This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer File: dOgVmhbXKz1s37qgltaROf3p0pA.cer (raw, json) Hash identifier: 6BKUALCTO/NPiugk8R1VFl8evBYz5DLPGjDkpNSS3NU= Subject key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F0F3D1F71D86F4EFB82A82DBBAFD4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.35.210.0/24 IP: 2a14:5200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:0f:3d:1f:71:d8:6f:4e:fb:82:a8:2d:bb:af:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:e2:ac:15:19:e9:9f:e6:43:18:b9:f3:c8: 69:ca:8b:fe:05:4c:93:e3:0b:3d:89:76:07:89:8f: 58:ac:f3:e4:2d:de:5e:e8:49:55:85:ae:20:a3:6f: b9:e4:cc:bb:1b:1e:92:f1:96:19:5a:bb:a0:b8:c2: d0:d1:33:f2:8e:2d:77:48:eb:6f:f6:7f:4f:1d:3f: 8d:83:85:47:21:7e:60:dd:07:39:ba:bc:c1:1f:c8: 56:02:93:31:3b:05:72:49:25:66:a7:e5:75:f2:95: ba:8a:5a:4d:5a:b2:03:9e:29:7e:e3:9c:ab:72:3b: 2a:e2:10:e1:a8:12:f5:ef:0b:16:62:5b:54:ef:a7: f2:e1:38:5b:4c:50:d6:ac:8a:a6:82:d4:ca:33:9e: eb:97:29:70:2d:18:16:cc:04:dc:69:e8:19:86:47: 7e:87:21:03:88:b9:f7:f9:ff:21:d5:c2:c3:27:f0: ab:02:b4:a7:7f:02:60:b5:88:69:6a:c0:95:ac:bf: 4c:e7:bc:e8:f4:77:fc:7f:ec:bd:9b:dd:4c:a3:74: d2:8c:8a:4b:45:a2:89:e7:93:95:ed:96:0f:6f:6c: 6a:63:88:47:02:c0:c8:3a:20:6f:ea:3a:93:f9:83: 6e:ce:fc:c8:fb:61:cb:da:81:ae:fe:2d:26:08:97: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.210.0/24 IPv6: 2a14:5200::/29 Signature Algorithm: sha256WithRSAEncryption 3e:90:f8:d3:6f:dd:9f:ec:43:ea:59:fb:91:c2:99:aa:a5:55: dc:a3:55:5b:96:00:0b:39:4f:cb:b2:74:83:fa:1b:2e:bf:e1: a2:70:0e:72:e4:63:59:d6:eb:bb:00:25:d1:72:56:88:42:e9: 3d:89:f4:9b:85:88:40:1f:f2:4e:40:fc:58:eb:c3:b5:f1:6d: 25:92:70:01:e9:f2:20:53:f3:1d:81:3b:8d:35:f7:2c:63:67: 6c:dd:30:54:f7:c7:45:8b:dd:ce:7e:c9:97:51:1e:9e:ca:ea: 13:c0:4b:e0:b4:20:a0:17:7d:40:53:fa:83:58:66:4b:00:fb: 67:5a:6c:08:9f:1d:ad:ee:cb:35:6b:86:98:45:e5:1e:b9:b9: 3d:8f:cc:8f:3b:9c:2b:c6:c4:54:86:f2:06:d1:77:c0:0b:5c: ba:11:f9:37:f2:c5:46:c9:a4:72:e8:78:bd:01:45:2f:43:fb: b3:4c:6f:b7:b8:34:0c:c4:e2:18:9f:da:fc:64:db:d9:bb:71: c0:2f:38:3d:d7:73:dd:ca:63:8f:7e:ea:f1:99:c3:6d:43:7c: 5d:c9:48:69:ad:a1:95:36:44:ca:2e:93:16:8d:08:01:21:a1: 3c:03:d8:67:9c:19:8d:38:d9:67:2f:ef:dc:78:19:fc:50:60: 10:70:8d:d6 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8fw89H3HYb077gqgtu6/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGU4MTU5YTE2ZDcyYjNkNmNkZmJhYTA5NmQ2OTEzOWZkZTlkMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3enirBUZ6Z/mQxi588hpyov+BUyT 4ws9iXYHiY9YrPPkLd5e6ElVha4go2+55My7Gx6S8ZYZWruguMLQ0TPyji13SOtv 9n9PHT+Ng4VHIX5g3Qc5urzBH8hWApMxOwVySSVmp+V18pW6ilpNWrIDnil+45yr cjsq4hDhqBL17wsWYltU76fy4ThbTFDWrIqmgtTKM57rlylwLRgWzATcaegZhkd+ hyEDiLn3+f8h1cLDJ/CrArSnfwJgtYhpasCVrL9M57zo9Hf8f+y9m91Mo3TSjIpL RaKJ55OV7ZYPb2xqY4hHAsDIOiBv6jqT+YNuzvzI+2HL2oGu/i0mCJdHPwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHToFZoW1ys9bN+6oJbWkTn96dKQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzliZTBh Ny00MWIzLTQ4YTUtOGEzOC04NGNiYzg1YTIzNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvOWJlMGE3 LTQxYjMtNDhhNS04YTM4LTg0Y2JjODVhMjM0My8xL2RPZ1ZtaGJYS3oxczM3cWds dGFST2YzcDBwQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSPSMA0EAgACMAcDBQMqFFIAMA0GCSqGSIb3 DQEBCwUAA4IBAQA+kPjTb92f7EPqWfuRwpmqpVXco1VblgALOU/LsnSD+hsuv+Gi cA5y5GNZ1uu7ACXRclaIQuk9ifSbhYhAH/JOQPxY68O18W0lknAB6fIgU/MdgTuN NfcsY2ds3TBU98dFi93OfsmXUR6eyuoTwEvgtCCgF31AU/qDWGZLAPtnWmwInx2t 7ss1a4aYReUeubk9j8yPO5wrxsRUhvIG0XfAC1y6Efk38sVGyaRy6Hi9AUUvQ/uz TG+3uDQMxOIYn9r8ZNvZu3HALzg913PdymOPfurxmcNtQ3xdyUhpraGVNkTKLpMW jQgBIaE8A9hnnBmNONlnL+/ceBn8UGAQcI3W -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:24 2026 by rpki-client