This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DU7kd6rb1vbH8sonqPohowxrNXw.cer File: DU7kd6rb1vbH8sonqPohowxrNXw.cer (raw, json) Hash identifier: m5iiNb+mqn3Ue8XSwRXdWVnyz0O+DbDlIAURV6zYGzk= Subject key identifier: 0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A66F24158BE59B88C30D538E987D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.199.5.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:66:f2:41:58:be:59:b8:8c:30:d5:38:e9:87:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d4ee477aadbd6f6c7f2ca27a8fa21a30c6b357c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:8d:f4:9d:ad:56:28:4f:e3:95:2f:64:de: 1a:57:c5:a4:1d:49:4a:c5:27:4b:c8:91:92:2a:fb: d6:53:ce:9d:0e:8b:d1:df:a7:9f:a4:36:a5:04:58: 17:7a:ff:c0:12:a6:52:2a:a3:88:30:47:03:f7:e9: 3e:a9:90:eb:1d:d2:83:75:58:77:41:5f:de:0d:58: 47:1f:43:fb:f6:0d:e3:d5:6e:f4:58:67:1d:02:62: c8:ab:8c:cd:1d:19:e2:ec:50:00:ae:a1:78:19:ac: 6a:63:dd:4d:b3:f0:04:a1:23:55:b4:3e:06:c0:71: 83:e9:d5:48:b4:b1:59:d5:40:ed:c4:13:f0:57:ff: 2b:b2:19:ca:19:77:4b:09:b3:ce:a3:4a:b1:24:82: 09:95:3c:94:41:8b:2b:45:ca:84:f8:4f:d0:39:f1: de:25:10:73:fe:3c:b9:ac:e1:4e:e1:a9:a4:52:26: f5:6b:b2:56:0e:3e:4c:92:41:f7:32:22:4f:94:dc: eb:7e:33:b3:1b:a9:dc:b7:72:43:d0:0d:d7:73:21: 18:32:2e:4d:0b:8a:31:0b:97:fd:4a:b1:1a:94:9d: ca:92:7f:b0:69:2e:15:2b:83:fa:05:17:56:51:0e: 3c:9d:3a:b5:1c:42:05:06:64:fa:10:74:ad:cf:ea: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4E:E4:77:AA:DB:D6:F6:C7:F2:CA:27:A8:FA:21:A3:0C:6B:35:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1adb3b-0597-40f4-95f1-08a6680ac842/1/DU7kd6rb1vbH8sonqPohowxrNXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.5.0/24 Signature Algorithm: sha256WithRSAEncryption 23:33:ca:be:e1:e7:ca:79:e4:aa:07:28:74:0f:26:37:45:ff: 00:0a:df:d0:1c:57:72:e4:46:2f:1f:bc:26:a6:b6:34:21:e9: 82:54:d2:f0:3b:08:a2:4c:b2:42:4e:d9:82:4f:a6:97:ed:d0: bf:2a:ea:e9:00:99:a2:f3:a8:c2:5c:33:9c:1b:cc:52:78:ec: 66:1f:b2:d9:f7:fe:d4:67:99:51:da:79:a5:a8:fc:56:54:91: 53:f9:76:ce:56:b8:c7:3a:e6:fc:cf:55:03:03:10:20:9f:7c: 19:f6:83:3f:59:7d:a0:30:7e:3f:b4:90:ea:b7:0b:24:e6:ca: 26:f9:c5:d5:77:1d:5d:be:35:36:00:e6:77:95:55:1e:ab:e2: 7c:8d:79:2f:6f:58:c7:db:9f:c7:da:dd:de:3a:04:8a:f7:a3: 3a:25:ea:f1:09:3b:4b:b1:0a:32:34:49:e6:df:75:b3:83:bf: 1d:23:91:37:12:06:b3:b0:0e:a4:2d:f3:d4:69:c0:2d:cc:2c: fd:d8:f7:1e:5e:d0:81:e0:e7:76:43:7a:21:0a:81:d6:97:ed: 1e:7d:2b:21:f8:8f:eb:9a:49:78:b6:75:6b:00:19:4f:fd:51: d7:8e:bc:24:73:9f:6e:79:f0:9c:4e:34:f1:13:68:3f:4b:cc: 95:ae:a9:6f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WmbyQVi+WbiMMNU46YfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDRlZTQ3N2FhZGJkNmY2YzdmMmNhMjdhOGZhMjFhMzBjNmIzNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbeN9J2tVihP45UvZN4aV8WkHUlK xSdLyJGSKvvWU86dDovR36efpDalBFgXev/AEqZSKqOIMEcD9+k+qZDrHdKDdVh3 QV/eDVhHH0P79g3j1W70WGcdAmLIq4zNHRni7FAArqF4GaxqY91Ns/AEoSNVtD4G wHGD6dVItLFZ1UDtxBPwV/8rshnKGXdLCbPOo0qxJIIJlTyUQYsrRcqE+E/QOfHe JRBz/jy5rOFO4amkUib1a7JWDj5MkkH3MiJPlNzrfjOzG6nct3JD0A3XcyEYMi5N C4oxC5f9SrEalJ3Kkn+waS4VK4P6BRdWUQ48nTq1HEIFBmT6EHStz+pZHwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFA1O5Heq29b2x/LKJ6j6IaMMazV8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzFhZGIz Yi0wNTk3LTQwZjQtOTVmMS0wOGE2NjgwYWM4NDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvMWFkYjNi LTA1OTctNDBmNC05NWYxLTA4YTY2ODBhYzg0Mi8xL0RVN2tkNnJiMXZiSDhzb25x UG9ob3d4ck5Ydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8cFMA0GCSqGSIb3DQEBCwUAA4IBAQAjM8q+ 4efKeeSqByh0DyY3Rf8ACt/QHFdy5EYvH7wmprY0IemCVNLwOwiiTLJCTtmCT6aX 7dC/KurpAJmi86jCXDOcG8xSeOxmH7LZ9/7UZ5lR2nmlqPxWVJFT+XbOVrjHOub8 z1UDAxAgn3wZ9oM/WX2gMH4/tJDqtwsk5som+cXVdx1dvjU2AOZ3lVUeq+J8jXkv b1jH25/H2t3eOgSK96M6JerxCTtLsQoyNEnm33Wzg78dI5E3EgazsA6kLfPUacAt zCz92PceXtCB4Od2Q3ohCoHWl+0efSsh+I/rmkl4tnVrABlP/VHXjrwkc59uefCc TjTxE2g/S8yVrqlv -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:40 2026 by rpki-client