This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer File: djLJDvGdK9b2aKSCbi0NFWNelH0.cer (raw, json) Hash identifier: GRQ3toGGL9Myp1kHnGl/LNqp+moE2e44OjnGyEazPWY= Subject key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A22F9B5B37336A1B050C96B351F1B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.220.172.0/22 IP: 2a02:f5c0::/29 IP: 2a0c:5e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2f:9b:5b:37:33:6a:1b:05:0c:96:b3:51:f1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:b6:6a:a2:ac:45:bc:2e:7d:02:5a:a7:2f: 25:4e:18:46:58:79:d7:aa:a3:98:f9:fd:5d:ab:d6: 1a:2c:e4:40:4c:24:8d:2b:99:f7:a4:5e:76:46:8f: 75:c7:0c:94:af:0c:2b:9e:0b:6a:37:32:a6:3b:c5: c9:94:9a:00:14:29:57:b4:84:76:92:14:cb:9a:c9: ad:5b:56:53:c8:38:d1:88:de:13:f8:f7:f2:7d:4f: 84:d9:ec:be:ec:9f:c2:83:fc:76:48:4f:b8:e9:4d: 16:f4:cb:8f:09:36:4c:7d:78:b4:86:8e:3d:68:57: 75:2d:e7:13:7a:74:6a:17:25:29:00:0b:eb:96:39: 0f:02:68:2a:0d:69:09:d5:61:8a:f2:19:65:94:fc: bc:36:11:d2:46:33:52:13:65:3c:ec:fa:d7:c9:39: ae:d1:75:f2:97:4e:41:2b:85:9d:04:7a:38:6c:73: ef:aa:b8:d6:fa:70:ac:19:6d:61:31:d1:c0:8e:0f: a1:e4:ad:99:ff:cc:9c:e0:a5:ff:67:e0:f6:16:d8: 5c:c0:9d:7b:d4:3e:dc:a9:65:ab:97:6e:6d:28:36: 6a:90:05:83:b1:8e:4d:f7:bb:74:16:cb:5a:ab:e7: 39:f0:99:7d:72:c9:1f:bd:f2:ab:56:a9:14:bc:f2: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.172.0/22 IPv6: 2a02:f5c0::/29 2a0c:5e40::/29 Signature Algorithm: sha256WithRSAEncryption 6b:17:e5:fa:61:1f:95:c0:89:3a:00:a3:f5:e8:11:be:44:3b: ea:44:52:84:ad:f8:1e:c1:35:4a:82:d8:75:e6:cd:3f:f0:68: c1:18:cc:b1:e9:b9:d2:e4:0a:69:3e:d1:fa:c1:0e:3e:8b:30: 9f:d9:fe:f7:d8:2d:a3:cf:a6:81:51:ea:b4:68:ae:c7:e4:4d: 5c:17:13:f8:a3:d7:72:64:fb:d0:5e:f7:72:ca:91:68:1d:be: 17:22:d7:a8:ce:e3:a2:fe:6f:d8:11:55:04:32:05:13:d5:11: 30:e7:c8:45:3c:fb:bf:08:23:c3:b4:56:34:fb:ed:53:3c:1a: 22:0b:fd:22:db:d5:77:cd:30:b4:e9:9d:88:3f:3b:de:0c:a4: 94:cd:21:e2:f8:a5:15:3e:53:59:45:9a:ab:f5:a6:63:74:ff: ce:65:38:c8:1d:3d:26:61:3d:b9:3b:1c:89:68:ed:ca:06:80: 36:b1:02:d9:60:b6:1f:0b:9d:e0:86:fb:32:7b:4d:1d:c3:a0: 0d:4f:f4:6f:bb:60:70:5b:66:ba:74:59:92:cd:b0:14:29:dd: d7:4e:1c:0f:00:e1:5f:e2:4d:c2:c4:ec:75:9a:d4:c3:5e:32: 4d:98:e2:63:94:0b:82:41:4b:3a:1c:dd:75:32:3a:f5:6a:20: a0:0d:93:49 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt4oi+bWzczahsFDJazUfGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjMyYzkwZWYxOWQyYmQ2ZjY2OGE0ODI2ZTJkMGQxNTYzNWU5NDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWS2aqKsRbwufQJapy8lThhGWHnX qqOY+f1dq9YaLORATCSNK5n3pF52Ro91xwyUrwwrngtqNzKmO8XJlJoAFClXtIR2 khTLmsmtW1ZTyDjRiN4T+PfyfU+E2ey+7J/Cg/x2SE+46U0W9MuPCTZMfXi0ho49 aFd1LecTenRqFyUpAAvrljkPAmgqDWkJ1WGK8hlllPy8NhHSRjNSE2U87PrXyTmu 0XXyl05BK4WdBHo4bHPvqrjW+nCsGW1hMdHAjg+h5K2Z/8yc4KX/Z+D2FthcwJ17 1D7cqWWrl25tKDZqkAWDsY5N97t0Fstaq+c58Jl9cskfvfKrVqkUvPJsfQIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFHYyyQ7xnSvW9mikgm4tDRVjXpR9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzk4NDRj ZC0yNGY4LTRlNTItYjQyYi1jN2JmMDIxZWU2NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvOTg0NGNk LTI0ZjgtNGU1Mi1iNDJiLWM3YmYwMjFlZTY2NC8xL2RqTEpEdkdkSzliMmFLU0Ni aTBORldOZWxIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAMBAIAATAGAwQCudysMBQEAgACMA4DBQMqAvXAAwUDKgxeQDAN BgkqhkiG9w0BAQsFAAOCAQEAaxfl+mEflcCJOgCj9egRvkQ76kRShK34HsE1SoLY debNP/BowRjMsem50uQKaT7R+sEOPoswn9n+99gto8+mgVHqtGiux+RNXBcT+KPX cmT70F73csqRaB2+FyLXqM7jov5v2BFVBDIFE9URMOfIRTz7vwgjw7RWNPvtUzwa Igv9ItvVd80wtOmdiD873gyklM0h4vilFT5TWUWaq/WmY3T/zmU4yB09JmE9uTsc iWjtygaANrEC2WC2Hwud4Ib7MntNHcOgDU/0b7tgcFtmunRZks2wFCnd104cDwDh X+JNwsTsdZrUw14yTZjiY5QLgkFLOhzddTI69WogoA2TSQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:21:47 2026 by rpki-client