This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer File: DFw5jABFpPD-D47c8geV5fjqqjA.cer (raw, json) Hash identifier: OjVxvvaRrRmf2kADTbHosTA+kxsIH6awZWzU0E9laYQ= Subject key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355ADE611ACD6CD866DEC17DD458AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208754 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5a:de:61:1a:cd:6c:d8:66:de:c1:7d:d4:58:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:d1:91:9a:c8:b0:53:bb:7c:a9:7d:0d:02: ce:2c:df:11:d1:2a:3b:19:a3:73:62:05:6d:d7:3b: be:62:19:c8:26:33:ce:7f:25:cd:89:9b:77:ab:8b: 4d:dd:ef:59:5d:1c:b2:ae:4a:b4:8c:5a:72:38:12: 3e:06:16:b6:fd:3e:74:05:0a:7c:cd:a8:07:53:53: a1:21:8d:5a:ca:df:0d:ae:09:fe:75:45:74:eb:64: 49:3f:60:7f:db:f5:a7:61:02:d7:b1:48:e8:fd:ae: 3e:2f:95:29:57:00:df:ea:d4:6f:b2:b9:b0:37:79: cd:21:6c:fd:e7:53:18:a8:d6:24:e8:ef:cc:ad:cf: e2:78:c4:07:c0:88:3f:e0:b7:7b:5d:bf:ea:ca:35: 83:8e:74:2a:a7:28:39:6f:ce:2d:8c:34:28:b5:8f: 35:ce:20:e5:b9:d2:cd:29:6e:2d:fd:22:a4:7f:11: 8b:78:81:a6:40:fc:0c:13:07:a2:d1:49:52:46:ac: 36:33:5b:0d:1c:20:2f:6a:67:10:65:b0:e1:f6:b5: 9a:87:5c:19:88:95:75:75:40:a0:d2:6c:60:c2:9c: d0:32:f9:7d:84:b1:a2:49:3a:81:88:55:12:6f:f1: e4:ec:c3:9f:cf:2d:6b:3b:5d:a7:cc:cb:ca:f0:2d: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208754 Signature Algorithm: sha256WithRSAEncryption 3d:84:f1:92:53:d5:8b:37:73:4d:f3:00:04:16:55:9b:b6:dc: 2b:ab:f3:4e:89:ec:71:d4:c6:e3:db:d6:b1:8a:d9:80:9f:9d: e1:b0:7d:0c:b4:ca:9e:4f:8e:fa:64:c1:7f:40:cd:ee:df:6d: bc:3b:54:99:a6:6b:c2:36:61:6c:08:76:af:53:61:04:f9:00: ec:20:e2:ba:f6:d0:d2:70:11:48:55:24:50:3b:61:fd:b0:78: aa:03:97:3b:9d:8c:99:eb:61:9b:e3:3c:b3:ba:c3:cb:88:18: 10:ca:a1:7b:7f:a6:f5:21:9a:50:eb:61:3c:a5:97:48:da:25: 57:be:4b:9a:d1:f5:31:e4:56:74:e5:01:a5:9f:bc:cc:b2:07: 93:15:ab:68:f3:07:b8:b7:b5:35:04:1d:34:5c:2b:a5:bf:b3: e2:cd:d5:d8:92:40:f0:68:5c:c5:0e:bc:1f:6a:de:f5:0f:ef: a7:dc:cc:fe:21:b6:ea:dc:3b:67:6c:ec:be:29:b5:eb:65:cc: df:fc:1b:f2:b8:24:28:45:6e:f4:a5:8e:59:46:54:92:bc:6c: eb:11:ba:41:67:44:f8:b3:2b:ee:c4:2f:84:b1:04:4f:85:af: 23:da:0d:5e:c7:4d:28:af:2f:37:5d:46:57:26:f7:fa:f8:52: 17:7a:73:50 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4NVreYRrNbNhm3sF91FivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzVjMzk4YzAwNDVhNGYwZmUwZjhlZGNmMjA3OTVlNWY4ZWFhYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujLRkZrIsFO7fKl9DQLOLN8R0So7 GaNzYgVt1zu+YhnIJjPOfyXNiZt3q4tN3e9ZXRyyrkq0jFpyOBI+Bha2/T50BQp8 zagHU1OhIY1ayt8Nrgn+dUV062RJP2B/2/WnYQLXsUjo/a4+L5UpVwDf6tRvsrmw N3nNIWz951MYqNYk6O/Mrc/ieMQHwIg/4Ld7Xb/qyjWDjnQqpyg5b84tjDQotY81 ziDludLNKW4t/SKkfxGLeIGmQPwMEwei0UlSRqw2M1sNHCAvamcQZbDh9rWah1wZ iJV1dUCg0mxgwpzQMvl9hLGiSTqBiFUSb/Hk7MOfzy1rO12nzMvK8C0/ZQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFAxcOYwARaTw/g+O3PIHleX46qowMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4MTJk M2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjgx MmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMyZTkwLzEvMEM1QzM5OEMwMDQ1 QTRGMEZFMEY4RURDRjIwNzk1RTVGOEVBQUEzMC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDL3Iw DQYJKoZIhvcNAQELBQADggEBAD2E8ZJT1Ys3c03zAAQWVZu23Cur806J7HHUxuPb 1rGK2YCfneGwfQy0yp5PjvpkwX9Aze7fbbw7VJmma8I2YWwIdq9TYQT5AOwg4rr2 0NJwEUhVJFA7Yf2weKoDlzudjJnrYZvjPLO6w8uIGBDKoXt/pvUhmlDrYTyll0ja JVe+S5rR9THkVnTlAaWfvMyyB5MVq2jzB7i3tTUEHTRcK6W/s+LN1diSQPBoXMUO vB9q3vUP76fczP4hturcO2ds7L4ptetlzN/8G/K4JChFbvSljllGVJK8bOsRukFn RPizK+7EL4SxBE+FryPaDV7HTSivLzddRlcm9/r4Uhd6c1A= -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:44 2026 by rpki-client