This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer File: Dj8xyerObwpezNuN8rAcc1FWhoY.cer (raw, json) Hash identifier: TLT1umOWuANjNpk5G8W80hRJyLcRzGYJJqlkzZVzr+c= Subject key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2B0E756E79C982FA6E7BF5147E6AA638 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 17 Dec 2025 06:45:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 47105 IP: 185.73.124.0/22 IP: 185.170.144.0/24 IP: 195.82.146.0/23 IP: 2a03:42e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:0e:75:6e:79:c9:82:fa:6e:7b:f5:14:7e:6a:a6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 17 06:45:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:83:88:ea:0e:66:d6:f3:43:68:28:45:d7: f6:9e:78:fc:6f:22:e9:79:ea:64:46:58:e3:f6:27: 8e:8e:9f:86:c9:b6:ff:58:40:59:88:d9:ac:39:f2: e5:1d:49:b4:1a:83:5a:fa:f4:66:8f:14:dd:71:87: 38:63:85:5e:bf:7c:ad:43:97:e6:fe:b4:e3:a8:d5: 78:25:09:d7:df:b3:8b:60:38:8c:2b:47:85:6a:6d: 40:70:60:a9:16:97:8d:b8:d4:96:c1:95:b4:88:ac: f5:8f:79:06:30:ff:44:73:c2:d6:fa:ec:d1:65:40: c7:00:d5:17:66:47:f0:07:fd:c2:ee:26:60:ef:08: 9e:25:73:ba:d3:cc:0d:38:06:36:b3:e9:f8:b0:ae: ac:85:17:9d:6b:55:a8:ea:86:d2:0d:5d:af:53:f8: 80:fb:4d:48:b8:60:69:4e:c5:8c:bc:3f:fb:db:28: 0e:ba:86:de:50:e2:ba:d7:14:b1:63:61:e7:57:8f: 76:81:81:fb:36:5c:cc:75:21:a8:0d:1b:8f:82:e6: 8c:99:9f:75:ae:64:94:8c:ea:bd:b2:71:54:48:84: 2c:20:84:ea:3b:da:5e:72:17:b9:5b:c3:b2:b7:b8: 86:ba:c9:3b:da:ab:8d:2a:23:ab:51:81:77:22:28: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.124.0/22 185.170.144.0/24 195.82.146.0/23 IPv6: 2a03:42e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47105 Signature Algorithm: sha256WithRSAEncryption 5b:2f:03:c8:71:38:05:07:fc:9c:12:fd:48:51:1a:1c:d4:59: c7:b4:b3:03:c1:4c:b6:de:7b:a2:43:52:df:de:5b:d2:98:9a: 8f:fa:40:f5:b6:05:43:9d:8a:a2:79:19:bd:ae:6b:ec:b6:52: 12:c7:93:48:83:70:e8:11:9e:8f:b9:5e:66:59:60:fb:c4:3b: 6d:57:e7:08:3c:aa:d8:27:ab:bf:55:bc:88:da:5b:77:a2:53: 95:76:84:e2:bc:fb:2b:9f:c6:29:bc:3a:3a:11:2b:44:2a:9c: 80:c5:4b:0a:82:e4:2a:e0:ae:3f:05:0f:5f:22:fd:0d:29:99: 78:fe:7b:fd:59:17:8a:b6:61:77:ab:aa:f6:fd:c1:d6:24:2f: 4e:e3:83:ac:08:4b:12:bf:e5:63:13:03:44:ea:20:e3:c2:3a: be:7a:ab:94:6f:86:aa:00:d4:53:7c:7d:89:28:e8:ff:24:8e: 62:fe:2f:15:c2:4f:dc:49:91:5d:06:1b:6c:2a:df:72:6a:d5: 40:1d:42:fd:b6:64:12:6d:84:7f:37:29:cb:23:bd:47:09:f3: a1:88:5d:ee:73:7f:d3:bc:10:f2:7d:0a:cd:84:07:a8:ad:81: 54:88:01:ee:aa:2c:76:fa:a3:7f:5a:57:8f:7f:ff:bb:8b:bc: 71:69:79:49 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZsrDnVuecmC+m579RR+aqY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE3MDY0NTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTNmMzFjOWVhY2U2ZjBhNWVjY2RiOGRmMmIwMWM3MzUxNTY4Njg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukODiOoOZtbzQ2goRdf2nnj8byLp eepkRljj9ieOjp+Gybb/WEBZiNmsOfLlHUm0GoNa+vRmjxTdcYc4Y4Vev3ytQ5fm /rTjqNV4JQnX37OLYDiMK0eFam1AcGCpFpeNuNSWwZW0iKz1j3kGMP9Ec8LW+uzR ZUDHANUXZkfwB/3C7iZg7wieJXO608wNOAY2s+n4sK6shReda1Wo6obSDV2vU/iA +01IuGBpTsWMvD/72ygOuobeUOK61xSxY2HnV492gYH7NlzMdSGoDRuPguaMmZ91 rmSUjOq9snFUSIQsIITqO9peche5W8Oyt7iGusk72quNKiOrUYF3IijdLwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFA4/Mcnqzm8KXszbjfKwHHNRVoaGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2E2ZGRh MS0xYjg3LTRlYzMtOTM4Zi1kZDVkZGQwNWRiMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvYTZkZGEx LTFiODctNGVjMy05MzhmLWRkNWRkZDA1ZGIwYi8xL0RqOHh5ZXJPYndwZXpOdU44 ckFjYzFGV2hvWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuUl8AwQAuaqQAwQBw1KSMA0EAgACMAcDBQAq A0LgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4ATANBgkqhkiG9w0BAQsFAAOC AQEAWy8DyHE4BQf8nBL9SFEaHNRZx7SzA8FMtt57okNS395b0piaj/pA9bYFQ52K onkZva5r7LZSEseTSINw6BGej7leZllg+8Q7bVfnCDyq2Cerv1W8iNpbd6JTlXaE 4rz7K5/GKbw6OhErRCqcgMVLCoLkKuCuPwUPXyL9DSmZeP57/VkXirZhd6uq9v3B 1iQvTuODrAhLEr/lYxMDROog48I6vnqrlG+GqgDUU3x9iSjo/ySOYv4vFcJP3EmR XQYbbCrfcmrVQB1C/bZkEm2EfzcpyyO9RwnzoYhd7nN/07wQ8n0KzYQHqK2BVIgB 7qosdvqjf1pXj3//u4u8cWl5SQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:15:44 2025 by rpki-client