This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer File: Da7a5Z2cmvUe9UivsMlkOM73IRw.cer (raw, json) Hash identifier: iNA49k3KxOVB9VGK6iGk+551hjs9FvrbeKPx4W/xPYA= Subject key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37F991F87E71955F47A481C986789D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47720 IP: 84.39.232.0/21 IP: 91.103.0.0/21 IP: 185.49.60.0/22 IP: 185.175.168.0/22 IP: 185.176.0.0/22 IP: 217.74.52.0 -- 217.74.63.255 IP: 2a02:2078::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f9:91:f8:7e:71:95:5f:47:a4:81:c9:86:78:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0daedae59d9c9af51ef548afb0c96438cef7211c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:6c:93:97:17:ec:f5:bc:56:d5:c3:78:d8: ef:50:c1:c4:2b:89:19:5c:e3:c8:28:ab:80:1f:55: fe:3f:e6:8b:81:43:26:e2:39:b0:7e:17:8e:3c:ca: 04:3a:36:56:66:66:8e:48:74:d8:b0:6d:1e:09:2c: 95:02:d8:4e:d8:91:2c:79:ed:c1:eb:56:f9:68:06: 9b:5d:8a:37:d3:12:7f:e8:06:f2:62:51:77:a4:be: d6:25:4e:99:1b:68:d3:23:b9:ae:9a:a8:13:c7:eb: e7:d4:e9:12:5c:b4:bf:9d:59:8f:4e:10:a6:a5:05: 61:71:5d:de:65:22:e3:59:94:a1:36:51:6c:7d:8f: f2:19:ad:f6:3e:ea:eb:29:1e:e5:41:b7:8f:47:bc: a5:3b:49:c0:67:78:05:61:d5:8f:d8:1d:dc:3a:8f: 50:62:67:07:84:11:9e:10:41:73:d5:d5:60:cd:d3: 92:c1:aa:8e:93:56:d7:ad:1d:10:92:12:a6:21:a4: 29:be:45:d1:57:97:15:ee:d0:e6:1e:5c:4a:96:d8: 0e:ec:8b:91:db:d6:f3:e6:0c:81:c9:83:69:23:29: c9:ac:cc:ff:79:47:7e:7d:4e:f0:cd:c8:79:bd:f1: de:26:1b:c7:7f:e0:ae:ab:6b:b9:32:04:ad:a6:13: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.39.232.0/21 91.103.0.0/21 185.49.60.0/22 185.175.168.0/22 185.176.0.0/22 217.74.52.0-217.74.63.255 IPv6: 2a02:2078::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47720 Signature Algorithm: sha256WithRSAEncryption 97:45:e6:b9:62:f4:9f:79:bf:ec:c4:39:f3:d9:49:26:f0:83: 6d:55:d0:5a:e1:6e:a4:70:2a:7c:e9:1a:e3:cc:46:cd:11:bf: fb:df:6e:13:02:20:42:f6:44:67:63:e2:1b:e6:29:64:57:38: 19:96:d8:50:bd:33:99:93:16:fb:fb:15:5f:5a:9c:50:ef:80: 22:0c:af:4b:e2:34:52:95:75:ea:a6:17:9e:4d:d7:6d:b9:c2: a0:c8:83:9d:75:93:0d:3d:7a:43:97:25:92:8d:d8:c3:92:98: 1c:c1:37:36:fa:53:4d:3b:ea:55:6b:56:12:81:b7:17:f3:b7: b9:72:c5:e3:a1:fc:50:5e:37:59:a5:0d:bd:c6:62:b5:32:27: 10:4a:e4:76:14:5b:b8:cc:98:d3:85:57:4a:fa:3b:d1:22:e8: 8f:f9:d6:d5:54:ad:5f:d4:32:25:de:5c:64:06:fb:38:51:ad: 17:7a:8c:c7:e5:b5:46:b4:98:69:9c:90:2d:98:13:e2:af:f4: 9f:cb:9e:fb:5b:dd:e4:a1:3e:42:09:c7:9e:be:51:93:c7:e4: 66:e5:b4:0f:4d:2a:23:84:71:9b:a4:95:53:4b:7e:9e:ce:79: 72:1c:3c:47:f9:3b:48:3d:31:be:df:6b:c0:f4:11:b1:8a:54: 51:4e:ca:7b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt+N/mR+H5xlV9HpIHJhnidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGFlZGFlNTlkOWM5YWY1MWVmNTQ4YWZiMGM5NjQzOGNlZjcyMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwtsk5cX7PW8VtXDeNjvUMHEK4kZ XOPIKKuAH1X+P+aLgUMm4jmwfheOPMoEOjZWZmaOSHTYsG0eCSyVAthO2JEsee3B 61b5aAabXYo30xJ/6AbyYlF3pL7WJU6ZG2jTI7mumqgTx+vn1OkSXLS/nVmPThCm pQVhcV3eZSLjWZShNlFsfY/yGa32PurrKR7lQbePR7ylO0nAZ3gFYdWP2B3cOo9Q YmcHhBGeEEFz1dVgzdOSwaqOk1bXrR0QkhKmIaQpvkXRV5cV7tDmHlxKltgO7IuR 29bz5gyByYNpIynJrMz/eUd+fU7wzch5vfHeJhvHf+Cuq2u5MgStphP6qwIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFA2u2uWdnJr1HvVIr7DJZDjO9yEcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2QyOWQz Zi0xNjk2LTRlZDQtOTZkMi1lN2ViODE3ZWRlMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvZDI5ZDNm LTE2OTYtNGVkNC05NmQyLWU3ZWI4MTdlZGUzMC8xL0RhN2E1WjJjbXZVZTlVaXZz TWxrT003M0lSdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQDVCfoAwQDW2cAAwQCuTE8AwQCua+oAwQCubAA MAwDBALZSjQDBAbZSgAwDQQCAAIwBwMFACoCIHgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALpoMA0GCSqGSIb3DQEBCwUAA4IBAQCXRea5YvSfeb/sxDnz2Ukm8INt VdBa4W6kcCp86RrjzEbNEb/7324TAiBC9kRnY+Ib5ilkVzgZlthQvTOZkxb7+xVf WpxQ74AiDK9L4jRSlXXqpheeTddtucKgyIOddZMNPXpDlyWSjdjDkpgcwTc2+lNN O+pVa1YSgbcX87e5csXjofxQXjdZpQ29xmK1MicQSuR2FFu4zJjThVdK+jvRIuiP +dbVVK1f1DIl3lxkBvs4Ua0XeozH5bVGtJhpnJAtmBPir/Sfy577W93koT5CCcee vlGTx+Rm5bQPTSojhHGbpJVTS36eznlyHDxH+TtIPTG+32vA9BGxilRRTsp7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:58 2026 by rpki-client