This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer File: DJ8RVKmhXVqDqamBenJL_FOdtZY.cer (raw, json) Hash identifier: K1SkGnLO0mPoglFgalXXLi/PJ1I6P3XC4e51Yi6bO9Q= Subject key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA063A0319219E4267DD65390BE6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25415 IP: 212.51.0.0/19 IP: 2a01:780::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a0:63:a0:31:92:19:e4:26:7d:d6:53:90:be:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:3b:a7:c9:62:0d:e0:71:f8:bb:69:e5:dc: 53:9f:ea:24:d4:01:9a:f3:52:74:7f:8a:d1:6b:a8: 64:97:c1:01:41:2d:66:94:60:41:90:5e:f4:f2:e3: f4:68:d2:75:be:76:fa:68:ce:7d:0b:ce:2c:86:38: 17:c8:25:31:73:a1:92:38:d9:f2:08:b4:31:08:71: b2:77:1d:fc:8e:2c:69:9b:80:72:3f:69:f1:c8:5c: 77:57:17:83:38:f4:4e:93:6a:b9:38:32:9b:d8:56: c7:37:a2:eb:cb:41:31:6e:1a:fd:b1:36:8d:fe:58: b4:38:d0:4c:d4:e0:28:f5:42:75:35:14:a8:7d:54: 28:15:59:54:d1:60:c0:14:fd:56:41:0c:d6:12:23: a3:08:2e:eb:7f:36:33:63:f2:72:0f:64:40:3b:56: 50:a4:25:d3:bb:4c:71:f0:9e:e4:8a:99:b8:70:7b: 2b:6e:72:e2:78:22:a0:a0:0d:b5:a5:89:2f:f6:81: 7a:00:77:4b:ee:9f:39:0a:40:06:f6:27:57:e1:6d: c3:48:e6:a4:ce:20:60:e7:96:88:e9:a9:39:fe:4d: d7:24:df:4a:fa:46:37:35:56:8c:d7:3a:d0:22:e3: bc:b1:2b:75:19:95:35:e2:17:56:2d:3e:cb:35:f3: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.51.0.0/19 IPv6: 2a01:780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25415 Signature Algorithm: sha256WithRSAEncryption 64:a0:b8:c7:44:69:d3:e3:41:18:e3:48:dc:76:3c:68:a0:7e: 51:43:9c:15:8b:a9:aa:4c:64:cf:2c:b9:e1:f1:05:12:05:d6: e4:7d:a6:ee:49:73:05:40:15:6a:68:06:65:17:20:23:83:f1: 74:86:c2:79:a4:3f:45:ce:c2:3d:10:64:de:51:8d:4f:e8:79: 2a:01:00:49:4e:01:c5:2c:b4:fc:2e:d8:9d:f4:de:53:3b:d4: 13:54:2d:f5:88:60:5e:12:88:12:ce:90:6b:1a:cf:24:2a:62: b1:24:05:1a:60:44:fd:8d:ea:ce:0f:42:6e:da:ae:09:14:22: 3d:5d:64:c9:00:df:f9:94:57:39:9c:8e:da:60:88:e6:15:53: 34:02:5f:82:b7:66:cb:09:ae:39:f2:44:c8:33:5e:6c:89:1f: 99:7b:da:d7:b0:7b:42:99:43:ca:00:61:92:89:e1:7d:e2:e0: 4c:c6:9d:5f:7c:d8:2c:52:c0:df:7d:1c:c4:89:82:c0:c2:8e: aa:46:84:ba:26:09:95:d2:4c:75:17:be:7a:0b:27:08:20:cf: 90:d1:17:4e:2f:b6:30:f8:73:2e:58:2d:b6:06:90:cb:0a:91: 5c:64:7c:51:9e:af:6d:0b:47:f2:76:aa:79:0b:45:c7:97:9e: 6f:ea:0d:d9 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt9yqBjoDGSGeQmfdZTkL5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzlmMTE1NGE5YTE1ZDVhODNhOWE5ODE3YTcyNGJmYzUzOWRiNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5o7p8liDeBx+Ltp5dxTn+ok1AGa 81J0f4rRa6hkl8EBQS1mlGBBkF708uP0aNJ1vnb6aM59C84shjgXyCUxc6GSONny CLQxCHGydx38jixpm4ByP2nxyFx3VxeDOPROk2q5ODKb2FbHN6Lry0Exbhr9sTaN /li0ONBM1OAo9UJ1NRSofVQoFVlU0WDAFP1WQQzWEiOjCC7rfzYzY/JyD2RAO1ZQ pCXTu0xx8J7kipm4cHsrbnLieCKgoA21pYkv9oF6AHdL7p85CkAG9idX4W3DSOak ziBg55aI6ak5/k3XJN9K+kY3NVaM1zrQIuO8sSt1GZU14hdWLT7LNfOj6wIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFAyfEVSpoV1ag6mpgXpyS/xTnbWWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2QwZDNk Ny0xYzM1LTQ3Y2ItODUwNC1iOWRiYTYzOWIxYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZDBkM2Q3 LTFjMzUtNDdjYi04NTA0LWI5ZGJhNjM5YjFiMS8xL0RKOFJWS21oWFZxRHFhbUJl bkpMX0ZPZHRaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQF1DMAMA0EAgACMAcDBQAqAQeAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmNHMA0GCSqGSIb3DQEBCwUAA4IBAQBkoLjHRGnT40EY 40jcdjxooH5RQ5wVi6mqTGTPLLnh8QUSBdbkfabuSXMFQBVqaAZlFyAjg/F0hsJ5 pD9FzsI9EGTeUY1P6HkqAQBJTgHFLLT8Ltid9N5TO9QTVC31iGBeEogSzpBrGs8k KmKxJAUaYET9jerOD0Ju2q4JFCI9XWTJAN/5lFc5nI7aYIjmFVM0Al+Ct2bLCa45 8kTIM15siR+Ze9rXsHtCmUPKAGGSieF94uBMxp1ffNgsUsDffRzEiYLAwo6qRoS6 JgmV0kx1F756CycIIM+Q0RdOL7Yw+HMuWC22BpDLCpFcZHxRnq9tC0fydqp5C0XH l55v6g3Z -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:59 2026 by rpki-client