This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer File: dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer (raw, json) Hash identifier: 5A5eUNU0ofKF/ArxqYkjW4GTaZwwvwJUzRH4y98hxA0= Subject key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8060A749E3802FBF4DADDFE17EA263 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15779 IP: 194.15.208.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:60:a7:49:e3:80:2f:bf:4d:ad:df:e1:7e:a2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76d44d97653a06d846b2443535b83e8cbc39d928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:88:f5:aa:a5:63:10:bd:cf:75:94:f8:a2: fe:1f:51:02:42:70:ca:40:59:88:6d:2c:7d:31:87: 88:b2:c0:69:e0:80:9c:82:aa:0c:f4:3e:cd:9e:ae: 46:cd:73:08:97:2c:32:10:ac:11:a7:e4:10:27:5e: d0:4a:91:fd:0d:77:30:e4:52:6c:af:e4:00:16:c3: 3e:55:ce:d7:dd:b2:20:60:5b:7a:e2:8e:ea:60:43: 9a:72:91:68:83:15:b3:57:78:75:93:ea:1f:73:88: 92:b4:e8:1a:63:bd:c4:39:1b:bf:92:0c:64:d3:16: 93:2d:2c:ba:34:3b:9e:38:00:68:ec:a0:d5:a9:1d: f9:b2:cf:69:7d:d5:d5:c2:a5:e3:f9:02:bd:50:10: bb:c9:fc:7a:1e:09:79:04:68:6a:e8:8e:9d:d2:14: 58:a2:bf:81:73:12:55:49:55:64:7d:e8:55:ed:df: b9:6f:18:9b:bb:3b:95:0f:6a:85:36:2c:bb:4a:f7: 32:86:49:ea:c1:cd:da:a6:52:a1:a9:14:3f:33:77: bf:8f:9d:d1:58:1d:ae:15:5a:f8:34:57:80:f1:de: 46:d7:cd:0e:73:09:74:2e:72:69:4a:7d:5c:e6:49: 24:4b:a4:f1:28:c5:c4:d4:c0:f9:94:57:bb:57:17: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15779 Signature Algorithm: sha256WithRSAEncryption 11:58:15:a2:0f:df:08:7e:96:4d:89:ee:b6:91:10:84:c0:4f: 0c:72:34:42:7b:a8:71:93:ff:20:1f:ff:87:ef:4f:d4:b7:a4: 0b:56:56:b5:f5:a3:d0:44:45:46:76:e4:af:c0:a6:da:56:d5: 11:dd:82:f5:cf:8d:61:3f:a1:8a:5b:75:ab:ae:e8:5d:6a:14: 4c:7a:43:08:b2:79:8b:02:c8:d2:ea:f7:64:07:ee:98:22:99: a0:99:68:df:59:cb:ed:fd:b5:f3:d8:d7:c4:f3:57:6f:72:ca: 74:00:10:97:24:47:b1:a9:a8:99:d6:1f:e8:1e:d9:5c:46:14: e0:d6:dc:12:be:bf:9e:a7:74:65:a6:1e:d6:ef:e2:1d:ca:17: e6:0d:28:0f:24:79:32:36:0b:62:7b:8a:bf:9d:b2:75:e2:05: 63:91:3b:46:82:09:3c:0a:4b:be:c7:71:3a:43:fe:01:6e:54: c8:00:92:75:5a:06:d7:0a:b8:d5:8a:bf:c2:1d:a1:a9:ef:7f: a5:18:21:58:93:57:0a:07:b7:a1:24:49:4e:73:2c:ea:02:14: 12:a2:b4:14:65:df:2c:b9:94:d1:53:70:20:1a:98:44:bc:9d: c1:18:28:ac:4f:ca:17:23:43:88:48:61:28:fd:d3:72:f1:cb: 52:9c:87:59 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8gGCnSeOAL79Nrd/hfqJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmQ0NGQ5NzY1M2EwNmQ4NDZiMjQ0MzUzNWI4M2U4Y2JjMzlkOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UqI9aqlYxC9z3WU+KL+H1ECQnDK QFmIbSx9MYeIssBp4ICcgqoM9D7Nnq5GzXMIlywyEKwRp+QQJ17QSpH9DXcw5FJs r+QAFsM+Vc7X3bIgYFt64o7qYEOacpFogxWzV3h1k+ofc4iStOgaY73EORu/kgxk 0xaTLSy6NDueOABo7KDVqR35ss9pfdXVwqXj+QK9UBC7yfx6Hgl5BGhq6I6d0hRY or+BcxJVSVVkfehV7d+5bxibuzuVD2qFNiy7Svcyhknqwc3aplKhqRQ/M3e/j53R WB2uFVr4NFeA8d5G180Ocwl0LnJpSn1c5kkkS6TxKMXE1MD5lFe7VxftHwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFHbUTZdlOgbYRrJENTW4Poy8OdkoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzZhMzA2 OS1hZDNjLTQzODgtYjFlOC0wYzI3YWRiNzVjZGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvNmEzMDY5 LWFkM2MtNDM4OC1iMWU4LTBjMjdhZGI3NWNkZi8xL2R0Uk5sMlU2QnRoR3NrUTFO Ymctakx3NTJTZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwg/QMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Aj2jMA0GCSqGSIb3DQEBCwUAA4IBAQARWBWiD98IfpZNie62kRCEwE8McjRCe6hx k/8gH/+H70/Ut6QLVla19aPQREVGduSvwKbaVtUR3YL1z41hP6GKW3WrruhdahRM ekMIsnmLAsjS6vdkB+6YIpmgmWjfWcvt/bXz2NfE81dvcsp0ABCXJEexqaiZ1h/o HtlcRhTg1twSvr+ep3Rlph7W7+IdyhfmDSgPJHkyNgtie4q/nbJ14gVjkTtGggk8 Cku+x3E6Q/4BblTIAJJ1WgbXCrjVir/CHaGp73+lGCFYk1cKB7ehJElOcyzqAhQS orQUZd8suZTRU3AgGphEvJ3BGCisT8oXI0OISGEo/dNy8ctSnIdZ -----END CERTIFICATE-----Generated at Sun Jan 25 07:38:07 2026 by rpki-client