This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer (raw, json) Hash identifier: 6xEN+LMdChThpRRG+7vPmNPiHcOFpUZ2agzrA1zaO8c= Subject key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78344A0192ED8AA520BDFFADE86DD412 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.253.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4a:01:92:ed:8a:a5:20:bd:ff:ad:e8:6d:d4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c5cf70730512aefa70307662cf59288e8cd264c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c4:5e:77:a1:41:17:ac:31:b6:b6:3b:11:0e: 4e:41:52:c2:f1:41:3b:dd:b5:41:c0:cb:4a:68:58: d9:43:bf:e8:23:ad:f7:a9:7e:bc:c8:84:5a:d3:37: 6f:34:92:c1:9b:3b:99:85:81:65:d7:b9:05:1f:8c: f2:99:46:29:26:21:3a:41:f2:3e:84:cd:7a:07:ce: fd:7d:68:4e:e0:bd:83:9d:89:ec:bb:e7:ad:70:54: d7:be:7c:0d:6a:f5:d9:9e:18:75:be:88:41:aa:89: 40:b5:22:f9:d0:fc:b3:59:d2:02:f5:c3:79:d0:ba: 64:83:7a:65:1b:b4:0c:26:2b:0e:13:c5:51:7d:7f: fa:1c:83:8a:d7:ca:bb:2a:61:d4:6b:82:7b:8d:ee: dd:72:d5:c2:41:6d:f1:65:5e:00:1a:7a:8f:ec:41: 38:e3:5c:e3:c7:20:d7:66:87:08:95:0f:87:c9:35: b8:5a:4c:38:04:6c:64:4b:57:79:b5:4a:b3:27:0a: 0c:fa:56:43:92:da:91:03:69:12:45:de:ff:f5:b0: 54:4f:2c:40:3f:e8:f7:b0:90:84:39:36:50:0a:d8: 06:31:a6:a7:7a:93:43:7d:2b:62:12:40:4a:76:2e: f5:93:6b:d0:c5:c1:69:bf:2d:2c:c4:33:73:21:30: 58:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.253.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:a4:bc:49:43:01:c6:61:04:ae:a2:d3:83:9c:4c:2b:2a:7a: 85:b4:2e:aa:39:8b:33:ed:be:d7:bf:44:23:6a:12:b0:6d:c9: 35:82:cc:22:63:62:22:3c:11:c6:08:01:01:4b:12:8d:9f:8a: 5a:9c:e8:d7:43:d7:09:47:4c:67:9f:08:56:57:94:8f:64:cc: fb:5f:6f:ad:16:02:b7:63:c7:4a:ff:e5:c0:f1:d3:71:51:32: f1:15:2b:7d:1f:ea:87:bb:27:29:20:25:8c:8d:92:bc:d5:1b: 41:11:d2:7d:64:74:8b:53:79:b7:83:48:61:8b:a5:47:67:3a: 05:3f:82:d9:2c:07:c1:f4:6b:73:9d:cb:84:63:27:23:f9:ff: 5c:97:76:79:0e:0d:1c:14:86:d3:37:10:70:33:f9:0d:96:c1: b8:83:a4:a1:3f:2a:7d:4e:05:84:8d:27:ae:85:33:95:14:58: fb:ca:51:4a:59:05:d0:a5:c1:c9:59:0f:48:59:d6:c6:73:6c: f2:94:48:37:9c:ee:3e:5c:1d:88:cf:64:5c:79:54:65:59:d7: a2:16:7a:f1:e0:10:ff:9e:4d:87:72:db:1b:8a:8d:c5:63:20: eb:d1:7e:0d:b7:72:89:a6:e5:56:e4:96:6b:a4:9d:db:4d:30: 36:2a:92:0a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NEoBku2KpSC9/63obdQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzVjZjcwNzMwNTEyYWVmYTcwMzA3NjYyY2Y1OTI4OGU4Y2QyNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysRed6FBF6wxtrY7EQ5OQVLC8UE7 3bVBwMtKaFjZQ7/oI633qX68yIRa0zdvNJLBmzuZhYFl17kFH4zymUYpJiE6QfI+ hM16B879fWhO4L2DnYnsu+etcFTXvnwNavXZnhh1vohBqolAtSL50PyzWdIC9cN5 0Lpkg3plG7QMJisOE8VRfX/6HIOK18q7KmHUa4J7je7dctXCQW3xZV4AGnqP7EE4 41zjxyDXZocIlQ+HyTW4Wkw4BGxkS1d5tUqzJwoM+lZDktqRA2kSRd7/9bBUTyxA P+j3sJCEOTZQCtgGMaanepNDfStiEkBKdi71k2vQxcFpvy0sxDNzITBYJwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAxc9wcwUSrvpwMHZiz1kojozSZMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzQ0MDIx Ny1jNWFmLTQ0YWMtOTVkMy1hZGZjNzJlZjBkZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNDQwMjE3 LWM1YWYtNDRhYy05NWQzLWFkZmM3MmVmMGRmYS8xL0RGejNCekJSS3UtbkF3ZG1M UFdTaU9qTkprdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9H9MA0GCSqGSIb3DQEBCwUAA4IBAQAepLxJ QwHGYQSuotODnEwrKnqFtC6qOYsz7b7Xv0QjahKwbck1gswiY2IiPBHGCAEBSxKN n4panOjXQ9cJR0xnnwhWV5SPZMz7X2+tFgK3Y8dK/+XA8dNxUTLxFSt9H+qHuycp ICWMjZK81RtBEdJ9ZHSLU3m3g0hhi6VHZzoFP4LZLAfB9GtzncuEYycj+f9cl3Z5 Dg0cFIbTNxBwM/kNlsG4g6ShPyp9TgWEjSeuhTOVFFj7ylFKWQXQpcHJWQ9IWdbG c2zylEg3nO4+XB2Iz2RceVRlWdeiFnrx4BD/nk2Hctsbio3FYyDr0X4Nt3KJpuVW 5JZrpJ3bTTA2KpIK -----END CERTIFICATE-----Generated at Mon Feb 9 22:34:58 2026 by rpki-client