This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer File: 59nPsHjtpYFvyAnpjCXLcZY-dbc.cer (raw, json) Hash identifier: J83S0Q4VZdomsz7nOfX4/90EGmrAS0xaST1+nYWM/M0= Subject key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79114A155E8971A5421CAF32B534A588 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.64.96.0/22 IP: 2a04:f880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4a:15:5e:89:71:a5:42:1c:af:32:b5:34:a5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:8f:e1:e2:34:43:69:17:48:a2:3a:21:85: ae:c4:1b:bd:e3:04:b2:6a:cf:da:b2:09:b1:a5:56: ea:bf:bb:ea:46:3b:32:cb:d7:8d:09:27:47:13:c0: 24:15:57:86:01:8b:74:4b:71:3c:ad:46:22:57:f6: dd:e3:f4:ad:b0:67:75:fd:34:72:f2:28:0c:51:6e: d5:b8:86:17:db:2d:af:ed:e6:39:13:85:de:28:83: 2f:3d:ec:56:5c:8b:aa:8e:27:08:76:4e:01:a1:48: e0:9e:db:2b:be:55:7e:ea:87:ba:0b:78:d2:16:35: 81:ac:66:6e:b1:f8:bf:b4:dc:f7:ba:b7:1a:23:aa: 92:70:38:1c:f3:ec:10:b1:c3:b3:46:62:f5:38:25: 80:52:97:b6:84:67:b2:ee:a4:68:ec:37:a0:e3:68: 97:1d:1a:1f:ca:56:31:36:34:6f:4f:58:53:5f:99: ef:28:ba:8e:15:6c:d6:cf:8f:c3:2e:60:81:83:0d: 90:fd:8c:ed:5a:f3:12:71:35:83:cc:9a:6c:68:5e: b4:5b:62:39:4d:fa:9d:9c:2d:74:a5:95:21:ce:85: e3:e7:19:62:66:9c:a6:fd:df:e0:d1:fe:d6:47:e2: 07:07:1d:2e:67:58:3a:3e:53:49:e4:7a:a0:2e:bf: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.96.0/22 IPv6: 2a04:f880::/29 Signature Algorithm: sha256WithRSAEncryption 6b:29:ad:84:d9:5f:56:89:c7:8e:61:ba:9d:14:6f:36:4b:63: 31:1a:7f:af:15:a8:69:58:c6:c6:af:69:a1:7f:e8:b4:37:2c: 1c:a3:c8:58:f3:2c:04:ed:70:33:1b:90:ad:96:f0:1c:9b:7d: 00:41:b3:75:15:c7:9d:61:5c:d9:69:cc:fd:12:e1:92:70:d2: fc:32:29:ac:d2:c5:89:4f:6b:9c:09:3f:c9:37:14:16:45:da: 00:bf:05:58:b2:92:16:5f:c0:b6:10:96:02:3c:82:dc:e0:cf: 8a:16:82:f5:71:b7:47:a7:70:70:33:b4:32:c8:d7:72:a2:0f: 60:46:bc:b4:bf:bc:e3:28:6b:8e:df:a9:ef:d9:cb:27:d4:6d: 15:9a:1e:2d:16:ec:87:2f:b5:6c:c9:d9:30:75:f1:9d:9f:e3: 99:57:6a:57:f6:08:27:67:db:41:a7:be:61:80:24:4f:27:22: 27:ab:77:a0:62:19:63:4d:36:ac:aa:dd:8c:a4:91:91:22:34: ff:c0:cb:a8:27:7c:ce:4d:4a:c5:79:29:dc:74:21:02:9d:57: 89:5b:74:5c:f1:1c:36:38:2d:62:08:fc:4b:82:4d:09:0c:11: 34:27:68:78:d0:d9:32:d0:2a:6e:83:9c:24:32:cf:cd:47:76: 6d:6e:1b:2f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EUoVXolxpUIcrzK1NKWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2Q5Y2ZiMDc4ZWRhNTgxNmZjODA5ZTk4YzI1Y2I3MTk2M2U3NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS+P4eI0Q2kXSKI6IYWuxBu94wSy as/asgmxpVbqv7vqRjsyy9eNCSdHE8AkFVeGAYt0S3E8rUYiV/bd4/StsGd1/TRy 8igMUW7VuIYX2y2v7eY5E4XeKIMvPexWXIuqjicIdk4BoUjgntsrvlV+6oe6C3jS FjWBrGZusfi/tNz3urcaI6qScDgc8+wQscOzRmL1OCWAUpe2hGey7qRo7Deg42iX HRofylYxNjRvT1hTX5nvKLqOFWzWz4/DLmCBgw2Q/YztWvMScTWDzJpsaF60W2I5 TfqdnC10pZUhzoXj5xliZpym/d/g0f7WR+IHBx0uZ1g6PlNJ5HqgLr8/vQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOfZz7B47aWBb8gJ6Ywly3GWPnW3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzAwMGVh Ny1jOWY0LTRlYmItYjliMS1mZWVlN2MyOWQ0ZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvMDAwZWE3 LWM5ZjQtNGViYi1iOWIxLWZlZWU3YzI5ZDRkZS8xLzU5blBzSGp0cFlGdnlBbnBq Q1hMY1pZLWRiYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUBgMA0EAgACMAcDBQMqBPiAMA0GCSqGSIb3 DQEBCwUAA4IBAQBrKa2E2V9WiceOYbqdFG82S2MxGn+vFahpWMbGr2mhf+i0Nywc o8hY8ywE7XAzG5CtlvAcm30AQbN1FcedYVzZacz9EuGScNL8Mims0sWJT2ucCT/J NxQWRdoAvwVYspIWX8C2EJYCPILc4M+KFoL1cbdHp3BwM7QyyNdyog9gRry0v7zj KGuO36nv2csn1G0Vmh4tFuyHL7VsydkwdfGdn+OZV2pX9ggnZ9tBp75hgCRPJyIn q3egYhljTTasqt2MpJGRIjT/wMuoJ3zOTUrFeSncdCECnVeJW3Rc8Rw2OC1iCPxL gk0JDBE0J2h40Nky0Cpug5wkMs/NR3Ztbhsv -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:37 2026 by rpki-client