This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer File: dfGnY3RcJdrSj0qBFmiOgs4SAos.cer (raw, json) Hash identifier: 2T2HOe53JZpreD7xpUp1NINKDiMtGH1MAlIw5jgdPVc= Subject key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9DDB5B51C11C19CDA76A55E52C938 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49468 IP: 45.8.44.0/22 IP: 86.104.220.0/24 IP: 89.33.247.0/24 IP: 91.213.11.0/24 IP: 91.213.188.0/24 IP: 128.0.44.0/24 IP: 188.211.238.0/24 IP: 194.242.46.0/24 IP: 194.246.38.0/24 IP: 194.246.84.0/24 IP: 194.246.100.0/24 IP: 2a0e:4600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:dd:b5:b5:1c:11:c1:9c:da:76:a5:5e:52:c9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75f1a763745c25dad28f4a8116688e82ce12028b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:4f:fe:31:dc:02:d2:75:08:78:9b:b1:a7: b1:2a:c5:12:f8:bb:11:aa:ed:be:37:63:eb:ea:c5: 76:6e:9e:76:42:d0:09:3e:5a:b8:ac:20:36:17:ad: dd:5b:bb:11:4f:85:fb:d8:ab:ab:4f:ed:b4:cb:69: b4:63:a9:5b:e6:9c:42:f8:1c:64:6b:ca:35:aa:2b: b7:90:07:49:70:6e:44:73:96:96:d2:3f:fc:8c:58: 70:79:05:0a:fd:eb:d6:de:88:34:01:05:da:b2:92: fc:91:69:87:42:49:15:98:ba:7f:59:10:ca:c1:9f: 9a:55:aa:3a:55:9f:3b:b6:a5:15:21:71:1a:09:9a: 51:da:5a:35:74:cf:61:3f:6b:fd:e2:dd:32:fe:90: 1d:e3:1f:50:3f:ea:ce:3f:d3:a7:52:ff:b3:58:0d: a1:30:2f:5f:c2:f6:2f:8e:e7:7f:35:0d:7c:0c:8e: bc:94:43:7f:c2:f2:ed:96:92:92:02:b3:2c:02:15: 4d:95:fe:5a:21:16:fd:7c:09:b6:7b:1c:5f:e3:a3: c6:0b:d8:2c:43:99:68:07:d3:e5:1e:9b:a1:00:9a: f1:e7:13:90:90:67:45:e8:ce:39:c5:4c:aa:f0:6c: 66:4b:c0:28:03:4c:f6:5a:10:89:5d:60:3a:e8:b4: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.44.0/22 86.104.220.0/24 89.33.247.0/24 91.213.11.0/24 91.213.188.0/24 128.0.44.0/24 188.211.238.0/24 194.242.46.0/24 194.246.38.0/24 194.246.84.0/24 194.246.100.0/24 IPv6: 2a0e:4600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49468 Signature Algorithm: sha256WithRSAEncryption 4c:39:d6:d2:52:e0:a5:73:be:47:20:78:ea:7f:e3:e8:1d:33: 0f:42:ff:b6:f6:6c:5f:ba:94:60:57:86:28:29:a1:dd:9a:01: 6a:6d:70:a9:2f:47:74:21:eb:53:a4:43:fb:70:d6:84:5b:29: c6:03:a9:a4:8a:9a:08:47:b2:c7:bc:61:a5:83:23:0a:26:7c: d9:cb:da:92:97:cc:42:e0:b7:51:4e:d3:9a:76:e3:2e:4d:b5: cf:d3:18:76:bc:f5:92:51:9e:59:f0:98:a8:61:e2:57:d9:c1: 79:db:cb:9f:72:16:d2:09:72:21:4f:f6:64:74:c2:d8:a9:d8: 0b:c2:33:6d:c6:2c:27:fb:6f:dd:b3:d2:22:4b:f7:61:e3:79: 36:d3:e9:20:62:98:bd:90:46:3e:b0:db:b9:2e:73:21:6d:73: 8d:40:33:0f:10:3b:81:e8:f5:ac:c3:36:09:83:ac:84:65:77: e8:bc:94:70:03:49:5f:3e:28:b9:32:54:fc:b7:91:9c:cd:e5: 36:46:03:8d:58:02:e1:bf:79:3f:3d:42:16:72:72:61:da:c8: 5f:b1:63:c6:15:9e:61:13:1e:87:2e:0e:d9:d9:02:f4:07:e7: db:c6:84:68:5a:22:59:64:b3:bd:b7:02:f9:c6:30:e4:7e:59: 00:d9:88:b0 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt9yd21tRwRwZzadqVeUsk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWYxYTc2Mzc0NWMyNWRhZDI4ZjRhODExNjY4OGU4MmNlMTIwMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fxP/jHcAtJ1CHibsaexKsUS+LsR qu2+N2Pr6sV2bp52QtAJPlq4rCA2F63dW7sRT4X72KurT+20y2m0Y6lb5pxC+Bxk a8o1qiu3kAdJcG5Ec5aW0j/8jFhweQUK/evW3og0AQXaspL8kWmHQkkVmLp/WRDK wZ+aVao6VZ87tqUVIXEaCZpR2lo1dM9hP2v94t0y/pAd4x9QP+rOP9OnUv+zWA2h MC9fwvYvjud/NQ18DI68lEN/wvLtlpKSArMsAhVNlf5aIRb9fAm2exxf46PGC9gs Q5loB9PlHpuhAJrx5xOQkGdF6M45xUyq8GxmS8AoA0z2WhCJXWA66LSlMQIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFHXxp2N0XCXa0o9KgRZojoLOEgKLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzk4MGU2 Ni0zNjMxLTRmZGUtOGUyZC1jODQ5YmMwZjM1OWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvOTgwZTY2 LTM2MzEtNGZkZS04ZTJkLWM4NDliYzBmMzU5Yi8xL2RmR25ZM1JjSmRyU2owcUJG bWlPZ3M0U0Fvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQCLQgsAwQAVmjcAwQAWSH3AwQAW9ULAwQAW9W8 AwQAgAAsAwQAvNPuAwQAwvIuAwQAwvYmAwQAwvZUAwQAwvZkMA0EAgACMAcDBQMq DkYAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDBPDANBgkqhkiG9w0BAQsFAAOC AQEATDnW0lLgpXO+RyB46n/j6B0zD0L/tvZsX7qUYFeGKCmh3ZoBam1wqS9HdCHr U6RD+3DWhFspxgOppIqaCEeyx7xhpYMjCiZ82cvakpfMQuC3UU7TmnbjLk21z9MY drz1klGeWfCYqGHiV9nBedvLn3IW0glyIU/2ZHTC2KnYC8IzbcYsJ/tv3bPSIkv3 YeN5NtPpIGKYvZBGPrDbuS5zIW1zjUAzDxA7gej1rMM2CYOshGV36LyUcANJXz4o uTJU/LeRnM3lNkYDjVgC4b95Pz1CFnJyYdrIX7FjxhWeYRMehy4O2dkC9Afn28aE aFoiWWSzvbcC+cYw5H5ZANmIsA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:50 2026 by rpki-client