This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer File: dfUobuOFWb3Zicdk9aZHQ0ewO28.cer (raw, json) Hash identifier: puF35iZDsgGlaBVWRz5PJF7wL328gb77w8U/OAzJFOw= Subject key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38CF9C7A74643C09638B45ACE5C9B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35003 IP: 193.0.186.0/23 IP: 194.126.158.0/23 IP: 2001:67c:2884::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cf:9c:7a:74:64:3c:09:63:8b:45:ac:e5:c9:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75f5286ee38559bdd989c764f5a6474347b03b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:8f:c6:66:af:e7:aa:02:1f:0b:43:9c:3a: 89:c9:4c:77:8f:67:cc:3d:f1:3b:7c:f9:f7:99:da: 87:d5:42:40:60:2c:0c:a2:d0:a3:68:9e:4b:80:64: d5:0d:d8:7c:52:a2:92:cd:47:42:ee:63:b9:8f:0a: 9e:9b:68:86:d7:e8:c6:d9:fe:07:1d:0a:79:0f:13: 75:6e:6c:db:54:a4:4b:49:91:ae:0a:fe:e7:1a:f2: f1:18:b3:b3:71:ac:08:34:6b:b0:c5:6b:89:cc:b1: 51:fb:72:36:e3:29:33:05:31:dd:8e:39:1c:f6:58: 94:1c:06:fd:9a:c4:57:7b:d6:d4:38:a5:39:a2:30: cf:fc:99:7b:8a:4e:f9:79:30:bc:5a:1f:d1:c7:a2: 8c:61:e3:67:7f:fb:4a:6c:1e:f7:55:37:4f:9b:a2: 6d:59:06:a0:e6:41:b3:be:ed:b4:a0:e5:b8:07:28: c6:c8:cc:85:ff:03:da:b1:d7:de:3b:32:3e:b4:69: 6c:70:b0:13:75:53:97:49:e5:42:4a:98:18:38:86: 3d:9e:02:1f:fd:9a:07:4f:85:29:f2:a0:a4:b4:f0: e7:79:0e:dc:8b:d3:05:2c:4c:dc:ec:27:ba:da:83: 63:81:e3:1e:c0:a3:f8:34:7c:46:b9:75:9c:82:38: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.186.0/23 194.126.158.0/23 IPv6: 2001:67c:2884::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35003 Signature Algorithm: sha256WithRSAEncryption 48:aa:a9:ea:50:c5:59:04:a4:d0:01:cc:29:51:b2:57:52:68: b2:b4:90:82:e9:2a:e8:26:42:12:d3:ce:90:43:d6:99:1b:44: bf:2e:1a:ed:93:62:b0:5f:39:2f:5f:67:5c:e7:7a:16:d3:7f: d3:43:4c:b9:57:c5:e8:0e:d0:9c:f4:ad:f9:10:1d:e1:f9:aa: 2f:9a:77:6d:ae:4b:cb:5c:b3:71:dc:32:8c:cc:de:67:97:14: 57:dd:17:43:77:74:15:07:6c:1d:c1:88:69:30:76:52:a1:2e: 72:d7:fb:20:41:58:6a:d4:de:8f:d5:af:da:74:aa:e7:70:22: a2:f8:8b:da:fc:c6:ff:8b:31:c0:9e:fd:16:c3:86:50:28:8f: e4:e7:ec:79:53:89:ca:f8:23:75:09:43:be:88:8b:7a:e1:eb: 99:88:de:81:27:c0:9e:60:53:b7:dd:d0:6e:5f:c2:e3:f4:b2: 90:9a:68:bc:5b:a5:10:bc:82:7d:71:68:8a:1f:9e:dc:56:5c: bc:06:a9:bf:20:d9:0b:2f:e2:f1:9d:76:4a:a2:06:2c:6e:06: e7:f3:5a:7f:28:2c:07:4f:9b:95:5a:d1:e1:0d:8e:5c:97:82: 88:f1:74:cb:23:e5:f8:f9:15:a6:3c:94:33:59:9f:4a:12:d5: 0e:d9:f0:f8 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt+OM+cenRkPAlji0Ws5cm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWY1Mjg2ZWUzODU1OWJkZDk4OWM3NjRmNWE2NDc0MzQ3YjAzYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6OPxmav56oCHwtDnDqJyUx3j2fM PfE7fPn3mdqH1UJAYCwMotCjaJ5LgGTVDdh8UqKSzUdC7mO5jwqem2iG1+jG2f4H HQp5DxN1bmzbVKRLSZGuCv7nGvLxGLOzcawINGuwxWuJzLFR+3I24ykzBTHdjjkc 9liUHAb9msRXe9bUOKU5ojDP/Jl7ik75eTC8Wh/Rx6KMYeNnf/tKbB73VTdPm6Jt WQag5kGzvu20oOW4ByjGyMyF/wPasdfeOzI+tGlscLATdVOXSeVCSpgYOIY9ngIf /ZoHT4Up8qCktPDneQ7ci9MFLEzc7Ce62oNjgeMewKP4NHxGuXWcgjjecQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFHX1KG7jhVm92YnHZPWmR0NHsDtvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzI5YmY2 MS1mZGM4LTQ5ZTYtODRkOS0wMzg1MzQ5ZmYxZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvMjliZjYx LWZkYzgtNDllNi04NGQ5LTAzODUzNDlmZjFlOC8xL2RmVW9idU9GV2IzWmljZGs5 YVpIUTBld08yOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQBwQC6AwQBwn6eMA8EAgACMAkDBwAgAQZ8KIQw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIi7MA0GCSqGSIb3DQEBCwUAA4IBAQBI qqnqUMVZBKTQAcwpUbJXUmiytJCC6SroJkIS086QQ9aZG0S/Lhrtk2KwXzkvX2dc 53oW03/TQ0y5V8XoDtCc9K35EB3h+aovmndtrkvLXLNx3DKMzN5nlxRX3RdDd3QV B2wdwYhpMHZSoS5y1/sgQVhq1N6P1a/adKrncCKi+Iva/Mb/izHAnv0Ww4ZQKI/k 5+x5U4nK+CN1CUO+iIt64euZiN6BJ8CeYFO33dBuX8Lj9LKQmmi8W6UQvIJ9cWiK H57cVly8Bqm/INkLL+LxnXZKogYsbgbn81p/KCwHT5uVWtHhDY5cl4KI8XTLI+X4 +RWmPJQzWZ9KEtUO2fD4 -----END CERTIFICATE-----Generated at Tue Jan 27 02:10:20 2026 by rpki-client