This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer File: CDfJmypMBi1cIGePnc8yB679Xng.cer (raw, json) Hash identifier: /3/Fe3a9XOViP9C3cl3urMqW96NspqqAPDt1O9cIyXg= Subject key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BBB7717865A48D6F37138ACADEEA2AE4E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 07:45:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a01:4240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:77:17:86:5a:48:d6:f3:71:38:ac:ad:ee:a2:ae:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 14 07:45:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:43:7c:9d:30:f7:ca:9b:fa:65:8a:d3:c8: 36:ac:57:7a:c0:b7:1c:6c:54:a1:47:d8:90:c3:1e: ab:4f:1a:0b:b4:84:b9:5e:74:b8:fe:89:8f:d4:1d: 6d:68:45:fe:5d:c8:9d:8a:74:2f:f5:ed:94:0f:33: 9e:87:bd:c4:70:5e:0f:0f:6d:61:5c:04:5b:2f:5b: 16:c2:75:99:9b:fe:ca:bf:d7:2a:69:ec:d6:22:65: c4:0d:ae:a7:d5:cf:49:29:47:e5:25:8d:e5:f8:9d: 80:a5:14:4f:74:23:b9:23:59:9b:33:33:b6:36:53: 77:eb:32:2e:89:29:de:3b:c7:08:4c:05:4f:9d:9f: 8d:f4:a2:61:33:c7:bf:60:0d:4c:1a:72:b5:bd:87: ca:17:68:2d:d9:d6:0a:32:be:7b:4e:0f:2a:8e:06: a9:07:1d:13:48:93:2e:a9:de:21:84:da:b7:d0:ff: 82:8d:48:73:7b:bf:fb:4f:e8:9c:5e:0c:ae:db:58: d9:b8:6f:10:76:22:b5:97:99:71:a3:67:a3:3b:e3: 73:1b:07:9c:78:58:6a:36:e1:01:99:d8:97:2e:84: 71:1c:c9:28:f1:df:c0:b0:c2:2f:a1:ab:2b:a9:0b: 07:62:5c:79:bb:30:e7:75:a6:9a:28:fa:56:a1:42: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:4240::/29 Signature Algorithm: sha256WithRSAEncryption 39:78:73:1c:de:2d:03:60:10:25:8f:23:45:88:57:7f:0e:e2: af:b8:71:6c:b4:0c:17:c6:2d:e6:ad:89:79:08:bf:4e:77:df: 84:f1:22:3e:6b:91:88:87:cc:49:8f:9b:e7:71:1d:4e:dc:a8: 3c:68:a1:38:90:8f:18:2c:de:8b:1f:95:a3:73:b6:88:ce:53: 28:61:12:ed:e8:a8:57:a3:c0:75:31:90:35:90:7a:ef:af:3c: ee:8c:ac:54:57:56:45:63:0f:24:69:62:f8:bf:09:26:7d:3a: 87:0d:3a:37:c6:57:bf:4f:2e:bb:32:0a:57:05:34:d6:2b:b1: 6a:8f:bd:3c:22:a3:43:84:e7:fb:b9:ee:32:5a:c6:1a:ce:db: 28:7d:92:7a:de:62:93:38:3b:b1:62:6a:6c:2d:68:5a:f3:c7: aa:ff:5d:63:af:a5:a7:94:93:b0:d5:14:08:3f:87:e0:ce:67: 89:2b:ff:5f:64:31:41:1f:99:26:a5:ad:a7:6b:ba:a7:a2:31: cd:d5:ef:e1:87:9f:88:bd:06:64:45:7c:4c:83:68:f5:24:32: f6:eb:7a:3f:ee:5b:52:99:42:db:94:0b:98:16:9d:02:a7:b8: 9d:14:30:f5:d2:32:bf:dc:df:10:7e:24:09:14:12:1d:fb:a1: 54:07:db:63 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZu7dxeGWkjW83E4rK3uoq5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE0MDc0NTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODM3Yzk5YjJhNGMwNjJkNWMyMDY3OGY5ZGNmMzIwN2FlZmQ1ZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdxDfJ0w98qb+mWK08g2rFd6wLcc bFShR9iQwx6rTxoLtIS5XnS4/omP1B1taEX+XcidinQv9e2UDzOeh73EcF4PD21h XARbL1sWwnWZm/7Kv9cqaezWImXEDa6n1c9JKUflJY3l+J2ApRRPdCO5I1mbMzO2 NlN36zIuiSneO8cITAVPnZ+N9KJhM8e/YA1MGnK1vYfKF2gt2dYKMr57Tg8qjgap Bx0TSJMuqd4hhNq30P+CjUhze7/7T+icXgyu21jZuG8QdiK1l5lxo2ejO+NzGwec eFhqNuEBmdiXLoRxHMko8d/AsMIvoasrqQsHYlx5uzDndaaaKPpWoUKlfQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFAg3yZsqTAYtXCBnj53PMgeu/V54MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzA4OTVk Mi1iNzc4LTQ2YzQtYTY5MS1mMTIzN2Y0YzVjZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvMDg5NWQy LWI3NzgtNDZjNC1hNjkxLWYxMjM3ZjRjNWNmNi8xL0NEZkpteXBNQmkxY0lHZVBu Yzh5QjY3OVhuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgFCQDANBgkqhkiG9w0BAQsFAAOCAQEAOXhz HN4tA2AQJY8jRYhXfw7ir7hxbLQMF8Yt5q2JeQi/TnffhPEiPmuRiIfMSY+b53Ed TtyoPGihOJCPGCzeix+Vo3O2iM5TKGES7eioV6PAdTGQNZB676887oysVFdWRWMP JGli+L8JJn06hw06N8ZXv08uuzIKVwU01iuxao+9PCKjQ4Tn+7nuMlrGGs7bKH2S et5ikzg7sWJqbC1oWvPHqv9dY6+lp5STsNUUCD+H4M5niSv/X2QxQR+ZJqWtp2u6 p6IxzdXv4YefiL0GZEV8TINo9SQy9ut6P+5bUplC25QLmBadAqe4nRQw9dIyv9zf EH4kCRQSHfuhVAfbYw== -----END CERTIFICATE-----Generated at Tue Jan 20 14:36:38 2026 by rpki-client