This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer (raw, json) Hash identifier: /WecCHE/9Cge9C6B08SzgH5QyFOBfRetmNRY1IPKO+g= Subject key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36D1F8189B9C3A7A734491207EF63D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13128 IP: 141.15.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d1:f8:18:9b:9c:3a:7a:73:44:91:20:7e:f6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:1f:e5:2c:80:b8:13:df:5b:d6:8b:3c:76: 81:92:e0:36:bc:4e:6a:b1:14:82:31:cb:fc:5f:8b: e2:f9:14:1d:3a:02:a1:3f:32:9d:f1:f3:36:e6:24: 8c:77:26:a7:a7:58:ff:6e:e3:9a:6f:88:c4:aa:0f: 4d:ef:ec:0d:ac:08:4d:88:81:df:e0:f5:79:99:60: 95:6d:2e:fb:98:da:89:51:ed:86:b4:1f:6f:6a:82: 31:12:07:85:be:04:37:19:be:08:35:e2:05:e5:2e: d8:99:0f:60:30:0a:cd:0b:46:9c:c7:79:41:2c:ef: 4d:06:18:30:3f:c7:93:a0:de:46:b9:0c:79:36:1a: 60:85:7f:b7:e7:5f:ef:87:a3:eb:5c:be:54:88:c0: 47:22:fd:25:1a:a9:20:b6:45:84:05:48:5e:9d:73: ed:34:63:dc:55:c5:7e:64:14:09:a1:cc:12:83:1f: 8d:c7:6f:52:fe:af:ea:52:11:12:a3:2e:e9:39:8e: a4:a1:94:e6:bb:cd:33:1e:46:dd:d1:f8:e0:64:4a: ac:c8:41:88:c9:5f:b3:79:28:09:ae:98:f7:db:92: 85:93:8c:35:a1:43:cf:01:53:db:f8:fc:07:f7:78: 65:3c:a1:11:14:0e:04:90:20:a5:10:9d:9c:2a:ae: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.15.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13128 Signature Algorithm: sha256WithRSAEncryption 0e:39:cb:e1:a2:b9:1a:cd:53:92:9c:13:94:07:0d:6e:6a:8e: fc:4a:15:f4:9c:b4:7c:70:ef:47:49:d5:80:13:aa:ca:75:26: a9:7e:9a:ca:0a:38:e3:1f:c7:0c:6d:71:23:2e:6b:74:b4:1c: a7:91:a0:49:27:5f:cd:d2:a0:e3:e9:4d:d0:ca:4e:d6:27:9f: 18:35:1a:6b:27:e8:56:2b:89:f9:9d:c2:64:6f:dd:b1:92:c5: f3:1d:8b:6f:74:b6:ad:6e:a1:bd:77:d9:a5:e5:7e:5c:7d:61: dd:aa:98:9c:11:40:2e:90:a1:49:4b:4a:32:f7:dc:a2:8a:42: 90:09:49:aa:bd:13:11:6b:fa:24:d3:3a:c2:cb:98:cb:46:f4: 2c:d7:68:2b:f2:06:2e:87:3b:ac:81:86:b7:11:8f:0c:b6:18: 09:d7:4d:c1:9c:c9:66:78:93:07:a9:4b:dc:dc:27:ac:85:28: 4d:b2:08:09:dc:67:c7:1d:0c:d9:9a:d2:d0:63:a3:f3:81:65: 23:ed:87:47:02:94:02:2f:da:32:20:36:8a:70:72:9f:97:43: a1:ed:87:20:6d:88:3a:90:41:9f:ef:1b:f0:cc:42:50:b7:37: 26:e0:1d:3b:c9:dc:e0:14:6c:51:da:69:cc:65:fa:a4:57:ca: e0:24:cb:d2 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt7NtH4GJucOnpzRJEgfvY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGI0OTEyMmQ5ZTliYmFmYTU3N2Y2NDQ3ZjIxYjhiZWM3NmMwNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrIf5SyAuBPfW9aLPHaBkuA2vE5q sRSCMcv8X4vi+RQdOgKhPzKd8fM25iSMdyanp1j/buOab4jEqg9N7+wNrAhNiIHf 4PV5mWCVbS77mNqJUe2GtB9vaoIxEgeFvgQ3Gb4INeIF5S7YmQ9gMArNC0acx3lB LO9NBhgwP8eToN5GuQx5NhpghX+351/vh6PrXL5UiMBHIv0lGqkgtkWEBUhenXPt NGPcVcV+ZBQJocwSgx+Nx29S/q/qUhESoy7pOY6koZTmu80zHkbd0fjgZEqsyEGI yV+zeSgJrpj325KFk4w1oUPPAVPb+PwH93hlPKERFA4EkCClEJ2cKq7LAwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFA20kSLZ6buvpXf2RH8huL7HbAXwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzVkZTdm Yi05NDg4LTRlODQtODNjYS0xNDYwMGQ1NzgwOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvNWRlN2Zi LTk0ODgtNGU4NC04M2NhLTE0NjAwZDU3ODA4YS8xL0RiU1JJdG5wdTYtbGRfWkVm eUc0dnNkc0JmQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjQ8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC M0gwDQYJKoZIhvcNAQELBQADggEBAA45y+GiuRrNU5KcE5QHDW5qjvxKFfSctHxw 70dJ1YATqsp1Jql+msoKOOMfxwxtcSMua3S0HKeRoEknX83SoOPpTdDKTtYnnxg1 Gmsn6FYrifmdwmRv3bGSxfMdi290tq1uob132aXlflx9Yd2qmJwRQC6QoUlLSjL3 3KKKQpAJSaq9ExFr+iTTOsLLmMtG9CzXaCvyBi6HO6yBhrcRjwy2GAnXTcGcyWZ4 kwepS9zcJ6yFKE2yCAncZ8cdDNma0tBjo/OBZSPth0cClAIv2jIgNopwcp+XQ6Ht hyBtiDqQQZ/vG/DMQlC3NybgHTvJ3OAUbFHaacxl+qRXyuAky9I= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:22 2026 by rpki-client