This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer File: dqNyt1TkkgjWRqp4WeNItHXlJtI.cer (raw, json) Hash identifier: 4MOX45OCWbO841IRPbVYYoZp7iNaHWIuUTs9msn2Yso= Subject key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E390FD709B527DC85314F0F4700BB17 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205647 IP: 185.211.84.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0f:d7:09:b5:27:dc:85:31:4f:0f:47:00:bb:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76a372b754e49208d646aa7859e348b475e526d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:c4:a1:c9:74:cd:ac:08:46:0d:41:d1:ba: bc:11:ff:cc:a2:4e:c0:85:fe:21:a7:fd:9a:4c:ee: 43:2f:08:e9:6f:20:f5:15:11:0e:66:9b:df:c7:09: 74:65:3c:ab:05:11:81:31:99:62:bb:cb:f0:47:d9: 67:81:19:a7:60:cb:e2:af:44:0a:87:d4:20:d9:49: 2a:86:2b:a9:6d:67:96:88:12:31:1c:41:8b:ac:76: 9a:56:71:a0:d0:00:61:a6:53:6b:c6:5d:c2:b0:9e: db:40:e3:43:c2:87:85:c7:86:ba:82:b0:25:91:85: d1:ce:77:ec:9a:aa:59:d6:90:d8:4c:62:f6:f6:e6: 47:4b:9e:e9:e7:16:99:33:2f:cd:92:c2:34:b5:ab: b4:b6:4e:16:7f:09:df:e7:0a:ed:6a:64:2d:b0:a3: c4:d3:9b:99:0e:c0:9a:96:7b:7c:8f:a5:b3:b1:7b: e8:5c:19:27:1c:38:80:b2:5d:c5:1d:a2:a5:1f:06: 88:7b:a3:c2:0f:0e:19:e8:0d:d3:c0:48:d7:9e:57: de:b2:09:50:16:17:3b:10:02:58:d5:d1:93:33:e6: c5:74:15:f6:74:de:21:5a:f7:0d:a8:0c:26:ec:ef: 25:f6:4d:b5:85:39:1f:82:86:a8:b9:5d:7b:04:67: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205647 Signature Algorithm: sha256WithRSAEncryption 64:a9:26:56:a8:27:a6:e5:05:11:b1:31:ee:f4:f6:29:ad:40: ff:17:41:5b:ea:a9:f9:f8:8d:1b:3f:c6:43:fe:d0:f9:95:65: 6c:31:64:ee:7d:a6:f1:10:c5:3f:f0:23:a4:a8:a1:25:82:5c: 8f:ca:ec:56:77:33:1e:7c:51:89:81:8b:ad:96:db:f5:50:55: 9e:8f:9d:fe:20:8c:27:91:7f:1a:93:28:2a:ef:24:07:2b:74: 5b:47:7e:10:0b:c7:9c:c3:9b:40:76:6f:af:6c:a6:23:53:80: 0a:86:47:83:ec:bb:9c:b6:a7:38:14:41:a4:d3:e7:f4:26:f7: 04:6d:b6:54:4b:dc:07:b7:4d:b8:99:cc:f7:2a:19:fd:d4:38: f9:b7:8a:dd:c2:d1:ba:3b:5b:cc:d0:20:ae:95:42:92:49:5c: 52:13:cc:71:9b:7d:d6:d6:ec:11:e4:cf:09:6a:36:60:e8:41: 3b:25:8d:c8:2e:69:7e:9f:07:2d:74:43:8e:e8:9e:cf:8d:19: 2d:d9:6e:c9:e2:5e:8e:e9:b7:7f:de:a6:e5:fc:8f:39:03:8b: 12:ba:9b:b0:48:19:c3:c3:a4:f3:8e:c7:e0:d2:90:27:24:2b: 6c:0a:ad:0f:0f:45:a6:47:35:5e:f4:d8:9e:fb:15:0b:90:9a: 4e:55:05:44 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OQ/XCbUn3IUxTw9HALsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmEzNzJiNzU0ZTQ5MjA4ZDY0NmFhNzg1OWUzNDhiNDc1ZTUyNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsirEocl0zawIRg1B0bq8Ef/Mok7A hf4hp/2aTO5DLwjpbyD1FREOZpvfxwl0ZTyrBRGBMZliu8vwR9lngRmnYMvir0QK h9Qg2UkqhiupbWeWiBIxHEGLrHaaVnGg0ABhplNrxl3CsJ7bQONDwoeFx4a6grAl kYXRznfsmqpZ1pDYTGL29uZHS57p5xaZMy/NksI0tau0tk4Wfwnf5wrtamQtsKPE 05uZDsCalnt8j6WzsXvoXBknHDiAsl3FHaKlHwaIe6PCDw4Z6A3TwEjXnlfesglQ Fhc7EAJY1dGTM+bFdBX2dN4hWvcNqAwm7O8l9k21hTkfgoaouV17BGdmxwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHajcrdU5JII1kaqeFnjSLR15SbSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzIzNWZl Yy1hZmM5LTRkMmYtOGI1OS1hOTllYTkxY2I1YjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMjM1ZmVj LWFmYzktNGQyZi04YjU5LWE5OWVhOTFjYjViOS8xL2RxTnl0MVRra2dqV1JxcDRX ZU5JdEhYbEp0SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCudNUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMjTzANBgkqhkiG9w0BAQsFAAOCAQEAZKkmVqgnpuUFEbEx7vT2Ka1A/xdBW+qp +fiNGz/GQ/7Q+ZVlbDFk7n2m8RDFP/AjpKihJYJcj8rsVnczHnxRiYGLrZbb9VBV no+d/iCMJ5F/GpMoKu8kByt0W0d+EAvHnMObQHZvr2ymI1OACoZHg+y7nLanOBRB pNPn9Cb3BG22VEvcB7dNuJnM9yoZ/dQ4+beK3cLRujtbzNAgrpVCkklcUhPMcZt9 1tbsEeTPCWo2YOhBOyWNyC5pfp8HLXRDjuiez40ZLdluyeJejum3f96m5fyPOQOL ErqbsEgZw8Ok847H4NKQJyQrbAqtDw9Fpkc1XvTYnvsVC5CaTlUFRA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:04 2026 by rpki-client