This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer File: dzAW-WK1v7DODq26fwhzCWUB4SM.cer (raw, json) Hash identifier: yJbRsZ5kMmAqXxLbCbdGko9k8wvVQC6+DgW1ixMuckA= Subject key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596F946E3993156F16601392EB1BBA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.24.113.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6f:94:6e:39:93:15:6f:16:60:13:92:eb:1b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=773016f962b5bfb0ce0eadba7f0873096501e123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:e5:71:22:1a:8d:56:ca:b1:7a:54:71:0c: b0:65:56:cf:ea:89:4d:51:ed:19:81:6a:b5:6b:05: 5d:7a:7e:b1:ef:a6:07:0f:a2:f7:d7:f9:45:eb:85: 84:1e:3a:a0:94:89:2a:2f:f5:a7:2b:26:e0:c5:0b: 80:7f:3b:26:10:2f:a1:a3:b3:6b:4f:65:36:50:e7: 02:28:6a:c9:92:9b:52:df:34:bc:0b:6d:f2:55:16: e6:f7:a2:3d:b5:c5:24:2f:dc:39:1a:f9:75:d5:a9: f1:81:a3:13:ca:90:2b:95:54:5f:7d:eb:84:c2:2c: 22:49:3b:9c:19:57:85:f5:d8:6a:68:71:7b:11:3b: cb:29:cc:93:ad:08:e6:3a:87:d5:ed:cd:b6:ae:0c: d8:ff:1e:46:f2:d4:b8:d3:7f:4d:cf:c1:e9:80:e9: d2:c5:ce:ff:48:33:7d:36:32:ae:e5:5d:90:0e:77: 81:51:93:7c:59:dd:d1:cc:b0:76:76:62:8e:80:cd: 63:c7:1e:81:a9:0f:61:37:c5:7a:a1:b7:05:b2:9d: 00:ee:43:09:8e:cd:60:16:0e:ef:e7:d5:db:81:80: 46:5a:90:42:f2:35:7c:f8:e3:c4:83:bd:cd:9a:20: 5f:cc:3f:0e:5d:98:53:a6:84:1b:39:65:83:19:94: 54:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.113.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:97:eb:dd:d8:6f:d0:ae:f4:f5:40:6d:2b:68:34:9e:a0:50: cf:a9:a1:ab:f8:4f:83:34:8b:c4:73:7d:db:01:f4:f4:64:74: e9:e9:45:45:7c:35:a3:48:f2:64:66:d1:d5:d6:e1:61:9c:0f: b5:b0:dc:e8:3e:76:4f:a3:e5:b9:d5:e0:31:c1:b6:a2:c7:a8: 61:85:34:e5:8c:ec:31:8d:2f:52:e4:b4:94:5f:aa:56:d7:08: 45:b5:25:56:80:9f:80:9c:6d:ac:f4:68:54:c7:0a:c4:9d:6e: 91:04:ef:1e:8a:17:2d:d4:86:4d:e6:13:ed:78:9a:82:0c:01: 7f:f7:d5:8d:70:9a:c8:60:14:55:4a:28:5f:5c:a5:37:e4:18: 23:88:93:cc:8a:c4:01:56:60:51:12:bc:21:35:5d:d4:82:b5: 85:c2:92:b2:4f:ae:ef:04:77:8d:89:30:9a:21:a2:81:34:a5: da:19:bf:e7:4c:cb:f6:b4:92:f3:29:2a:43:11:e7:9c:b2:df: 97:00:2f:69:66:75:7a:6b:99:31:c6:b5:cd:5a:e8:74:61:60: 7f:95:8e:c5:99:0f:05:7a:8d:08:d8:b3:29:f2:87:d0:bd:4c: b8:ca:de:37:c3:52:1b:16:97:8c:53:c4:dc:42:0f:50:5a:ee: 11:07:1a:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WW+UbjmTFW8WYBOS6xu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzMwMTZmOTYyYjViZmIwY2UwZWFkYmE3ZjA4NzMwOTY1MDFlMTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RvlcSIajVbKsXpUcQywZVbP6olN Ue0ZgWq1awVden6x76YHD6L31/lF64WEHjqglIkqL/WnKybgxQuAfzsmEC+ho7Nr T2U2UOcCKGrJkptS3zS8C23yVRbm96I9tcUkL9w5Gvl11anxgaMTypArlVRffeuE wiwiSTucGVeF9dhqaHF7ETvLKcyTrQjmOofV7c22rgzY/x5G8tS4039Nz8HpgOnS xc7/SDN9NjKu5V2QDneBUZN8Wd3RzLB2dmKOgM1jxx6BqQ9hN8V6obcFsp0A7kMJ js1gFg7v59XbgYBGWpBC8jV8+OPEg73NmiBfzD8OXZhTpoQbOWWDGZRUiwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHcwFvlitb+wzg6tun8IcwllAeEjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzYyNmZi NC1lOGNkLTQ1ZjAtOGRjOC03NjVlOWMyMDNiZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNjI2ZmI0 LWU4Y2QtNDVmMC04ZGM4LTc2NWU5YzIwM2JlMy8xL2R6QVctV0sxdjdET0RxMjZm d2h6Q1dVQjRTTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRhxMA0GCSqGSIb3DQEBCwUAA4IBAQCbl+vd 2G/QrvT1QG0raDSeoFDPqaGr+E+DNIvEc33bAfT0ZHTp6UVFfDWjSPJkZtHV1uFh nA+1sNzoPnZPo+W51eAxwbaix6hhhTTljOwxjS9S5LSUX6pW1whFtSVWgJ+AnG2s 9GhUxwrEnW6RBO8eihct1IZN5hPteJqCDAF/99WNcJrIYBRVSihfXKU35BgjiJPM isQBVmBRErwhNV3UgrWFwpKyT67vBHeNiTCaIaKBNKXaGb/nTMv2tJLzKSpDEeec st+XAC9pZnV6a5kxxrXNWuh0YWB/lY7FmQ8Feo0I2LMp8ofQvUy4yt43w1IbFpeM U8TcQg9QWu4RBxqL -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:11 2026 by rpki-client