This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer File: dVSsTH9FHFu5OC-81G1wxMD53lY.cer (raw, json) Hash identifier: ZPZ9I7ALTQLBwK7LKpUOgfIpa/WOjLNWtmBSx1yAvRY= Subject key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA9BE6FB0739C88B8C3A85D2670F7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.177.228.0/22 IP: 213.178.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9b:e6:fb:07:39:c8:8b:8c:3a:85:d2:67:0f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:b1:a5:1d:03:de:7f:5f:b3:b8:f0:16:da: f7:57:12:81:7b:87:5c:ba:3d:9f:3b:cb:7a:c5:5b: 2c:55:6f:48:6d:e9:20:58:20:ce:dc:1b:c3:c3:a1: 52:e1:3a:68:17:7d:9b:b7:6a:95:fb:9a:b4:bb:b0: 14:23:f6:f1:c8:66:62:aa:52:74:d9:cc:d5:79:37: db:f4:d3:74:69:20:14:ed:86:e9:7f:2e:9a:f3:21: c3:b7:38:a5:3c:25:97:e0:15:d3:7d:46:03:77:a5: b5:13:00:12:5d:71:7e:c6:e5:38:c4:bd:8e:e3:b6: 6c:14:5b:52:e0:65:63:80:0b:ba:4e:d3:ef:2e:2f: f8:39:ac:89:a5:ef:2e:04:96:a4:ed:6e:8d:68:33: 54:86:3f:66:f0:16:e7:dd:c4:9a:97:3a:7f:0c:85: 4e:79:cc:5c:e5:25:f2:d3:17:bb:dd:dc:b3:07:56: b2:64:9e:53:2d:60:39:31:6c:49:a6:23:6a:14:03: da:2e:87:6b:3f:38:9d:7a:0b:6a:e9:93:7c:75:20: 35:63:5d:aa:26:88:40:4a:3e:b5:6d:43:ab:a6:b1: d2:49:9a:27:9d:b0:92:36:ac:8b:c0:7f:05:12:d5: 87:fa:49:28:9d:7d:d4:e8:54:af:42:29:5a:ec:9d: 9c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.228.0/22 213.178.140.0/22 Signature Algorithm: sha256WithRSAEncryption 49:9a:15:be:f2:17:fa:a7:e7:0e:74:b9:ce:36:4a:50:8f:6f: 2a:ef:20:be:43:62:da:8d:3a:6f:ca:ef:bb:fb:a8:6c:d9:6b: db:38:35:fd:41:82:37:7c:c5:ed:b5:a4:d4:74:6e:ff:75:bf: 49:84:77:12:b7:63:89:91:46:26:89:af:4b:b1:65:98:75:dd: 9c:fe:5e:85:8c:fa:d4:f3:51:44:32:71:e3:bf:f3:5a:a8:4d: 3f:72:9b:22:41:fe:c5:e5:bb:b7:02:4d:b0:1e:6a:7e:6f:2c: 65:41:0d:49:fa:b0:9c:95:2c:29:78:5e:b0:91:3f:f8:df:bf: ca:cd:48:4b:91:c0:88:1d:79:79:67:a6:ea:a0:01:90:27:f1: ba:36:10:c8:ee:8b:67:8a:46:89:1e:f7:76:80:51:88:bb:9b: fe:28:6b:5c:33:28:fa:85:2e:ae:95:a6:7c:98:89:33:a1:65: db:77:30:9a:51:bb:35:f5:63:22:32:ca:2a:82:cd:26:a2:0c: 84:96:3a:26:a2:9c:da:d8:01:e4:25:09:4b:9d:2f:54:85:86: fc:17:08:9f:ae:fd:62:43:17:30:73:91:ae:da:08:86:c4:a1: 6d:05:20:07:87:28:a2:0a:4c:a1:51:89:9a:72:32:b1:0e:a2: cf:01:29:0f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt9ypvm+wc5yIuMOoXSZw9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTU0YWM0YzdmNDUxYzViYjkzODJmYmNkNDZkNzBjNGMwZjlkZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8KxpR0D3n9fs7jwFtr3VxKBe4dc uj2fO8t6xVssVW9IbekgWCDO3BvDw6FS4TpoF32bt2qV+5q0u7AUI/bxyGZiqlJ0 2czVeTfb9NN0aSAU7Ybpfy6a8yHDtzilPCWX4BXTfUYDd6W1EwASXXF+xuU4xL2O 47ZsFFtS4GVjgAu6TtPvLi/4OayJpe8uBJak7W6NaDNUhj9m8Bbn3cSalzp/DIVO ecxc5SXy0xe73dyzB1ayZJ5TLWA5MWxJpiNqFAPaLodrPzidegtq6ZN8dSA1Y12q JohASj61bUOrprHSSZonnbCSNqyLwH8FEtWH+kkonX3U6FSvQila7J2cxwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHVUrEx/RRxbuTgvvNRtcMTA+d5WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzg3YTAw YS1iNmY2LTQ3MjEtYTgyOC1kOTMzN2RiMzlkMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvODdhMDBh LWI2ZjYtNDcyMS1hODI4LWQ5MzM3ZGIzOWQxZi8xL2RWU3NUSDlGSEZ1NU9DLTgx RzF3eE1ENTNsWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCubHkAwQC1bKMMA0GCSqGSIb3DQEBCwUAA4IB AQBJmhW+8hf6p+cOdLnONkpQj28q7yC+Q2LajTpvyu+7+6hs2WvbODX9QYI3fMXt taTUdG7/db9JhHcSt2OJkUYmia9LsWWYdd2c/l6FjPrU81FEMnHjv/NaqE0/cpsi Qf7F5bu3Ak2wHmp+byxlQQ1J+rCclSwpeF6wkT/437/KzUhLkcCIHXl5Z6bqoAGQ J/G6NhDI7otnikaJHvd2gFGIu5v+KGtcMyj6hS6ulaZ8mIkzoWXbdzCaUbs19WMi Msoqgs0mogyEljomopza2AHkJQlLnS9UhYb8Fwifrv1iQxcwc5Gu2giGxKFtBSAH hyiiCkyhUYmacjKxDqLPASkP -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:19 2026 by rpki-client