This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer File: DASLX4FSNcOT_qdh4H64uLv4f9M.cer (raw, json) Hash identifier: oQURPHElvxVuOz9wFbiRHpu3VThaq20q1xqwWldiAyk= Subject key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC931D3F97AFA832D74DA834232C6BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56588 IP: 46.226.136.0/21 IP: 2a00:6a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:31:d3:f9:7a:fa:83:2d:74:da:83:42:32:c6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:a8:a3:c2:29:7e:e3:5d:aa:96:c8:12:10: 65:e2:d6:28:e8:70:ad:a2:c8:6f:74:6f:a0:2b:48: 20:fd:83:e6:ba:a0:bb:59:db:44:5a:17:c1:ce:94: e9:37:40:24:5b:ef:3f:ed:41:c4:7d:f5:5c:83:83: b6:22:4a:f1:52:0e:29:e7:3c:e0:db:59:30:b3:29: dd:74:be:3b:ab:71:08:6d:45:01:2a:08:a7:90:57: bd:eb:11:63:3c:f6:c4:24:05:e0:af:7c:5e:e4:e1: 7a:ac:0d:4c:09:c9:c6:76:c5:03:20:76:95:5c:97: e2:43:af:a9:93:62:9e:69:e1:18:e6:b8:d4:d6:7b: 33:d3:a4:31:af:9a:0d:f1:ab:fe:ef:ee:9e:63:af: f2:2a:61:47:f1:68:84:35:04:be:be:15:6e:85:93: dd:aa:df:73:e2:17:39:0e:3e:1a:96:b2:36:2f:35: b7:ac:10:50:f6:0b:d3:4a:f3:b8:4d:13:d1:80:9f: 55:a7:8a:44:6d:4d:34:0f:fc:18:26:ec:60:f4:55: c6:6b:ee:54:db:37:84:76:54:52:82:3d:30:f5:d1: 23:e9:7c:d5:48:dc:1e:7a:2e:c4:4d:b3:8a:9a:d3: 16:3a:48:b3:83:63:40:06:d9:c8:9a:7f:92:46:5b: 70:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.136.0/21 IPv6: 2a00:6a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56588 Signature Algorithm: sha256WithRSAEncryption 9f:f4:c2:0c:7d:7e:b9:99:02:ed:3c:e3:33:b9:c5:04:88:3d: 53:07:1d:a4:46:d0:03:c2:80:1b:2e:84:c9:e6:bc:a9:2f:0b: 20:35:97:a6:a8:7e:98:4f:f6:93:ef:93:48:c6:24:a6:98:3d: d7:3c:4c:d5:65:2b:5a:cc:fd:78:f4:5a:4b:52:4f:c9:cd:36: 69:09:1d:8a:0b:d5:31:ac:10:7d:68:05:32:5f:bd:cf:4a:e5: cb:f2:2c:7c:d6:2a:a2:50:a8:10:eb:14:50:32:b6:fa:84:43: f3:c6:0c:f9:a4:89:ce:bd:76:fe:db:bb:76:e0:d7:5c:9a:49: b0:5c:d2:8d:2d:45:c0:65:08:92:3a:8d:1e:ce:a5:9e:b2:b6: 15:5f:cd:e3:4c:e0:18:6e:cb:ab:46:0c:4c:d4:23:11:59:0c: 45:0e:ac:80:b2:13:a0:fd:1c:42:71:10:a6:0a:18:b0:79:ac: 43:93:46:35:de:81:6d:d0:a4:b7:3e:b7:20:6b:ee:be:b8:29: 75:14:ad:08:97:6c:f6:ce:4d:c7:5f:a2:3a:e0:1a:e6:11:f0: f4:53:01:e3:51:72:8a:9e:91:86:69:23:d0:9f:15:de:21:5f: 84:60:7b:b4:c1:26:4a:33:e3:31:97:84:3d:90:30:94:4f:9d: 26:c1:7f:1e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yTHT+Xr6gy102oNCMsa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzA0OGI1ZjgxNTIzNWMzOTNmZWE3NjFlMDdlYjhiOGJiZjg3ZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuOoo8IpfuNdqpbIEhBl4tYo6HCt oshvdG+gK0gg/YPmuqC7WdtEWhfBzpTpN0AkW+8/7UHEffVcg4O2IkrxUg4p5zzg 21kwsynddL47q3EIbUUBKginkFe96xFjPPbEJAXgr3xe5OF6rA1MCcnGdsUDIHaV XJfiQ6+pk2KeaeEY5rjU1nsz06Qxr5oN8av+7+6eY6/yKmFH8WiENQS+vhVuhZPd qt9z4hc5Dj4alrI2LzW3rBBQ9gvTSvO4TRPRgJ9Vp4pEbU00D/wYJuxg9FXGa+5U 2zeEdlRSgj0w9dEj6XzVSNweei7ETbOKmtMWOkizg2NABtnImn+SRltwwwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAwEi1+BUjXDk/6nYeB+uLi7+H/TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzZkN2Mx Yy04ZWJkLTQyNDYtODNmOS01ZjNjYzMxOGYxODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvNmQ3YzFj LThlYmQtNDI0Ni04M2Y5LTVmM2NjMzE4ZjE4MC8xL0RBU0xYNEZTTmNPVF9xZGg0 SDY0dUx2NGY5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDLuKIMA0EAgACMAcDBQMqAGoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDdDDANBgkqhkiG9w0BAQsFAAOCAQEAn/TCDH1+uZkC 7TzjM7nFBIg9UwcdpEbQA8KAGy6Eyea8qS8LIDWXpqh+mE/2k++TSMYkppg91zxM 1WUrWsz9ePRaS1JPyc02aQkdigvVMawQfWgFMl+9z0rly/IsfNYqolCoEOsUUDK2 +oRD88YM+aSJzr12/tu7duDXXJpJsFzSjS1FwGUIkjqNHs6lnrK2FV/N40zgGG7L q0YMTNQjEVkMRQ6sgLIToP0cQnEQpgoYsHmsQ5NGNd6BbdCktz63IGvuvrgpdRSt CJds9s5Nx1+iOuAa5hHw9FMB41Fyip6Rhmkj0J8V3iFfhGB7tMEmSjPjMZeEPZAw lE+dJsF/Hg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:53 2026 by rpki-client