This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer File: DUHQpubfLhjCVnMjaNbnaCiTExA.cer (raw, json) Hash identifier: KL8b0rynXHSkoFSkxmdTrl6Sqx5l5pl3XZRav+lwQKY= Subject key identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9504DAD73D09CFE2B034A10EA0C3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51546 IP: 88.218.20.0/22 IP: 185.127.228.0/22 IP: 185.176.96.0/22 IP: 185.181.44.0/22 IP: 2a03:9920::/32 IP: 2a09:9680::/29 IP: 2a0a:f80::/29 IP: 2a0a:c080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:50:4d:ad:73:d0:9c:fe:2b:03:4a:10:ea:0c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d41d0a6e6df2e18c256732368d6e76828931310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:e9:49:a4:1c:fa:93:67:16:d0:51:6d:ae: 13:df:10:d0:3b:38:0c:3c:0b:12:20:ad:01:20:a3: 50:de:e9:4a:32:22:05:16:16:dd:26:3f:12:af:56: 38:d6:17:d8:06:02:8c:b3:eb:c2:c3:07:71:4f:11: a7:bc:11:4e:33:c0:fb:d4:10:d8:a8:66:28:60:e6: 03:57:1c:a4:54:7b:c6:5c:72:88:c2:c0:ca:fa:82: 02:bb:f8:b6:08:f2:cb:e7:61:92:85:da:a8:5d:2b: 78:b9:f4:9d:a9:5c:64:ce:c8:6f:2f:ce:40:73:3a: ec:74:2f:72:12:48:ad:74:bd:f0:4b:a0:2a:be:f3: 75:31:05:65:93:43:fc:b8:36:ea:8e:a7:89:ee:3c: 2b:8e:7d:ca:05:68:33:ec:55:13:9b:87:ef:a9:c6: d5:3d:0c:40:4a:25:7d:fb:9a:45:a9:56:96:f8:c4: 8c:55:7a:b8:11:2d:8e:fa:62:91:b1:e5:ac:59:70: 28:fb:cc:5b:6f:e9:f6:7c:25:ea:8d:9e:a9:68:c3: ed:7c:79:18:e3:aa:6e:8f:16:08:e7:fc:4a:e4:55: 96:e5:14:f5:d6:ae:a2:cc:f9:23:0c:b8:94:c4:d6: f4:33:2f:c7:ef:e9:9c:7a:ca:fb:e9:12:6b:72:42: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.20.0/22 185.127.228.0/22 185.176.96.0/22 185.181.44.0/22 IPv6: 2a03:9920::/32 2a09:9680::/29 2a0a:f80::/29 2a0a:c080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51546 Signature Algorithm: sha256WithRSAEncryption 3f:54:63:73:f6:14:e7:1d:68:58:9d:7c:1a:5e:b0:4f:9c:08: d3:42:1f:f7:77:bb:ad:35:13:4a:0f:df:0d:22:62:00:c7:dd: 88:95:92:f6:30:df:23:0e:20:e1:46:44:0c:06:4a:9e:45:28: 99:53:d2:42:ba:ef:24:dd:5f:7d:9a:a3:1b:77:64:0b:fb:5d: 2e:3d:33:ed:9d:71:70:08:5f:b6:66:5d:28:0f:b7:b4:2d:19: 3b:e8:0d:c2:4d:97:28:b6:2c:0e:7c:da:f3:9a:c6:4b:cf:f7: 1c:05:15:4f:26:31:3c:a0:ea:fd:f2:04:f5:60:e7:d6:90:4c: 0e:0f:08:9d:d2:13:5b:22:37:a3:50:1e:08:dd:4a:86:36:4d: 18:e0:63:61:58:83:c2:52:8e:71:ed:89:b0:a6:3c:34:64:ad: 58:dc:f2:8d:34:88:e1:57:bc:14:1d:52:70:2d:be:31:cc:1b: f6:11:09:60:56:27:63:47:a8:d3:b2:39:6e:33:aa:60:18:3f: 2c:00:c7:04:eb:14:a6:a3:f9:d0:60:67:89:cb:5e:74:cb:0c: d4:33:d0:4c:42:c1:3b:1b:bb:48:9b:07:b7:72:03:b1:e6:8b: 0b:28:75:58:15:ff:c4:fd:7a:11:5d:97:0e:74:bb:10:86:b5: 83:1a:d4:72 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt6yVBNrXPQnP4rA0oQ6gw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDQxZDBhNmU2ZGYyZTE4YzI1NjczMjM2OGQ2ZTc2ODI4OTMxMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBDpSaQc+pNnFtBRba4T3xDQOzgM PAsSIK0BIKNQ3ulKMiIFFhbdJj8Sr1Y41hfYBgKMs+vCwwdxTxGnvBFOM8D71BDY qGYoYOYDVxykVHvGXHKIwsDK+oICu/i2CPLL52GShdqoXSt4ufSdqVxkzshvL85A czrsdC9yEkitdL3wS6AqvvN1MQVlk0P8uDbqjqeJ7jwrjn3KBWgz7FUTm4fvqcbV PQxASiV9+5pFqVaW+MSMVXq4ES2O+mKRseWsWXAo+8xbb+n2fCXqjZ6paMPtfHkY 46pujxYI5/xK5FWW5RT11q6izPkjDLiUxNb0My/H7+mcesr76RJrckIKgQIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFA1B0Kbm3y4YwlZzI2jW52gokxMQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4Lzk4Mzdi Mi0wZGYwLTRmNWEtODBkYi02MmI2NDBiMDJlMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvOTgzN2Iy LTBkZjAtNGY1YS04MGRiLTYyYjY0MGIwMmUyYi8xL0RVSFFwdWJmTGhqQ1ZuTWph TmJuYUNpVEV4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAeBAIAATAYAwQCWNoUAwQCuX/kAwQCubBgAwQCubUsMCIEAgAC MBwDBQAqA5kgAwUDKgmWgAMFAyoKD4ADBQMqCsCAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDJWjANBgkqhkiG9w0BAQsFAAOCAQEAP1Rjc/YU5x1oWJ18Gl6wT5wI 00If93e7rTUTSg/fDSJiAMfdiJWS9jDfIw4g4UZEDAZKnkUomVPSQrrvJN1ffZqj G3dkC/tdLj0z7Z1xcAhftmZdKA+3tC0ZO+gNwk2XKLYsDnza85rGS8/3HAUVTyYx PKDq/fIE9WDn1pBMDg8IndITWyI3o1AeCN1KhjZNGOBjYViDwlKOce2JsKY8NGSt WNzyjTSI4Ve8FB1ScC2+Mcwb9hEJYFYnY0eo07I5bjOqYBg/LADHBOsUpqP50GBn ictedMsM1DPQTELBOxu7SJsHt3IDseaLCyh1WBX/xP16EV2XDnS7EIa1gxrUcg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:34 2026 by rpki-client