This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer (raw, json) Hash identifier: A4lRqaggwCyJTTUSIAzLKUJMf6g+9F4syMRN1WTaWNM= Subject key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE9FB3A3D9FC157EA645D1B60AA83 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210318 IP: 94.156.75.0/24 IP: 185.37.232.0/22 IP: 194.55.187.0/24 IP: 2a13:fa40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e9:fb:3a:3d:9f:c1:57:ea:64:5d:1b:60:aa:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:f7:56:04:30:7b:2d:27:3e:5f:9b:09:4e: 9c:1f:f9:e9:eb:2d:83:33:15:3e:fd:a5:52:c5:c8: 15:78:d2:08:1a:1f:5b:60:06:00:6e:01:61:7d:d8: d2:d9:6c:cf:0f:8d:fa:46:b6:41:3f:55:b9:6c:ca: b7:b0:94:1d:94:e5:11:f8:74:0f:19:bd:ee:48:d8: e0:b0:c0:d7:89:f6:fe:a9:36:0f:6f:bd:3f:b6:29: 23:c2:d5:8c:c0:eb:14:c1:07:7b:3d:77:0b:c1:22: 86:ad:de:32:89:53:7e:7a:8e:a0:fa:e4:de:fc:ac: 74:47:2b:2c:2c:2a:b0:c5:86:1b:79:1f:10:09:70: 14:47:fc:31:ed:97:ea:ad:46:90:c5:1c:16:c2:5a: 96:56:46:67:9d:37:cd:e7:c1:f3:68:1f:d2:2a:7b: 67:b9:a5:35:48:41:75:6e:47:bb:58:07:bd:e8:52: 1f:01:9a:50:70:e4:85:b0:94:cf:6c:89:35:93:73: 8c:a1:4e:e1:71:4f:65:f8:e6:64:75:17:7e:b9:a6: ad:28:bd:46:71:f7:7c:46:22:2a:29:59:0e:44:8b: 20:a6:5b:a1:36:98:84:7b:d6:7a:48:17:e6:d9:80: 27:f0:c8:d1:20:44:2d:15:29:6c:bb:93:f3:57:3d: 03:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.75.0/24 185.37.232.0/22 194.55.187.0/24 IPv6: 2a13:fa40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210318 Signature Algorithm: sha256WithRSAEncryption 96:2f:e0:35:30:c8:3e:46:f5:7e:b9:69:6f:c6:c9:db:8f:df: 81:a6:da:8c:24:1a:40:5e:b6:8a:36:53:e9:42:99:fc:9f:13: 06:03:9a:f6:f1:e2:cd:7f:df:17:ac:9a:bb:cc:ac:4f:25:b1: 53:5d:2c:7c:4d:6d:d9:c9:85:42:35:0f:23:0b:cb:a7:fa:a7: 3c:30:c5:fe:3c:59:a7:53:d6:cd:58:4c:6b:b7:e0:63:4f:2c: 7f:c8:c0:8a:0e:01:b2:11:55:41:17:9b:a7:0a:d4:8c:c6:32: d6:25:bc:ca:69:e6:b4:fe:96:06:28:b6:ac:c9:2c:3b:b6:1e: c6:ee:45:fb:6a:84:8c:82:9a:21:44:87:41:79:c0:db:65:58: d3:97:e2:06:50:e3:b0:d2:3d:4c:06:39:a4:e6:75:1a:63:9e: d0:d7:af:f8:fe:d1:30:53:bf:a5:f1:69:f9:5a:9e:07:e2:45: b3:50:c2:af:62:d4:aa:00:12:64:06:13:90:76:af:00:0f:59: 40:da:30:65:03:e6:27:e6:b4:05:57:95:3f:e2:85:1b:41:91: f8:b9:b7:8b:61:77:b9:4e:d2:6d:16:b3:5b:88:ee:fa:9e:73: 3b:4b:2a:10:5d:25:ae:f5:59:39:55:fa:d5:38:40:f2:e1:e1: 66:0e:1e:45 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9Wun7Oj2fwVfqZF0bYKqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGE1OWI3ZmI0ZTAzNGY2Nzc3NWYyODc1ZWZiZmM5ZWZmMjQ3ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNH3VgQwey0nPl+bCU6cH/np6y2D MxU+/aVSxcgVeNIIGh9bYAYAbgFhfdjS2WzPD436RrZBP1W5bMq3sJQdlOUR+HQP Gb3uSNjgsMDXifb+qTYPb70/tikjwtWMwOsUwQd7PXcLwSKGrd4yiVN+eo6g+uTe /Kx0RyssLCqwxYYbeR8QCXAUR/wx7ZfqrUaQxRwWwlqWVkZnnTfN58HzaB/SKntn uaU1SEF1bke7WAe96FIfAZpQcOSFsJTPbIk1k3OMoU7hcU9l+OZkdRd+uaatKL1G cfd8RiIqKVkORIsgpluhNpiEe9Z6SBfm2YAn8MjRIEQtFSlsu5PzVz0D+QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHSlm3+04DT2d3Xyh177/J7/JH6OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzJiMTk1 ZS0wYWJhLTQ3ZDQtOGUzYi1hZDMyZWY0OWQ0MTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMmIxOTVl LTBhYmEtNDdkNC04ZTNiLWFkMzJlZjQ5ZDQxOS8xL2RLV2JmN1RnTlBaM2RmS0hY dnY4bnY4a2ZvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAXpxLAwQCuSXoAwQAwje7MA0EAgACMAcDBQMq E/pAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM1jjANBgkqhkiG9w0BAQsFAAOC AQEAli/gNTDIPkb1frlpb8bJ24/fgabajCQaQF62ijZT6UKZ/J8TBgOa9vHizX/f F6yau8ysTyWxU10sfE1t2cmFQjUPIwvLp/qnPDDF/jxZp1PWzVhMa7fgY08sf8jA ig4BshFVQRebpwrUjMYy1iW8ymnmtP6WBii2rMksO7Yexu5F+2qEjIKaIUSHQXnA 22VY05fiBlDjsNI9TAY5pOZ1GmOe0Nev+P7RMFO/pfFp+VqeB+JFs1DCr2LUqgAS ZAYTkHavAA9ZQNowZQPmJ+a0BVeVP+KFG0GR+Lm3i2F3uU7SbRazW4ju+p5zO0sq EF0lrvVZOVX61ThA8uHhZg4eRQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:45 2026 by rpki-client