This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer File: dahWeFOS2ifQC9snCRxZJsMVXYk.cer (raw, json) Hash identifier: 4/yKziFmdHwlzlap3mbIJVEBkLn29ZGARuJjPbIYgFU= Subject key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C676678187FE5F36D71254CDF81FAE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205802 IP: 185.199.204.0/22 IP: 2a0b:8840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:76:67:81:87:fe:5f:36:d7:12:54:cd:f8:1f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75a856785392da27d00bdb27091c5926c3155d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:16:b2:02:be:e4:b7:cf:cf:ed:dc:3f:04: 8b:25:6d:2c:bd:ed:00:35:9a:54:d7:51:ff:ed:3b: a8:9c:b3:be:83:01:d2:a7:9b:91:da:48:20:db:9e: bc:d2:38:b5:87:cb:f0:40:d1:33:f3:06:fb:f6:0a: 96:fc:cb:ce:30:19:64:de:69:73:db:18:96:db:66: 4e:a2:84:0f:49:ee:29:13:9c:1b:2c:e1:5e:cb:cf: 2c:49:c3:50:62:33:ec:83:ff:50:f1:9b:a3:76:36: a5:03:a4:d5:02:6f:48:c8:b5:36:f4:50:14:43:93: 2e:a7:39:3a:f4:8f:03:4b:c6:c4:bc:8d:00:0a:f1: a2:6d:d9:9a:57:87:77:3c:5c:f4:f6:0b:0e:32:a2: 66:07:25:40:09:06:1c:03:48:88:7a:a7:0b:b2:2a: b8:9e:45:22:7e:ad:1e:d1:c4:6e:a0:41:27:2b:28: 75:af:fe:8d:44:4d:9b:64:dd:90:66:2b:45:a6:9b: 39:d1:d3:0e:55:ca:48:bb:10:33:66:96:d2:50:fd: 7b:33:01:9f:d6:50:c6:73:58:e3:7f:9e:b3:09:81: 30:6a:da:37:4c:af:57:2d:86:85:a3:a4:82:7b:ca: 00:b6:aa:d6:3f:29:e5:c4:96:2b:e7:b8:11:18:9d: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.204.0/22 IPv6: 2a0b:8840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205802 Signature Algorithm: sha256WithRSAEncryption 47:38:7c:48:18:b8:4f:65:5a:5d:b0:94:d6:a7:b7:04:64:d8: 4f:60:38:6d:01:ae:a0:03:56:fa:06:3b:fd:fc:9f:15:1b:a0: d7:3b:07:dd:17:c8:5b:60:5b:ea:ab:c8:27:2c:e2:56:7b:f1: f9:55:cf:22:51:d3:78:b2:e3:40:9d:bb:3a:9e:cc:5b:b1:12: 74:d0:4d:a7:02:ed:fd:25:53:37:ed:87:44:16:34:94:d4:d2: b1:64:88:87:f6:ac:12:f0:68:54:cb:45:02:1d:c5:1f:7f:75: d3:c4:a2:9a:1e:67:d0:8c:f0:e1:b6:e3:51:a9:b7:8e:30:27: 64:d9:f6:68:8b:e0:2f:32:49:7c:e4:db:47:67:ba:7d:3b:31: 3f:ed:86:d1:0d:a3:18:bd:d8:51:34:cb:d5:e2:e6:8a:28:dc: 57:2d:1b:b5:e2:4f:d1:4c:b3:8d:51:09:aa:13:72:c5:ab:47: 96:dd:46:7b:38:86:f4:a2:38:de:3b:1e:f0:93:70:c6:f4:63: 63:34:08:21:15:52:73:38:5d:96:77:85:25:c0:73:6a:0c:c1: 1b:c3:ba:39:06:83:45:2e:1e:25:98:53:f4:c2:9d:8b:23:8c: 6f:9b:a8:10:21:64:86:2e:1b:ab:64:86:70:4d:e2:04:ee:dd: 4d:2b:4f:ac -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xnZngYf+XzbXElTN+B+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWE4NTY3ODUzOTJkYTI3ZDAwYmRiMjcwOTFjNTkyNmMzMTU1ZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjEWsgK+5LfPz+3cPwSLJW0sve0A NZpU11H/7TuonLO+gwHSp5uR2kgg25680ji1h8vwQNEz8wb79gqW/MvOMBlk3mlz 2xiW22ZOooQPSe4pE5wbLOFey88sScNQYjPsg/9Q8ZujdjalA6TVAm9IyLU29FAU Q5Mupzk69I8DS8bEvI0ACvGibdmaV4d3PFz09gsOMqJmByVACQYcA0iIeqcLsiq4 nkUifq0e0cRuoEEnKyh1r/6NRE2bZN2QZitFpps50dMOVcpIuxAzZpbSUP17MwGf 1lDGc1jjf56zCYEwato3TK9XLYaFo6SCe8oAtqrWPynlxJYr57gRGJ1lZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHWoVnhTkton0AvbJwkcWSbDFV2JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3L2VjMGRh OS1lYThjLTRiOGUtYTMyYS1hNWJjMGM3MGM1MTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvZWMwZGE5 LWVhOGMtNGI4ZS1hMzJhLWE1YmMwYzcwYzUxMy8xL2RhaFdlRk9TMmlmUUM5c25D UnhaSnNNVlhZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucfMMA0EAgACMAcDBQMqC4hAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMj6jANBgkqhkiG9w0BAQsFAAOCAQEARzh8SBi4T2Va XbCU1qe3BGTYT2A4bQGuoANW+gY7/fyfFRug1zsH3RfIW2Bb6qvIJyziVnvx+VXP IlHTeLLjQJ27Op7MW7ESdNBNpwLt/SVTN+2HRBY0lNTSsWSIh/asEvBoVMtFAh3F H39108Simh5n0Izw4bbjUam3jjAnZNn2aIvgLzJJfOTbR2e6fTsxP+2G0Q2jGL3Y UTTL1eLmiijcVy0bteJP0UyzjVEJqhNyxatHlt1GeziG9KI43jse8JNwxvRjYzQI IRVSczhdlneFJcBzagzBG8O6OQaDRS4eJZhT9MKdiyOMb5uoECFkhi4bq2SGcE3i BO7dTStPrA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:48 2026 by rpki-client