This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer File: DSXP1Saq1ypMj0cz-soPTbf592c.cer (raw, json) Hash identifier: KJWIHty4sO2dMXsS3O14nFiZi7hT0bI2jejEA1OlPE0= Subject key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D5CD956E5C523B4C91DFF4C85848 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205079 IP: 2001:678:10ec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d5:cd:95:6e:5c:52:3b:4c:91:df:f4:c8:58:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:81:5c:9a:e9:09:14:9e:66:76:81:fe:4c:6e: 18:99:53:d2:09:5d:68:36:5e:0e:20:70:a8:aa:87: d2:68:19:4f:41:11:89:6d:2b:83:42:a1:30:47:d1: bc:9d:f6:b8:6d:08:e6:14:08:a9:c7:5f:2b:4c:9a: 0d:ce:36:12:d5:32:39:4f:f5:d2:3a:e9:ff:d7:41: 53:20:bc:5a:45:d3:fc:ec:9b:b3:16:90:a3:9d:3e: 64:13:6c:ad:51:4d:7c:70:20:35:ff:5c:09:40:fb: 00:97:c2:74:0d:91:7e:27:ba:87:90:59:01:99:66: 1f:09:9c:1a:5d:73:88:50:cf:fa:81:29:be:fd:ea: 5c:0d:99:38:0d:a6:37:b3:80:b6:5e:31:92:98:89: cd:95:58:29:1f:98:18:bf:4a:4a:c8:eb:ae:68:d3: 86:ea:4a:dd:9d:f1:4c:2b:7e:4b:fe:bd:d5:c8:9b: 57:2a:99:c7:f7:85:9f:36:60:ce:bd:87:a8:24:55: d8:9f:aa:02:1a:20:99:f5:2d:8c:47:49:51:1e:2e: 0b:fe:5f:5f:fa:29:7c:16:8d:f1:a4:41:93:f7:28: f2:75:6a:e7:d2:66:c1:bc:e0:f5:d9:63:b4:83:14: 37:26:51:0d:90:f1:bc:19:76:fa:d2:a8:98:2c:c6: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:10ec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205079 Signature Algorithm: sha256WithRSAEncryption ae:76:e6:d8:63:fa:87:98:e0:ea:cf:d5:de:53:0b:32:11:85: 9b:34:ed:c4:57:72:e0:ec:f0:bd:98:ba:a6:1f:87:df:fb:3a: 64:9e:1e:ed:b6:86:ae:84:6f:4a:f9:06:98:52:43:02:46:8d: 73:4f:b2:98:be:de:18:d5:49:fd:2c:92:b5:32:e5:f3:45:30: d7:c5:81:0b:30:4b:e4:f9:8a:b3:0c:3f:93:9c:44:ab:9d:bb: e2:2a:3a:dd:32:e1:39:d2:7d:e4:81:e0:53:92:7b:a5:0e:13: 2b:d8:54:00:31:c1:a3:e5:ee:8e:ba:d7:cf:07:db:a4:10:8f: 66:93:aa:fa:99:3e:97:a0:d5:24:00:62:3a:5b:53:09:26:b6: 1f:28:2e:10:0d:a9:64:39:ae:21:16:ae:4e:6c:17:b3:f5:41: 4d:15:78:a4:90:10:00:01:f9:d9:e1:14:ae:63:bb:82:3a:51: 98:5f:b7:77:74:0f:bb:97:73:e8:12:7a:3f:2a:e8:b3:34:41: c9:7d:b1:1e:0f:19:27:3c:79:a1:f4:ba:a5:70:08:73:82:ad: d7:5e:71:10:69:81:ae:40:6d:32:5f:23:34:dd:90:80:da:cc: 6b:98:a3:43:59:b4:3f:b5:bd:b0:f6:c9:aa:62:cb:58:5e:93: 32:11:7a:da -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5ENXNlW5cUjtMkd/0yFhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDI1Y2ZkNTI2YWFkNzJhNGM4ZjQ3MzNmYWNhMGY0ZGI3ZjlmNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oFcmukJFJ5mdoH+TG4YmVPSCV1o Nl4OIHCoqofSaBlPQRGJbSuDQqEwR9G8nfa4bQjmFAipx18rTJoNzjYS1TI5T/XS Oun/10FTILxaRdP87JuzFpCjnT5kE2ytUU18cCA1/1wJQPsAl8J0DZF+J7qHkFkB mWYfCZwaXXOIUM/6gSm+/epcDZk4DaY3s4C2XjGSmInNlVgpH5gYv0pKyOuuaNOG 6krdnfFMK35L/r3VyJtXKpnH94WfNmDOvYeoJFXYn6oCGiCZ9S2MR0lRHi4L/l9f +il8Fo3xpEGT9yjydWrn0mbBvOD12WO0gxQ3JlENkPG8GXb60qiYLMYZgwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFA0lz9UmqtcqTI9HM/rKD023+fdnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzk2Mjgy Zi01YTI5LTRmZGQtYWRmOS1kMjEwODM4YTQ2ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvOTYyODJm LTVhMjktNGZkZC1hZGY5LWQyMTA4MzhhNDZlNi8xL0RTWFAxU2FxMXlwTWowY3ot c29QVGJmNTkyYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBDsMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMhFzANBgkqhkiG9w0BAQsFAAOCAQEArnbm2GP6h5jg6s/V3lMLMhGFmzTt xFdy4OzwvZi6ph+H3/s6ZJ4e7baGroRvSvkGmFJDAkaNc0+ymL7eGNVJ/SyStTLl 80Uw18WBCzBL5PmKsww/k5xEq5274io63TLhOdJ95IHgU5J7pQ4TK9hUADHBo+Xu jrrXzwfbpBCPZpOq+pk+l6DVJABiOltTCSa2HyguEA2pZDmuIRauTmwXs/VBTRV4 pJAQAAH52eEUrmO7gjpRmF+3d3QPu5dz6BJ6PyroszRByX2xHg8ZJzx5ofS6pXAI c4Kt115xEGmBrkBtMl8jNN2QgNrMa5ijQ1m0P7W9sPbJqmLLWF6TMhF62g== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:38 2026 by rpki-client