This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer File: DIquGJxjzrVkPLCAMnvKo7Dvilk.cer (raw, json) Hash identifier: GhbwlZM+xli1dFBCkYlxoISL/0wEE7/T0c4+Oj1nez8= Subject key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D22E687D0B3733D7B6DED671E133A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201754 IP: 91.198.56.0/24 IP: 193.42.218.0/24 IP: 2001:678:fec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:22:e6:87:d0:b3:73:3d:7b:6d:ed:67:1e:13:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:f8:48:5f:b2:78:f3:0c:d0:a5:23:80:13: 76:34:0d:4b:0f:4a:2a:2b:d0:a0:b1:24:32:27:1f: c1:0a:25:1d:c2:02:49:c5:28:39:43:9f:92:7a:21: 59:8d:6d:f0:73:32:8a:8b:5a:58:b0:8f:d1:db:76: b5:d0:96:18:88:30:44:9a:04:93:c6:4d:79:97:4f: 89:85:ca:b3:2e:98:50:43:e3:48:b9:eb:89:db:a2: 4e:95:29:6b:5e:d3:36:40:8f:05:aa:6d:8a:f7:7c: cb:22:08:ca:c4:09:9e:4f:26:77:7d:b4:4c:da:7c: ee:38:57:18:84:7a:de:d1:24:31:ac:28:c2:2b:55: 16:fc:9c:6e:fd:ec:e3:cf:98:48:11:cb:9b:e7:26: 3c:75:f9:a3:95:8d:83:72:6d:79:5e:4f:88:02:70: 98:f7:a1:1a:dd:63:47:16:84:55:35:c6:23:15:1e: 96:4c:0d:52:9f:ed:d8:7d:b6:41:e5:3c:70:70:16: 26:fb:a0:c8:5f:db:8f:46:b9:dd:f7:aa:c4:37:9c: bd:80:61:1b:5f:b1:c3:f8:be:2a:c5:79:bc:01:41: 7d:fb:58:10:28:1b:72:e9:1b:a9:82:35:66:8b:92: 8c:38:9d:00:4d:d1:1b:03:67:c0:cc:df:21:ba:5c: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.56.0/24 193.42.218.0/24 IPv6: 2001:678:fec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201754 Signature Algorithm: sha256WithRSAEncryption 2a:f1:4b:40:16:a3:72:79:bc:8f:a0:ad:ef:c1:30:fd:5f:82: 94:79:2a:59:02:a6:70:3c:f8:9b:a2:bd:3f:99:a9:48:a9:e6: f8:2f:80:2f:24:ee:73:5f:d5:d7:28:fa:9e:cc:15:c0:2d:10: e8:c8:af:cd:9c:fe:1e:e1:2c:de:8b:4d:3d:c6:4a:79:65:5e: 7a:86:b7:7e:9c:76:29:70:3c:ca:58:2c:d7:5d:75:24:e5:fa: c6:80:99:3a:8b:a3:58:6c:ee:03:1c:a9:39:f6:e5:42:37:cb: d0:73:61:8a:c2:49:a2:ed:5e:a3:30:b8:24:c6:f2:90:88:23: 4a:d5:1b:5b:b1:76:35:22:0d:52:55:cd:6f:43:e0:e8:9c:0b: 43:f9:cf:70:1d:42:be:dc:9c:00:d8:1a:31:a7:28:ce:d9:e3: 19:fc:a0:35:81:30:9c:43:68:24:5a:79:4f:6f:37:94:e5:52: 34:5d:bf:69:c3:f9:16:37:89:29:7e:4d:a1:51:1b:71:a4:db: c6:c0:13:c5:58:15:48:7a:3a:b0:4a:77:3d:62:c5:1c:c3:ba: 4c:24:0b:7d:47:b4:5a:49:dd:cc:b9:1a:a4:b6:56:b9:6d:61: 9e:2b:8a:f1:ec:ff:84:6b:b9:ef:b4:a7:44:ea:4e:87:86:1f: ba:b7:47:03 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt9XSLmh9Czcz17be1nHhM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzhhYWUxODljNjNjZWI1NjQzY2IwODAzMjdiY2FhM2IwZWY4YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rf4SF+yePMM0KUjgBN2NA1LD0oq K9CgsSQyJx/BCiUdwgJJxSg5Q5+SeiFZjW3wczKKi1pYsI/R23a10JYYiDBEmgST xk15l0+JhcqzLphQQ+NIueuJ26JOlSlrXtM2QI8Fqm2K93zLIgjKxAmeTyZ3fbRM 2nzuOFcYhHre0SQxrCjCK1UW/Jxu/ezjz5hIEcub5yY8dfmjlY2Dcm15Xk+IAnCY 96Ea3WNHFoRVNcYjFR6WTA1Sn+3YfbZB5TxwcBYm+6DIX9uPRrnd96rEN5y9gGEb X7HD+L4qxXm8AUF9+1gQKBty6RupgjVmi5KMOJ0ATdEbA2fAzN8hulwTawIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFAyKrhicY861ZDywgDJ7yqOw74pZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzUwMTVm Ni0wYmQwLTQ5ZjktYjg1NC1iNmJhODZjZjMxZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNTAxNWY2 LTBiZDAtNDlmOS1iODU0LWI2YmE4NmNmMzFmOS8xL0RJcXVHSnhqenJWa1BMQ0FN bnZLbzdEdmlsay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAW8Y4AwQAwSraMA8EAgACMAkDBwAgAQZ4D+ww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxQaMA0GCSqGSIb3DQEBCwUAA4IBAQAq 8UtAFqNyebyPoK3vwTD9X4KUeSpZAqZwPPibor0/malIqeb4L4AvJO5zX9XXKPqe zBXALRDoyK/NnP4e4Szei009xkp5ZV56hrd+nHYpcDzKWCzXXXUk5frGgJk6i6NY bO4DHKk59uVCN8vQc2GKwkmi7V6jMLgkxvKQiCNK1RtbsXY1Ig1SVc1vQ+DonAtD +c9wHUK+3JwA2BoxpyjO2eMZ/KA1gTCcQ2gkWnlPbzeU5VI0Xb9pw/kWN4kpfk2h URtxpNvGwBPFWBVIejqwSnc9YsUcw7pMJAt9R7RaSd3MuRqktla5bWGeK4rx7P+E a7nvtKdE6k6Hhh+6t0cD -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:35 2026 by rpki-client