This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer File: DM6IMtApSYAfEZjp0TuxjtWDLQw.cer (raw, json) Hash identifier: OhLUNwIfntyaY4+Wk0Nq8RxBR5TQRYqasGWUa4UyS0E= Subject key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B362D4407866F7AF311F0674508027D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198641 IP: 37.205.40.0/21 IP: 185.58.228.0/22 IP: 2a02:4220::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2d:44:07:86:6f:7a:f3:11:f0:67:45:08:02:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:df:66:24:9e:4c:f2:64:7b:1e:2d:4b:c5: 91:0a:d5:3f:21:3f:51:65:d7:f1:9d:25:1e:13:55: 8f:14:b6:26:7d:b5:76:5b:d8:31:fe:db:3d:44:12: f5:be:c5:e2:76:ed:4e:ec:0c:34:b5:fe:db:6f:6e: 4c:fd:9f:4b:fd:c9:95:7f:6e:37:18:96:3c:88:bf: ba:1c:05:98:dd:1c:e5:af:bb:23:b6:53:69:7e:f3: 33:34:c2:32:ae:fa:87:ce:c9:6e:1b:34:03:58:5d: ab:2b:c5:9a:fd:b9:2a:5f:79:80:e8:0c:e8:66:44: 18:d1:42:27:f7:ba:fa:46:4e:db:b4:96:06:92:8f: 7b:cf:9c:8e:02:8d:1d:6f:d4:ae:3f:ed:49:0c:91: e4:89:cc:be:c4:f9:0d:17:03:22:65:f8:5e:f2:e2: 24:13:ba:84:a9:be:60:13:d5:c6:7f:be:e3:5e:3b: 65:b8:dd:2b:bc:d4:18:77:e0:d8:a0:a7:eb:91:2b: 6d:f9:a9:73:01:af:69:fd:b1:76:21:b2:cb:52:29: ff:ee:50:c8:47:e9:21:fb:16:d9:8f:34:73:66:f8: b2:20:ea:96:73:e5:d9:52:b3:c7:58:3f:99:57:7c: 9d:4f:68:c1:90:59:d1:22:4e:6d:b4:56:eb:51:f4: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.205.40.0/21 185.58.228.0/22 IPv6: 2a02:4220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198641 Signature Algorithm: sha256WithRSAEncryption 65:f7:56:e6:aa:cc:56:b7:c3:90:b9:f6:c5:bc:a7:c4:e6:9e: 6a:ee:bd:62:97:d4:29:7e:f9:02:96:e5:0a:97:8a:64:1a:89: c2:d9:86:a9:7c:87:e5:0e:b5:12:e3:b2:bd:5d:aa:a6:d5:da: d0:9e:ee:fb:a1:d4:b5:ca:e8:e7:c4:17:7f:52:1e:d1:50:03: 80:37:ae:61:8b:14:4f:e8:cb:16:e8:90:51:68:4c:58:0d:61: 15:c1:2c:70:bc:99:25:52:38:1e:49:23:7b:19:66:86:83:93: 32:74:ed:5c:cd:42:57:d0:b7:32:4c:3d:5d:d5:e7:43:2c:ec: 2c:52:ce:d6:a8:31:ee:37:61:69:a8:3d:64:86:27:9a:e2:f9: 5a:73:d9:c5:26:27:3b:0b:1a:3b:08:f0:94:15:08:ab:19:83: 69:37:f6:01:2a:50:80:18:a7:93:21:68:cf:b2:5a:bf:0b:ae: 1f:ec:d2:b1:8a:cc:d4:8b:e4:8f:36:e6:f2:e0:4c:ea:b8:5e: 2a:24:40:6b:de:69:5d:95:82:d3:58:4f:f7:3e:ab:3c:40:ae: 19:cc:7a:a8:b8:6b:f3:b9:60:be:d0:0f:af:95:a9:5d:ac:d0: 1d:7b:db:31:ab:87:93:cb:45:4f:62:15:37:02:d3:1d:a3:e8: 01:07:08:21 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7Ni1EB4ZvevMR8GdFCAJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2NlODgzMmQwMjk0OTgwMWYxMTk4ZTlkMTNiYjE4ZWQ1ODMyZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1PfZiSeTPJkex4tS8WRCtU/IT9R ZdfxnSUeE1WPFLYmfbV2W9gx/ts9RBL1vsXidu1O7Aw0tf7bb25M/Z9L/cmVf243 GJY8iL+6HAWY3Rzlr7sjtlNpfvMzNMIyrvqHzsluGzQDWF2rK8Wa/bkqX3mA6Azo ZkQY0UIn97r6Rk7btJYGko97z5yOAo0db9SuP+1JDJHkicy+xPkNFwMiZfhe8uIk E7qEqb5gE9XGf77jXjtluN0rvNQYd+DYoKfrkStt+alzAa9p/bF2IbLLUin/7lDI R+kh+xbZjzRzZviyIOqWc+XZUrPHWD+ZV3ydT2jBkFnRIk5ttFbrUfQ+cwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAzOiDLQKUmAHxGY6dE7sY7Vgy0MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzc3N2Mw YS1jYTQ0LTQzZWMtYWI3OS01ZTBhZmVjMTM2YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvNzc3YzBh LWNhNDQtNDNlYy1hYjc5LTVlMGFmZWMxMzZiMS8xL0RNNklNdEFwU1lBZkVaanAw VHV4anRXRExRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJc0oAwQCuTrkMA0EAgACMAcDBQAqAkIgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMH8TANBgkqhkiG9w0BAQsFAAOCAQEAZfdW 5qrMVrfDkLn2xbynxOaeau69YpfUKX75ApblCpeKZBqJwtmGqXyH5Q61EuOyvV2q ptXa0J7u+6HUtcro58QXf1Ie0VADgDeuYYsUT+jLFuiQUWhMWA1hFcEscLyZJVI4 HkkjexlmhoOTMnTtXM1CV9C3Mkw9XdXnQyzsLFLO1qgx7jdhaag9ZIYnmuL5WnPZ xSYnOwsaOwjwlBUIqxmDaTf2ASpQgBinkyFoz7JavwuuH+zSsYrM1Ivkjzbm8uBM 6rheKiRAa95pXZWC01hP9z6rPECuGcx6qLhr87lgvtAPr5WpXazQHXvbMauHk8tF T2IVNwLTHaPoAQcIIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:22 2026 by rpki-client