This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer File: dnwXZvu9z_aLvDSjxr5poMigOrk.cer (raw, json) Hash identifier: k3k9QotFQnuumLl+bXz73Da5PF6TtglyW0yqG9zxQfI= Subject key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C079FFB70522D977138796DF02CBA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49110 IP: 185.143.40.0/22 IP: 2a0b:e940::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:07:9f:fb:70:52:2d:97:71:38:79:6d:f0:2c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:3f:3a:5d:24:d0:2a:74:e4:4a:ca:c6:34: 00:3c:84:56:68:9a:07:6f:5a:a7:91:41:20:af:56: 46:34:78:c6:55:a6:5e:55:74:ee:2f:85:9d:8f:c8: ae:58:8d:90:81:5b:6f:7e:7d:c0:ab:2f:4f:75:df: be:0d:15:21:0e:37:82:95:f2:ca:6f:ba:37:ce:5e: 5b:4d:77:2f:b4:6a:0c:5e:f8:72:f3:4b:57:cf:10: fc:45:1a:e4:66:b8:2c:af:60:e5:76:38:4a:68:7f: e6:b3:38:29:63:7a:28:ee:cc:19:94:c5:b9:51:3f: 9e:13:c5:44:c7:ed:84:50:d8:8b:d8:66:77:e1:a9: 2f:61:39:02:f6:50:c3:e5:ea:c1:44:5e:c4:94:c8: e5:00:03:63:af:a2:25:39:2a:99:77:7a:93:ba:c1: 7d:eb:4d:bb:8d:48:4e:16:cd:b0:5e:87:95:b6:52: a8:20:10:d2:b9:ae:8c:ab:9f:7c:73:c8:34:6f:19: 65:74:4a:6f:fc:d3:cd:7d:f2:c8:37:45:5b:f7:75: 67:f0:eb:6e:ef:18:df:3c:74:6f:42:81:7b:72:92: af:49:96:06:a1:cd:e2:41:91:1f:84:65:68:b7:c8: 5d:57:6f:46:92:fc:c0:6a:48:bf:4d:0c:5e:4e:34: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.40.0/22 IPv6: 2a0b:e940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49110 Signature Algorithm: sha256WithRSAEncryption 8f:87:51:3e:32:8c:e3:a3:bc:b3:14:95:68:f6:31:a2:e2:29: 33:c5:ef:83:59:71:bb:c2:b0:8e:e5:13:b9:ca:20:b3:8b:47: 87:fc:fc:65:5f:0d:95:b1:6e:50:3c:05:31:bf:88:51:ea:39: ab:6d:6c:41:6e:25:76:4c:e6:b7:12:01:60:ac:60:fd:59:74: a2:09:8e:fb:30:0c:89:76:2d:e4:aa:65:7f:6c:b6:a5:b3:3e: 0d:18:44:5e:0f:e3:56:e0:2a:bc:20:59:f7:2d:ed:a7:d1:f1: a4:86:14:3e:3b:de:f7:2d:6f:f6:28:60:a9:d6:63:4a:de:8f: da:01:5c:f2:29:42:97:3f:5f:99:65:97:b2:ff:02:70:d4:2d: e4:5d:28:5f:ed:9a:b0:45:5d:f6:37:ee:5e:ae:7a:91:31:b5: 04:3a:23:29:61:14:3e:41:41:82:d0:81:f0:e3:c4:da:7d:53: 55:e5:ac:5e:9f:e6:ad:43:6e:be:39:11:6a:d1:89:2b:56:d7: 3b:c2:0c:4d:30:e1:c4:56:53:43:b0:ae:a6:51:46:1a:0a:8b: f8:b7:d4:93:99:86:04:ab:87:5f:0f:b6:3f:90:31:dd:18:6c: 8f:46:54:92:63:68:32:c5:04:a0:2a:b2:90:d7:1f:e1:d3:9b: 6e:a4:48:0f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XAef+3BSLZdxOHlt8Cy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjdjMTc2NmZiYmRjZmY2OGJiYzM0YTNjNmJlNjlhMGM4YTAzYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2g/Ol0k0Cp05ErKxjQAPIRWaJoH b1qnkUEgr1ZGNHjGVaZeVXTuL4Wdj8iuWI2QgVtvfn3Aqy9Pdd++DRUhDjeClfLK b7o3zl5bTXcvtGoMXvhy80tXzxD8RRrkZrgsr2DldjhKaH/mszgpY3oo7swZlMW5 UT+eE8VEx+2EUNiL2GZ34akvYTkC9lDD5erBRF7ElMjlAANjr6IlOSqZd3qTusF9 6027jUhOFs2wXoeVtlKoIBDSua6Mq598c8g0bxlldEpv/NPNffLIN0Vb93Vn8Otu 7xjfPHRvQoF7cpKvSZYGoc3iQZEfhGVot8hdV29GkvzAaki/TQxeTjRl3wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5Lzg4NDM1 Ni03ZTJhLTRjMmEtOGZmNC0zNTY4ZTFkMjlkNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvODg0MzU2 LTdlMmEtNGMyYS04ZmY0LTM1NjhlMWQyOWQ0YS8xL2Rud1hadnU5el9hTHZEU2p4 cjVwb01pZ09yay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuY8oMA0EAgACMAcDBQAqC+lAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC/1jANBgkqhkiG9w0BAQsFAAOCAQEAj4dRPjKM46O8 sxSVaPYxouIpM8Xvg1lxu8KwjuUTucogs4tHh/z8ZV8NlbFuUDwFMb+IUeo5q21s QW4ldkzmtxIBYKxg/Vl0ogmO+zAMiXYt5Kplf2y2pbM+DRhEXg/jVuAqvCBZ9y3t p9HxpIYUPjve9y1v9ihgqdZjSt6P2gFc8ilClz9fmWWXsv8CcNQt5F0oX+2asEVd 9jfuXq56kTG1BDojKWEUPkFBgtCB8OPE2n1TVeWsXp/mrUNuvjkRatGJK1bXO8IM TTDhxFZTQ7CuplFGGgqL+LfUk5mGBKuHXw+2P5Ax3Rhsj0ZUkmNoMsUEoCqykNcf 4dObbqRIDw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:36 2026 by rpki-client