This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer File: DB5tXnLa9BCM9gvUfpNt8aHpciY.cer (raw, json) Hash identifier: 6RNg7hmx6xHylqPXhYViWFVdvAwHRCiOajFcKbl2Irw= Subject key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DFD26D514C9493345865F32E41A4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206211 IP: 185.247.240.0/22 IP: 2a0d:d180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fd:26:d5:14:c9:49:33:45:86:5f:32:e4:1a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dc:bf:c0:9d:10:61:85:0b:6a:80:7b:53:9a: 6a:8e:11:91:49:ae:df:32:3b:c1:0d:4c:0f:80:21: a7:3e:22:5f:a5:3c:2c:53:98:dc:e8:93:f0:d7:f0: 09:62:ad:43:39:71:dd:27:ef:84:a6:e9:37:75:59: ce:19:3b:2f:44:0a:14:53:c4:0c:29:96:65:e9:06: d9:fe:ac:e2:55:af:30:03:86:86:a2:3f:45:16:1f: b8:83:29:40:70:99:85:5b:90:90:ff:a4:bb:30:69: 93:cb:fa:17:0c:71:cc:27:c9:88:01:d8:a3:ba:42: 2c:ea:f3:8a:06:a6:e6:f3:72:c8:5f:ce:b8:13:8e: 87:d5:cb:a1:0e:2b:09:5c:05:84:02:ab:0b:3f:f8: 92:45:47:9d:99:7a:d7:7d:99:43:e7:a7:c3:0e:c0: fa:e5:2a:3e:b0:3e:8a:77:91:71:65:9a:9d:5f:78: 3b:d3:ed:78:7f:eb:c5:47:d1:d6:e6:0f:63:22:9a: c7:b4:c3:1e:d5:37:7f:99:75:50:fb:e1:16:cf:c8: d8:07:01:ab:0c:e3:0c:03:08:61:65:d2:47:cd:ba: 81:cf:13:00:dd:67:09:7f:80:f3:da:0c:cb:64:6e: ff:60:b1:56:3f:96:ba:ed:c1:b0:71:f2:f9:ab:11: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.240.0/22 IPv6: 2a0d:d180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206211 Signature Algorithm: sha256WithRSAEncryption 8e:a6:d4:05:24:c8:df:c1:c9:fc:cb:04:6b:2a:fd:1f:0d:50: 16:c7:29:aa:6c:01:0a:b2:23:62:2c:3d:d1:5c:5b:c2:75:ca: cb:5e:94:1e:fc:65:2c:46:d0:89:f1:b2:e0:b7:1a:67:b8:4e: e9:ee:66:2b:2c:00:ac:55:2f:d9:76:ed:e8:0f:41:57:39:3b: 08:71:f8:39:8a:3f:88:96:51:58:1b:f1:53:c6:f0:64:75:76: 0b:e2:cc:5b:f2:49:35:6f:7a:46:a8:8f:ea:64:65:d5:2a:9e: a0:7f:14:38:eb:c9:b2:b4:ad:95:91:50:ce:57:18:51:fa:46: 34:a9:db:0c:b5:f8:e6:2a:37:f8:23:41:5d:65:5f:28:a1:67: bd:8c:08:52:fd:88:98:00:2c:7c:ff:fd:1d:61:c6:59:1f:90: 68:df:b3:c8:8c:d2:c6:9d:80:f8:dd:dd:67:ca:40:c8:2f:4d: 02:90:64:52:88:33:50:01:b1:c1:cb:3a:37:db:69:21:1f:e7: 1d:26:6e:5b:e8:5a:f1:15:0e:9a:49:c2:22:d2:24:92:44:05: 06:bd:8c:af:b4:05:3e:f7:35:73:ad:31:6e:01:4c:f7:d7:ed: 6f:ba:93:76:94:9e:bb:b5:71:fd:b0:8e:1f:13:5e:d2:ab:c8: 11:e8:fe:9b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ff0m1RTJSTNFhl8y5BpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzFlNmQ1ZTcyZGFmNDEwOGNmNjBiZDQ3ZTkzNmRmMWExZTk3MjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ny/wJ0QYYULaoB7U5pqjhGRSa7f MjvBDUwPgCGnPiJfpTwsU5jc6JPw1/AJYq1DOXHdJ++Epuk3dVnOGTsvRAoUU8QM KZZl6QbZ/qziVa8wA4aGoj9FFh+4gylAcJmFW5CQ/6S7MGmTy/oXDHHMJ8mIAdij ukIs6vOKBqbm83LIX864E46H1cuhDisJXAWEAqsLP/iSRUedmXrXfZlD56fDDsD6 5So+sD6Kd5FxZZqdX3g70+14f+vFR9HW5g9jIprHtMMe1Td/mXVQ++EWz8jYBwGr DOMMAwhhZdJHzbqBzxMA3WcJf4Dz2gzLZG7/YLFWP5a67cGwcfL5qxEJ4wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAwebV5y2vQQjPYL1H6TbfGh6XImMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzNkYzcy ZS0wODYxLTQzMTYtYTRiZS1hMjk1ODEzZjFmODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvM2RjNzJl LTA4NjEtNDMxNi1hNGJlLWEyOTU4MTNmMWY4Mi8xL0RCNXRYbkxhOUJDTTlndlVm cE50OGFIcGNpWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuffwMA0EAgACMAcDBQMqDdGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMlgzANBgkqhkiG9w0BAQsFAAOCAQEAjqbUBSTI38HJ /MsEayr9Hw1QFscpqmwBCrIjYiw90VxbwnXKy16UHvxlLEbQifGy4LcaZ7hO6e5m KywArFUv2Xbt6A9BVzk7CHH4OYo/iJZRWBvxU8bwZHV2C+LMW/JJNW96RqiP6mRl 1SqeoH8UOOvJsrStlZFQzlcYUfpGNKnbDLX45io3+CNBXWVfKKFnvYwIUv2ImAAs fP/9HWHGWR+QaN+zyIzSxp2A+N3dZ8pAyC9NApBkUogzUAGxwcs6N9tpIR/nHSZu W+ha8RUOmknCItIkkkQFBr2Mr7QFPvc1c60xbgFM99ftb7qTdpSeu7Vx/bCOHxNe 0qvIEej+mw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:04 2026 by rpki-client