This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer File: djNetjP3aUK76Z8Smh64ik1z_Hw.cer (raw, json) Hash identifier: RAnSsgRwD9vBOdagjH3eTDGllWAupL/IUNv6cb7agv8= Subject key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA331ACCE352ED7D9FCFB12FA117D22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207540 IP: 2001:678:bf0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:31:ac:ce:35:2e:d7:d9:fc:fb:12:fa:11:7d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ec:eb:0b:89:d6:7b:20:a8:2a:3e:e0:05:7c: 0e:9d:26:30:a5:b6:5f:cb:93:07:35:78:e5:54:85: e8:6d:ea:ad:12:33:54:7e:37:94:c0:db:90:80:0c: d0:f2:b4:26:9e:84:a1:c3:38:10:f9:47:48:03:d3: 02:ce:ba:b3:e3:2d:64:32:f2:99:8f:88:57:53:78: e0:c4:3c:5c:66:d1:db:02:a3:bb:5e:c3:79:09:26: 6e:70:d6:9b:68:d9:56:d7:97:70:2d:61:63:72:2a: 19:bf:e7:e5:1a:8b:0f:a2:7f:ec:14:a7:91:08:52: e6:29:24:10:9b:d7:41:f1:d4:2a:c8:d4:27:80:10: 4d:5a:d8:7f:d5:e2:d4:c8:f9:7b:0e:00:bb:18:d9: 2f:b4:38:e8:08:7c:38:e9:c2:ff:59:0c:9e:59:fa: fc:57:49:3a:8f:4a:27:b1:19:8b:00:b7:23:cf:fe: 2c:3a:91:17:27:65:ed:c5:93:91:92:6a:d1:e8:41: 37:1e:a3:19:29:cb:48:fb:bc:90:dd:e4:88:bc:70: 33:b6:c9:72:9e:ae:c1:73:33:03:47:b9:51:a5:32: 1c:7d:38:e4:c0:b4:c0:42:2b:8b:c2:22:61:b4:66: 28:21:c9:44:d7:4a:2e:ee:61:4f:64:fe:fd:5f:a3: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:bf0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207540 Signature Algorithm: sha256WithRSAEncryption 35:57:f9:29:f2:a3:e2:76:dd:15:4e:8c:32:ce:df:ce:85:08: 2d:d2:dc:39:76:19:c5:6c:b8:d5:2f:04:ae:f6:dd:cf:d3:a7: 07:0b:1e:70:5d:2b:3c:f0:0a:df:4f:ae:e8:4b:19:db:a3:02: 64:5a:45:71:85:e2:e2:7a:b3:ea:ed:53:50:ba:c2:bb:02:da: d0:97:14:9a:f7:47:d6:a9:f7:e0:0a:91:b1:05:9c:3e:03:97: 27:e2:5e:bb:45:39:24:11:71:90:f5:5b:5f:1d:99:da:53:0e: 64:08:c1:86:85:20:eb:c2:1a:59:46:d9:a6:3b:1a:4e:d5:54: 92:46:b0:95:75:b3:18:00:e4:5c:cd:6a:d7:f6:4f:63:ae:1d: 13:d3:fa:36:1f:e2:83:5c:e3:6f:68:e6:13:78:a1:aa:eb:95: aa:04:6f:ff:de:cf:27:66:30:e9:72:70:fb:49:b7:4c:ab:93: 37:aa:1c:27:b0:ef:ed:23:94:65:a9:f4:a5:24:ea:f4:8d:f1: dd:ba:79:51:32:83:df:e9:48:14:cb:84:97:8f:cb:17:0c:a6: 4e:00:c1:31:44:16:2d:e5:6b:6d:20:7e:19:9c:97:ae:6f:ed: 9c:82:2e:90:84:14:ad:59:22:f7:ec:55:10:ae:e8:76:3e:42: 26:9b:2d:f9 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7ozGszjUu19n8+xL6EX0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjMzNWViNjMzZjc2OTQyYmJlOTlmMTI5YTFlYjg4YTRkNzNmYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluzrC4nWeyCoKj7gBXwOnSYwpbZf y5MHNXjlVIXobeqtEjNUfjeUwNuQgAzQ8rQmnoShwzgQ+UdIA9MCzrqz4y1kMvKZ j4hXU3jgxDxcZtHbAqO7XsN5CSZucNabaNlW15dwLWFjcioZv+flGosPon/sFKeR CFLmKSQQm9dB8dQqyNQngBBNWth/1eLUyPl7DgC7GNkvtDjoCHw46cL/WQyeWfr8 V0k6j0onsRmLALcjz/4sOpEXJ2XtxZORkmrR6EE3HqMZKctI+7yQ3eSIvHAztsly nq7BczMDR7lRpTIcfTjkwLTAQiuLwiJhtGYoIclE10ou7mFPZP79X6MgrwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFHYzXrYz92lCu+mfEpoeuIpNc/x8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzA4Mzg1 YS0xZTgxLTQxZjItOGI4NS05YzI5M2Y3MWE4MGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvMDgzODVh LTFlODEtNDFmMi04Yjg1LTljMjkzZjcxYTgwYS8xL2RqTmV0alAzYVVLNzZaOFNt aDY0aWsxel9Idy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAvwMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMqtDANBgkqhkiG9w0BAQsFAAOCAQEANVf5KfKj4nbdFU6MMs7fzoUILdLc OXYZxWy41S8Ervbdz9OnBwsecF0rPPAK30+u6EsZ26MCZFpFcYXi4nqz6u1TULrC uwLa0JcUmvdH1qn34AqRsQWcPgOXJ+Jeu0U5JBFxkPVbXx2Z2lMOZAjBhoUg68Ia WUbZpjsaTtVUkkawlXWzGADkXM1q1/ZPY64dE9P6Nh/ig1zjb2jmE3ihquuVqgRv /97PJ2Yw6XJw+0m3TKuTN6ocJ7Dv7SOUZan0pSTq9I3x3bp5UTKD3+lIFMuEl4/L FwymTgDBMUQWLeVrbSB+GZyXrm/tnIIukIQUrVki9+xVEK7odj5CJpst+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:45 2026 by rpki-client