This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer File: DTr3NGYY2GMOAUanZREkQ-DCyP8.cer (raw, json) Hash identifier: hBeTStq/mUXkPJrqXcizaxTZYUonQSY50btiguNs8i8= Subject key identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E385F676C7416E1BC7ADC8733300CD1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47585 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5f:67:6c:74:16:e1:bc:7a:dc:87:33:30:0c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d3af7346618d8630e0146a765112443e0c2c8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:23:01:3c:59:24:73:24:fc:12:f4:db:97: 0e:69:f8:a5:85:e7:f3:00:b1:68:4d:08:63:06:50: 3b:cd:b5:db:81:4c:a6:9f:2c:b2:14:f7:50:56:c9: cb:07:4f:d2:d5:97:e3:de:d3:01:4c:d7:1b:34:18: 68:92:f5:9f:7a:ba:72:7d:e3:60:a4:2d:67:d2:20: 0d:aa:2b:11:59:5a:d2:ae:24:20:07:d4:bd:fc:d2: ef:07:27:ef:f6:40:cb:a7:bc:c6:11:ad:3c:05:26: e6:58:2e:98:57:ac:31:6f:20:4b:9b:a4:1d:e0:ac: ae:e1:02:e0:91:5a:32:0d:14:7a:88:d8:08:35:14: 84:93:f0:ee:74:98:1c:4f:10:fb:93:d3:42:99:16: 92:3f:6b:27:4d:8d:a7:4c:6a:75:7f:c4:b8:70:11: 70:61:09:fe:96:8b:1d:a1:f5:57:65:77:71:39:16: 97:40:13:c0:c1:d3:5e:65:c1:a4:56:51:e4:27:91: ee:0a:a6:ec:2e:5a:42:2b:60:54:7d:71:26:8c:db: 36:b6:3b:86:d6:52:6a:20:32:ac:10:6e:7f:84:f2: c5:5f:56:1b:13:1e:13:51:8a:8a:d3:05:42:d5:8c: 98:eb:db:98:49:c7:9a:56:fd:fa:b7:28:18:cb:e7: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47585 Signature Algorithm: sha256WithRSAEncryption 61:a1:3f:ff:a9:3c:09:7f:67:00:5c:f6:95:43:7f:32:69:c6: e7:6c:d8:7a:03:6d:64:17:a0:d9:ba:95:b6:3c:fb:5b:ac:37: 58:31:9b:74:61:89:cf:4b:0b:07:35:72:5b:f4:5c:97:b9:3a: d8:4a:da:40:f3:91:19:a3:2e:cb:90:af:2d:e3:db:17:32:93: 34:e7:75:c7:53:7f:46:13:f2:54:1e:35:07:e7:ce:01:50:a9: 38:7c:58:73:9e:17:14:e8:fc:ff:4b:33:f9:6b:52:94:52:81: de:0d:5b:e8:d7:42:fe:5c:97:b3:fd:98:7d:63:58:e6:04:a8: fa:ce:23:f1:c7:f1:1e:29:0d:23:cd:d2:93:3f:ca:44:2b:d9: 2a:3e:63:f0:42:2f:06:9b:f3:72:69:3f:8f:13:e1:75:64:09: 31:8b:ba:37:7e:69:7a:b8:3f:55:57:aa:e8:5f:02:36:2d:7f: fa:f7:1d:d8:4a:e0:f0:d2:57:30:5a:82:ba:e2:30:45:c6:bd: 14:ab:48:f4:8e:87:ab:37:28:bb:48:f7:33:b7:b1:e8:c6:97: 44:0e:72:6f:ea:6a:98:45:06:92:ce:d2:c2:2d:ed:8e:5b:67: 65:dd:29:b4:5d:60:61:86:a1:c4:cc:d8:45:55:de:f1:4e:f5: a3:5e:31:f9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OF9nbHQW4bx63IczMAzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDNhZjczNDY2MThkODYzMGUwMTQ2YTc2NTExMjQ0M2UwYzJjOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMcjATxZJHMk/BL025cOafilhefz ALFoTQhjBlA7zbXbgUymnyyyFPdQVsnLB0/S1Zfj3tMBTNcbNBhokvWferpyfeNg pC1n0iANqisRWVrSriQgB9S9/NLvByfv9kDLp7zGEa08BSbmWC6YV6wxbyBLm6Qd 4Kyu4QLgkVoyDRR6iNgINRSEk/DudJgcTxD7k9NCmRaSP2snTY2nTGp1f8S4cBFw YQn+losdofVXZXdxORaXQBPAwdNeZcGkVlHkJ5HuCqbsLlpCK2BUfXEmjNs2tjuG 1lJqIDKsEG5/hPLFX1YbEx4TUYqK0wVC1YyY69uYSceaVv36tygYy+fSYwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFA069zRmGNhjDgFGp2URJEPgwsj/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzQ1NTcw Mi01ZDVkLTQ2NmItYjEzYS1mM2I5YjBiOGRkNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNDU1NzAy LTVkNWQtNDY2Yi1iMTNhLWYzYjliMGI4ZGQ3MC8xL0RUcjNOR1lZMkdNT0FVYW5a UkVrUS1EQ3lQOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC54TANBgkqhkiG9w0BAQsFAAOCAQEAYaE//6k8CX9n AFz2lUN/MmnG52zYegNtZBeg2bqVtjz7W6w3WDGbdGGJz0sLBzVyW/Rcl7k62Era QPORGaMuy5CvLePbFzKTNOd1x1N/RhPyVB41B+fOAVCpOHxYc54XFOj8/0sz+WtS lFKB3g1b6NdC/lyXs/2YfWNY5gSo+s4j8cfxHikNI83Skz/KRCvZKj5j8EIvBpvz cmk/jxPhdWQJMYu6N35perg/VVeq6F8CNi1/+vcd2Erg8NJXMFqCuuIwRca9FKtI 9I6Hqzcou0j3M7ex6MaXRA5yb+pqmEUGks7Swi3tjltnZd0ptF1gYYahxMzYRVXe 8U71o14x+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:14 2026 by rpki-client