This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer File: dbeVBmFQocNn2rzPaclwqwxyMhU.cer (raw, json) Hash identifier: hmOUXvO5XT21pZ7LsBSXkfffGVmfbDoDMP9L1LHDWls= Subject key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8C5EE250C352CF7B25B8F19B882F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.5.54.0/24 IP: 2a13:5e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c5:ee:25:0c:35:2c:f7:b2:5b:8f:19:b8:82:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75b795066150a1c367dabccf69c970ab0c723215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:b4:ba:d3:92:e6:81:79:f9:7c:6d:60:de: 70:da:cb:3c:8c:47:74:67:75:c4:75:9f:39:72:34: be:29:98:48:95:47:e7:81:fc:a9:96:4a:16:07:e8: de:37:77:f5:ca:65:55:db:38:bc:90:22:ca:8f:ca: 41:64:ae:e5:21:c7:83:45:ca:1d:63:75:34:87:b2: 9f:65:dc:8b:c7:64:65:aa:42:ec:57:cb:76:57:d2: 3c:e7:bf:f8:34:a2:b9:2e:2b:de:4c:dc:a7:e4:9d: 8a:56:3c:13:b4:ef:14:01:2f:05:78:0b:0f:07:c1: 4c:14:eb:52:81:cb:aa:6d:b1:ed:14:a5:f1:90:27: d5:b2:eb:4b:8e:f6:c3:c5:a1:7c:2b:5f:6f:c0:c8: 43:a0:86:34:fe:7e:8f:79:97:c2:8a:0e:c1:19:d0: 62:6b:00:1c:6c:d7:f2:3e:80:cc:03:14:fa:5a:06: a7:ed:ae:32:cc:ed:bd:71:4b:d1:8d:57:9d:98:a8: a4:f5:68:94:be:01:11:ac:a7:14:16:d3:de:b8:06: 96:b7:eb:d0:13:eb:8f:f2:c6:ff:48:1a:69:28:54: 40:7a:5c:0a:29:52:aa:32:9f:c6:41:67:82:c8:8a: f2:cb:46:a2:45:91:80:bb:9e:58:5b:81:b3:81:ca: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.54.0/24 IPv6: 2a13:5e40::/29 Signature Algorithm: sha256WithRSAEncryption 51:e3:da:f5:17:c1:b9:f2:e4:03:c1:27:23:16:0f:d0:86:f7: da:64:6e:ac:d1:72:2b:c9:9b:f9:cd:61:f6:5c:63:56:67:d8: c7:cc:24:11:b8:de:3f:0c:8d:c2:2e:07:af:67:fe:01:3b:83: ec:fa:34:be:1f:da:2b:17:58:2a:ea:7d:d4:af:44:af:a0:4c: 65:f2:d5:f7:9e:a7:de:62:5b:48:ea:2f:73:be:3c:1e:1e:c7: 73:a4:05:40:61:cc:f7:3b:33:ff:fe:34:da:16:ab:4d:68:bd: c8:fb:b2:51:a4:65:80:63:de:96:0b:7e:f3:b1:82:9e:98:cb: 30:22:0a:a3:7b:7f:83:19:c6:6c:49:c4:6b:81:38:d4:01:47: 08:2f:8d:12:83:36:c6:34:bd:c7:bc:51:5b:42:60:07:e3:35: 24:f6:87:85:f2:19:a1:6a:71:fb:65:97:07:da:7f:0e:52:00: 9e:dd:39:d7:4b:f7:ce:9e:8e:73:f7:bb:2f:0c:c5:d7:36:8e: 9a:51:11:1e:a3:a6:44:c1:f2:bc:13:66:2d:1a:47:21:c6:14: ec:e5:a3:e4:ea:f3:30:91:19:f1:ea:1f:d3:7a:66:bb:cb:7b: 67:be:2e:f2:00:62:84:3c:b0:6e:09:5c:47:6b:f2:e6:61:47: 4b:12:ee:fb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yMXuJQw1LPeyW48ZuIL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWI3OTUwNjYxNTBhMWMzNjdkYWJjY2Y2OWM5NzBhYjBjNzIzMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05S0utOS5oF5+XxtYN5w2ss8jEd0 Z3XEdZ85cjS+KZhIlUfngfyplkoWB+jeN3f1ymVV2zi8kCLKj8pBZK7lIceDRcod Y3U0h7KfZdyLx2RlqkLsV8t2V9I857/4NKK5LiveTNyn5J2KVjwTtO8UAS8FeAsP B8FMFOtSgcuqbbHtFKXxkCfVsutLjvbDxaF8K19vwMhDoIY0/n6PeZfCig7BGdBi awAcbNfyPoDMAxT6Wgan7a4yzO29cUvRjVedmKik9WiUvgERrKcUFtPeuAaWt+vQ E+uP8sb/SBppKFRAelwKKVKqMp/GQWeCyIryy0aiRZGAu55YW4GzgcpPEQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzQ2NmFh Yi1hNDcwLTQzNDQtYTM2Ny01NDdiZTRjZmE0NTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNDY2YWFi LWE0NzAtNDM0NC1hMzY3LTU0N2JlNGNmYTQ1Ny8xL2RiZVZCbUZRb2NObjJyelBh Y2x3cXd4eU1oVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwgU2MA0EAgACMAcDBQMqE15AMA0GCSqGSIb3 DQEBCwUAA4IBAQBR49r1F8G58uQDwScjFg/QhvfaZG6s0XIryZv5zWH2XGNWZ9jH zCQRuN4/DI3CLgevZ/4BO4Ps+jS+H9orF1gq6n3Ur0SvoExl8tX3nqfeYltI6i9z vjweHsdzpAVAYcz3OzP//jTaFqtNaL3I+7JRpGWAY96WC37zsYKemMswIgqje3+D GcZsScRrgTjUAUcIL40SgzbGNL3HvFFbQmAH4zUk9oeF8hmhanH7ZZcH2n8OUgCe 3TnXS/fOno5z97svDMXXNo6aUREeo6ZEwfK8E2YtGkchxhTs5aPk6vMwkRnx6h/T ema7y3tnvi7yAGKEPLBuCVxHa/LmYUdLEu77 -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:49 2026 by rpki-client