This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer File: doFcfQ6GPCF4D4v0uezDqcZFkpg.cer (raw, json) Hash identifier: WaFl57CWyYZfvahE8FvV1FoXdzEvNbBWcwdhSxGldWs= Subject key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE4A736D504F546B4422F6E420F550 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.104.104.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4a:73:6d:50:4f:54:6b:44:22:f6:e4:20:f5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:dc:4b:60:12:af:b1:6b:c9:44:d3:d2:86: cd:5a:78:1d:fc:f9:e5:16:60:0c:39:d8:7d:8f:aa: f6:69:04:4e:75:3d:f3:be:3f:16:83:4b:26:3d:cc: 78:37:6f:21:7c:30:5d:40:bc:11:b4:86:2b:99:5b: 3d:2a:6e:c8:1a:9f:53:b2:28:63:b9:fe:e5:0b:7b: 9b:a9:ca:ed:31:4b:ed:ee:9c:b8:bc:20:31:8c:39: 84:c7:cd:9c:fb:0d:43:9c:7e:ae:ce:77:3d:2f:e5: b0:8c:0c:9a:ad:70:36:94:11:0d:06:ad:45:7c:79: da:b0:92:b4:80:6b:57:61:47:1e:18:1f:14:b2:09: 09:2f:3b:76:ab:83:41:a2:dd:ad:ec:49:99:04:cc: 04:26:a8:5d:05:dd:a5:d8:3d:0e:78:b9:7b:32:2a: e9:47:9f:4c:6b:3c:31:d1:71:59:c3:db:ae:87:7c: eb:bc:ca:d2:99:e6:92:01:12:57:6a:ee:85:76:4f: cf:b3:47:48:d0:35:bf:af:3e:42:c8:09:39:09:ed: 88:ef:d8:d6:8b:f3:06:2d:e9:21:9f:8c:b8:03:be: 67:36:7d:7c:75:8e:52:cc:36:1b:30:a5:b3:25:87: 44:7c:81:4b:42:8f:a8:b6:bc:63:1d:e2:72:3c:12: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.104.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:08:50:19:21:53:03:a3:f3:b2:82:1d:8e:85:39:3a:cb:f1: f2:0d:c7:1f:87:6c:4e:30:9e:af:ad:bb:a1:92:37:bd:c0:3e: 3c:e8:8c:de:fd:23:ee:71:6d:c8:e4:a2:56:7f:4a:c4:94:ef: d1:1d:1e:77:a8:e5:a3:50:62:f3:f2:1d:bf:42:0f:93:bd:59: 27:8c:e4:7a:3c:0a:d7:ef:5f:f8:cb:40:14:5b:e0:51:a5:4d: be:f6:7f:d6:cf:99:41:13:1c:15:bd:44:08:8c:56:d8:13:a2: 20:4d:75:fe:34:88:21:7e:79:f6:c2:d9:e8:3c:95:b5:6a:40: 68:ed:95:05:d5:ea:21:d6:f5:c0:b6:a9:c2:02:86:05:61:36: b9:e8:20:ad:18:67:05:0c:54:86:4e:21:36:b2:23:b9:8a:4b: f8:f9:94:1d:05:9b:15:e5:2c:2e:bf:f5:2a:b1:4e:61:e6:47: de:02:9a:09:3d:8b:b4:66:4b:bb:a8:fd:23:69:c1:50:d4:88: f4:b1:10:2d:58:f4:7e:d0:3e:eb:7e:89:38:1e:e3:f0:63:ae: 3e:46:c7:67:18:6d:49:36:76:46:42:a2:ec:6a:d9:b5:50:a1: fa:48:03:c0:67:3e:a2:1c:39:d3:8d:7d:ac:7d:dc:52:6c:2e: e0:c5:bb:1c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87kpzbVBPVGtEIvbkIPVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjgxNWM3ZDBlODYzYzIxNzgwZjhiZjRiOWVjYzNhOWM2NDU5Mjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgPcS2ASr7FryUTT0obNWngd/Pnl FmAMOdh9j6r2aQROdT3zvj8Wg0smPcx4N28hfDBdQLwRtIYrmVs9Km7IGp9Tsihj uf7lC3ubqcrtMUvt7py4vCAxjDmEx82c+w1DnH6uznc9L+WwjAyarXA2lBENBq1F fHnasJK0gGtXYUceGB8UsgkJLzt2q4NBot2t7EmZBMwEJqhdBd2l2D0OeLl7Mirp R59Mazwx0XFZw9uuh3zrvMrSmeaSARJXau6Fdk/Ps0dI0DW/rz5CyAk5Ce2I79jW i/MGLekhn4y4A75nNn18dY5SzDYbMKWzJYdEfIFLQo+otrxjHeJyPBIzEQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHaBXH0OhjwheA+L9Lnsw6nGRZKYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzJhYWE0 OS0yODIzLTRlZTItYjVkMS1lNTQ3Mzk1ZDZiNDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvMmFhYTQ5 LTI4MjMtNGVlMi1iNWQxLWU1NDczOTVkNmI0Ny8xL2RvRmNmUTZHUENGNEQ0djB1 ZXpEcWNaRmtwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWhoMA0GCSqGSIb3DQEBCwUAA4IBAQCKCFAZ IVMDo/Oygh2OhTk6y/HyDccfh2xOMJ6vrbuhkje9wD486Ize/SPucW3I5KJWf0rE lO/RHR53qOWjUGLz8h2/Qg+TvVknjOR6PArX71/4y0AUW+BRpU2+9n/Wz5lBExwV vUQIjFbYE6IgTXX+NIghfnn2wtnoPJW1akBo7ZUF1eoh1vXAtqnCAoYFYTa56CCt GGcFDFSGTiE2siO5ikv4+ZQdBZsV5Swuv/UqsU5h5kfeApoJPYu0Zku7qP0jacFQ 1Ij0sRAtWPR+0D7rfok4HuPwY64+RsdnGG1JNnZGQqLsatm1UKH6SAPAZz6iHDnT jX2sfdxSbC7gxbsc -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:47 2026 by rpki-client