This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer (raw, json) Hash identifier: lDhOL/jpgPHmy4gJJDnbcPaM3OSiWAqkTO5OcxfBWzo= Subject key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E34BAE1FF174538DC7217115F4925 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208705 IP: 193.33.121.0/24 IP: 2a12:6dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:34:ba:e1:ff:17:45:38:dc:72:17:11:5f:49:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d333f72d9e294543825be63729f8034a4517090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:46:a7:4c:91:4f:3a:c5:7b:32:54:e0:5b: e0:70:50:98:35:fd:00:f9:18:10:4c:7d:8f:c2:96: 5e:b5:6b:3c:85:38:30:98:8d:94:a0:ee:89:79:55: b6:b3:00:57:b3:c3:ce:1d:c8:6d:86:ee:d9:02:1e: ce:27:d6:90:20:31:7b:2f:44:e0:17:47:15:00:a1: 1f:20:6a:07:cf:5c:b1:c3:2e:3e:bb:07:6e:cd:c9: d5:3d:99:3b:ac:ff:14:c5:f5:a0:06:dc:af:84:b0: 8a:87:23:7d:ac:26:48:9d:fe:34:f8:4f:70:e5:81: 20:1f:dc:e7:f0:13:f6:16:50:7a:17:a7:e9:68:ec: 7d:fc:58:c6:70:1a:09:a6:b5:cf:29:ea:63:45:f9: a3:c7:1e:a5:75:0e:78:d6:58:08:43:d1:58:fd:f2: 26:77:84:95:70:35:e9:b3:f9:56:41:45:ea:7f:11: 9d:7f:d4:74:21:95:a4:59:a5:a5:60:ea:57:e3:fb: ee:f4:52:96:e3:68:79:b8:70:9d:54:eb:38:59:1b: d7:7c:c6:dd:49:6f:47:78:0c:ef:ef:d6:e0:59:de: c2:dd:95:5a:80:9a:57:7b:b1:be:43:f4:ac:dc:9e: fd:2f:ce:88:5e:b1:a4:33:f5:03:35:52:97:c9:80: 2e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.121.0/24 IPv6: 2a12:6dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208705 Signature Algorithm: sha256WithRSAEncryption 79:67:24:b5:2a:20:36:ef:cb:52:b4:b4:ca:f6:b4:de:a1:74: f5:15:62:da:8d:6c:60:43:41:f7:52:ee:8d:b4:dd:4e:ac:7c: bd:fc:54:6c:a6:c7:eb:14:33:04:55:00:da:5d:99:11:eb:26: 5c:bc:24:18:2b:2b:2d:4a:3b:0f:c2:b3:5f:27:3e:88:b7:23: aa:8a:8e:2f:58:d2:2e:ab:97:71:57:42:61:ae:60:fd:f9:32: 54:bc:0a:fe:c6:9d:db:32:46:d7:5d:82:72:71:da:fd:46:ee: 33:71:5f:80:bb:f9:76:8f:e6:b7:5b:48:b5:7c:6c:18:b2:c4: 0d:f7:63:2a:78:bb:c8:52:ca:94:fb:cf:96:76:e9:6f:fc:a7: c1:1e:9e:6f:05:8f:27:36:a9:35:d6:37:52:0e:41:35:0d:be: 08:69:c1:30:67:1f:a8:39:09:08:18:d1:a6:3e:44:bc:d0:2c: b1:08:46:33:34:0d:9a:1a:31:4c:cc:71:7f:63:21:f7:41:9c: 49:31:57:ec:1b:b6:14:47:d3:97:3e:84:49:15:f1:71:e7:a9: ea:d8:29:28:8d:09:22:65:c7:f7:c4:0d:d3:fb:77:63:fd:dd: e8:58:6f:18:3a:7c:fc:e2:f4:29:8a:1a:6a:ff:ca:ad:b7:52: f6:61:ba:90 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fjS64f8XRTjcchcRX0klMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDMzM2Y3MmQ5ZTI5NDU0MzgyNWJlNjM3MjlmODAzNGE0NTE3MDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9tGp0yRTzrFezJU4FvgcFCYNf0A +RgQTH2PwpZetWs8hTgwmI2UoO6JeVW2swBXs8POHchthu7ZAh7OJ9aQIDF7L0Tg F0cVAKEfIGoHz1yxwy4+uwduzcnVPZk7rP8UxfWgBtyvhLCKhyN9rCZInf40+E9w 5YEgH9zn8BP2FlB6F6fpaOx9/FjGcBoJprXPKepjRfmjxx6ldQ541lgIQ9FY/fIm d4SVcDXps/lWQUXqfxGdf9R0IZWkWaWlYOpX4/vu9FKW42h5uHCdVOs4WRvXfMbd SW9HeAzv79bgWd7C3ZVagJpXe7G+Q/Ss3J79L86IXrGkM/UDNVKXyYAu9wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFA0zP3LZ4pRUOCW+Y3KfgDSkUXCQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzY1ZmVh Mi1hM2Q5LTQ5MmYtOGU0NC04OTRkZmE1ZGYwMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNjVmZWEy LWEzZDktNDkyZi04ZTQ0LTg5NGRmYTVkZjAxNy8xL0RUTV9jdG5pbEZRNEpiNWpj cC1BTktSUmNKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSF5MA0EAgACMAcDBQMqEm3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvQTANBgkqhkiG9w0BAQsFAAOCAQEAeWcktSogNu/L UrS0yva03qF09RVi2o1sYENB91LujbTdTqx8vfxUbKbH6xQzBFUA2l2ZEesmXLwk GCsrLUo7D8KzXyc+iLcjqoqOL1jSLquXcVdCYa5g/fkyVLwK/sad2zJG112CcnHa /UbuM3FfgLv5do/mt1tItXxsGLLEDfdjKni7yFLKlPvPlnbpb/ynwR6ebwWPJzap NdY3Ug5BNQ2+CGnBMGcfqDkJCBjRpj5EvNAssQhGMzQNmhoxTMxxf2Mh90GcSTFX 7Bu2FEfTlz6ESRXxceep6tgpKI0JImXH98QN0/t3Y/3d6FhvGDp8/OL0KYoaav/K rbdS9mG6kA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:17 2026 by rpki-client