This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer File: DODA1zCB11KRa-O25sCofDD35BQ.cer (raw, json) Hash identifier: HsF7np6Hv/AU0V2IA4DLaqfcrsMWtAytk929SpMm6Lc= Subject key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1412A66301FB5A1A1DDD519724DBC7C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 31 Jan 2026 12:41:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209693 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:14:12:a6:63:01:fb:5a:1a:1d:dd:51:97:24:db:c7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 31 12:41:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:5d:57:4e:ef:d2:47:36:15:87:50:c2:d4: 0c:81:3f:7f:c5:9b:de:cc:57:32:57:ce:3e:1e:32: 97:6a:c9:6d:15:f0:7f:b4:54:0d:5e:60:ec:bb:97: d0:cf:3b:35:c9:cd:76:3f:e4:f4:fc:af:15:52:b7: f2:b2:c8:32:53:b0:90:02:f3:07:f3:c5:ce:af:10: f7:f4:84:f0:9e:8a:dd:82:5e:c0:8a:e6:54:e4:3f: 5d:15:95:88:9c:07:02:bc:b4:24:09:5b:bf:36:77: 3f:62:e4:16:84:08:f2:17:29:8a:61:02:1d:37:9e: a4:04:1f:b7:c0:c2:93:76:00:de:8f:38:d3:4b:ee: ef:d0:ac:22:3e:9b:f7:58:5f:b4:30:59:5c:a5:47: 46:14:a2:ca:92:d2:68:3f:f6:29:34:2d:d5:e6:8d: a6:41:f5:8e:0c:b3:83:f7:26:d7:b4:46:c5:dc:82: 3c:06:8d:f0:ad:bc:ed:c7:7e:65:3d:64:c1:d4:3e: a8:be:8f:7e:83:88:fd:ac:03:16:80:95:16:a7:bf: 34:d5:08:57:49:38:08:1f:d5:eb:e2:ed:91:f4:c1: d3:94:7c:db:fd:5f:e4:93:92:07:4d:95:7a:4e:71: 7e:54:89:5d:aa:b8:00:e3:cd:2a:01:98:2f:98:45: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209693 Signature Algorithm: sha256WithRSAEncryption 8b:d7:14:04:a0:d7:6f:25:8a:f8:e9:da:ec:fe:1d:e4:00:88: d8:ca:89:3e:a4:6f:30:20:8b:55:b7:0e:15:e0:ee:25:d2:55: 9d:67:01:e5:cd:a1:f1:0c:c5:76:28:6e:bb:9b:34:79:f9:2e: 77:ab:6e:0a:0f:15:e9:1a:ea:33:4e:87:d3:7b:b9:03:05:8c: 40:16:80:73:99:25:1a:22:42:69:ee:f6:08:a0:54:7b:b0:3d: b6:81:69:d5:84:35:2f:f7:3e:d9:f4:ea:0b:da:eb:2b:2f:24: 94:8e:0c:0f:ad:ca:59:a9:b1:9d:20:48:14:98:b5:e1:c1:ae: eb:56:b0:fa:63:a6:1e:5b:f9:4b:a5:26:70:a6:ec:b3:e0:de: 75:fd:91:1b:ec:67:33:6d:b1:d8:9e:e2:da:8b:2b:5d:d6:3f: 8e:ef:a1:bf:7e:10:b9:bf:28:f8:a1:06:b2:64:5b:6c:00:cb: 37:a7:b9:0a:2d:ad:d7:0b:99:c7:e1:11:7c:7d:34:c7:12:83: 07:03:c8:0f:f0:d5:0b:4b:d0:ef:b2:18:d9:fe:b0:31:fa:78: 97:8d:40:48:47:b2:63:de:96:16:62:7c:98:8a:5c:6d:dd:0c: 3a:16:2b:1d:d9:74:40:c4:c5:28:b0:bb:6a:28:a9:0b:22:ba: f6:a7:80:2b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZwUEqZjAftaGh3dUZck28fEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTMxMTI0MTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2UwYzBkNzMwODFkNzUyOTE2YmUzYjZlNmMwYTg3YzMwZjdlNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvtdV07v0kc2FYdQwtQMgT9/xZve zFcyV84+HjKXasltFfB/tFQNXmDsu5fQzzs1yc12P+T0/K8VUrfyssgyU7CQAvMH 88XOrxD39ITwnordgl7AiuZU5D9dFZWInAcCvLQkCVu/Nnc/YuQWhAjyFymKYQId N56kBB+3wMKTdgDejzjTS+7v0KwiPpv3WF+0MFlcpUdGFKLKktJoP/YpNC3V5o2m QfWODLOD9ybXtEbF3II8Bo3wrbztx35lPWTB1D6ovo9+g4j9rAMWgJUWp7801QhX STgIH9Xr4u2R9MHTlHzb/V/kk5IHTZV6TnF+VIldqrgA480qAZgvmEUE0QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFAzgwNcwgddSkWvjtubAqHww9+QUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2FlMTM0 YS0yMGIyLTRkZTgtOGVlOS1mZWI4NDI3Y2ZlMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvYWUxMzRh LTIwYjItNGRlOC04ZWU5LWZlYjg0MjdjZmUyMS8xL0RPREExekNCMTFLUmEtTzI1 c0NvZkREMzVCUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMzHTANBgkqhkiG9w0BAQsFAAOCAQEAi9cUBKDXbyWK +Ona7P4d5ACI2MqJPqRvMCCLVbcOFeDuJdJVnWcB5c2h8QzFdihuu5s0efkud6tu Cg8V6RrqM06H03u5AwWMQBaAc5klGiJCae72CKBUe7A9toFp1YQ1L/c+2fTqC9rr Ky8klI4MD63KWamxnSBIFJi14cGu61aw+mOmHlv5S6UmcKbss+Dedf2RG+xnM22x 2J7i2osrXdY/ju+hv34Qub8o+KEGsmRbbADLN6e5Ci2t1wuZx+ERfH00xxKDBwPI D/DVC0vQ77IY2f6wMfp4l41ASEeyY96WFmJ8mIpcbd0MOhYrHdl0QMTFKLC7aiip CyK69qeAKw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:53 2026 by rpki-client