2:f0:a0:dc:a1:ca:c5:d7:a3:8f:59:18:2e:d7:2b: 43:d6:5e:6b:b3:9d:cb:05:37:e5:c0:46:d2:9d:4d:31:c7:8f: e9:14:64:ed:cf:e7:89:ea:c0:27:cc:30:14:8d:29:e5:66:e5: df:07:e9:14:cb:4e:f6:86:6c:75:fa:c3:c4:88:55:e3:83:02: ff:3b:17:68:e1:ba:4e:88:80:32:eb:b7:a7:2c:a1:dc:d3:3a: 14:1a:e1:cb:47:03:35:f8:df:3d:75:ae:ad:c8:a2:af:a9:71: c3:d1:26:d0:51:c5:be:8d:76:91:81:98:7f:6a:5d:b5:0c:33: ee:5c:81:85:1b:c8:0a:38:0f:cf:ba:84:37:78:f1:ab:6b:df: 0e:cb:c3:01 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt/hHy7epAzhE1b6uObsuYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ixyz+nr2ZWCXA4PP4iXcvkfmW8 Cth1r8neuX4eG+vOwa+pk/gX45ApFBgKteb8H2SRcfFawaA+vO2/s0Bd+TqBYYK1 8m9Fh1wsoRYID2V8m65l1ifZ9qJ69xXENHd/+Z2ecLpiLTq0NyMXCzXdy2FmGVBE UALRKzNsHvg9fYC5trggh0+GEsEJDm0Bg48jrPyQVn0O5GjgQYbhg6AqlWlUkiDc Yia9xBjqQKH3lWuFklJO9E4KKqeWiOvTZQ40aYor5p5cRubapiYnXKvyjAt3OQgA ue6D2AP0Pa5nJ0ricgDJBQHOLD2nC63AEIetRL17WfC6t3eDWTZ+BIBXVQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzE4YTkx Yy0wZTc3LTQ1YzktOGNjNC0wNjJjNjkzM2FiZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvMThhOTFj LTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9zbUl6X2Ni a3V4M3kycTcwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTBEBAIAATA+AwMAH5QDBAJbyRQDBAdcJgADBAdc/YADAwFdqgMD AV8uAwMAkngDBAeSngADBAeX+YADBAK5Q/wDBAHDsgQwDQQCAAIwBwMFAyoCASgw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAK4CMA0GCSqGSIb3DQEBCwUAA4IBAQAh Rjq+C+9igfvQ9yMbjQmEXrXaBLjiY6aauFhU0H/IKhWG5W/h/fxNSHTJhMEniLG2 QZac0n+uGeM8PpbK8OP5cp6Q22QEMvNbbOnK7p4kut6CXfbxSCVd3NIi6P3qnYpw X40mT0Vdz53ogryIgL/y8KDcocrF16OPWRgu1ytD1l5rs53LBTflwEbSnU0xx4/p FGTtz+eJ6sAnzDAUjSnlZuXfB+kUy072hmx1+sPEiFXjgwL/Oxdo4bpOiIAy67en LKHc0zoUGuHLRwM1+N89da6tyKKvqXHD0SbQUcW+jXaRgZh/al21DDPuXIGFG8gK OA/PuoQ3ePGra98Oy8MB -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:26 2026 by rpki-client