This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer File: dYDRZWm7JKMo4ntH99dRZZcl3vs.cer (raw, json) Hash identifier: UsxnvBtcoNQUv3NZL0PpJoPSQ/Gn+BhynBpcGlxhbwk= Subject key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153734BC156F66367E6D974246BAE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199629 IP: 185.10.144.0/22 IP: 2a03:3a40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:37:34:bc:15:6f:66:36:7e:6d:97:42:46:ba:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7580d16569bb24a328e27b47f7d751659725defb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:7a:2a:d3:a2:62:8e:c4:bb:09:09:c8:d9: 78:3d:e6:7d:2d:27:50:76:c3:ff:49:c0:a5:f5:9c: 9c:26:d8:6d:5c:69:78:53:3a:81:a0:4c:6a:13:27: e7:43:0b:04:bc:94:48:26:5a:f6:0d:86:30:32:56: 8d:dc:d8:8d:6d:0c:c9:80:e9:1a:0d:a8:d8:e1:5a: 4d:d4:08:ff:da:fd:90:24:be:1d:e6:58:95:55:99: 73:71:ff:e0:b4:c4:33:bb:ac:50:91:cf:ab:64:5e: 09:c5:8e:cd:9a:e2:01:89:f8:3b:50:09:59:98:c8: 11:f5:5d:dd:90:ae:99:9d:6c:b6:51:68:31:2e:a5: 19:b3:24:b6:76:34:2c:de:10:f2:13:8e:f2:f9:7d: 47:f9:97:2b:d6:a5:42:06:89:e0:f7:fb:41:35:52: f3:e7:15:46:e1:c9:40:ee:e1:d4:3f:19:c2:50:5a: 44:92:7d:82:e0:c1:96:68:8b:3b:a3:d8:aa:e8:98: 70:24:fc:28:b8:11:9b:77:d1:6f:56:40:1a:72:55: 50:11:18:0a:a2:f9:5c:07:46:fc:92:72:b6:98:b2: 1a:f6:52:94:78:6c:2a:31:d4:7f:9c:7e:1e:eb:5d: c2:03:62:6c:e8:79:b8:6f:fa:3f:c1:14:14:88:fe: 7c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.144.0/22 IPv6: 2a03:3a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199629 Signature Algorithm: sha256WithRSAEncryption 95:61:78:3f:35:d4:cb:cb:f4:21:f5:92:af:4c:3e:73:d9:3e: 45:3e:1f:c5:b4:01:c6:1c:a8:b5:ea:06:72:d4:ec:0e:f7:f9: 60:1e:7e:a3:45:a4:89:c0:23:71:b9:8a:c0:5f:63:73:f5:fe: 1c:f0:b3:e6:78:ab:fe:c5:c9:5b:28:da:5e:df:ec:a9:0e:38: 61:1e:28:40:a9:53:5b:5f:ff:dc:79:44:c3:6c:ea:bd:45:0b: 13:5d:d2:1a:0c:2c:ed:67:be:13:6d:ac:17:97:4f:d5:c0:25: e9:66:02:83:ce:8b:f9:b4:fc:2c:05:8e:8c:ca:0f:e8:28:99: 28:1d:21:dd:ca:e5:3c:fb:65:0a:83:71:04:fe:e2:d0:e8:06: 94:b7:c6:bd:72:7b:3f:38:91:4c:12:b9:21:c3:2c:27:7f:39: 12:6b:39:4e:41:65:ef:93:5a:8d:74:1c:49:c9:4c:bb:8d:c3: e0:94:75:d7:ca:5e:04:d7:1b:fe:75:f7:0c:1d:70:43:77:0e: b9:92:22:a6:87:a2:b0:9a:80:a6:2b:19:c5:77:7b:d0:94:4c: c9:62:58:03:14:f3:4f:75:2b:f4:65:f6:de:79:dc:4e:a8:57: 6e:13:ae:9f:8f:46:34:11:9d:e7:85:a6:67:43:3d:7e:5e:64: 7d:15:da:38 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FTc0vBVvZjZ+bZdCRrrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTgwZDE2NTY5YmIyNGEzMjhlMjdiNDdmN2Q3NTE2NTk3MjVkZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivF6KtOiYo7EuwkJyNl4PeZ9LSdQ dsP/ScCl9ZycJthtXGl4UzqBoExqEyfnQwsEvJRIJlr2DYYwMlaN3NiNbQzJgOka DajY4VpN1Aj/2v2QJL4d5liVVZlzcf/gtMQzu6xQkc+rZF4JxY7NmuIBifg7UAlZ mMgR9V3dkK6ZnWy2UWgxLqUZsyS2djQs3hDyE47y+X1H+Zcr1qVCBong9/tBNVLz 5xVG4clA7uHUPxnCUFpEkn2C4MGWaIs7o9iq6JhwJPwouBGbd9FvVkAaclVQERgK ovlcB0b8knK2mLIa9lKUeGwqMdR/nH4e613CA2Js6Hm4b/o/wRQUiP58owIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHWA0WVpuySjKOJ7R/fXUWWXJd77MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzFhMThk ZS1lZmJkLTQxYjUtYjMzNi03OWZiZDM4NWE1NTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvMWExOGRl LWVmYmQtNDFiNS1iMzM2LTc5ZmJkMzg1YTU1MC8xL2RZRFJaV203SktNbzRudEg5 OWRSWlpjbDN2cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQqQMA0EAgACMAcDBQAqAzpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLzTANBgkqhkiG9w0BAQsFAAOCAQEAlWF4PzXUy8v0 IfWSr0w+c9k+RT4fxbQBxhyoteoGctTsDvf5YB5+o0WkicAjcbmKwF9jc/X+HPCz 5nir/sXJWyjaXt/sqQ44YR4oQKlTW1//3HlEw2zqvUULE13SGgws7We+E22sF5dP 1cAl6WYCg86L+bT8LAWOjMoP6CiZKB0h3crlPPtlCoNxBP7i0OgGlLfGvXJ7PziR TBK5IcMsJ385Ems5TkFl75NajXQcSclMu43D4JR118peBNcb/nX3DB1wQ3cOuZIi poeisJqApisZxXd70JRMyWJYAxTzT3Ur9GX23nncTqhXbhOun49GNBGd54WmZ0M9 fl5kfRXaOA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:25 2026 by rpki-client