This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer (raw, json) Hash identifier: fry+EfqxZs/VG/m+zMN36ToiWhEH6KX8139TU8ac/9Q= Subject key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38D6D8C7FAE979780FA875E05E6DC8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 212.162.144.0/22 IP: 2a09:d400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d6:d8:c7:fa:e9:79:78:0f:a8:75:e0:5e:6d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:39:bc:a7:93:b7:2b:ae:04:f2:8b:7f:c2: 0f:09:56:79:d8:ab:e0:5d:f9:89:d2:ca:98:06:ec: 05:1d:c1:1c:96:f5:34:76:16:90:f5:16:95:db:cd: b9:c6:35:90:c2:7b:ee:ae:35:ca:3c:dc:ad:60:a1: e5:e5:97:1d:a9:d4:6a:70:e0:aa:eb:a2:53:96:b5: d7:90:a2:27:8b:bd:ef:22:38:8b:c1:98:79:4d:11: 16:4d:7c:ba:e3:eb:61:77:e1:0f:66:7b:8b:aa:2e: db:0f:cd:f2:58:d1:09:2f:1d:ee:5d:37:46:ce:de: 3e:ac:34:f4:be:33:15:50:b5:37:24:45:f5:fb:21: 00:19:57:a4:3b:9d:41:fd:bd:6e:52:51:4e:b9:39: 70:40:63:89:f4:1a:be:af:0b:a0:21:69:fa:6b:c4: de:9c:68:54:a7:9d:ce:93:1c:3c:94:b9:37:a1:2a: 2d:89:ec:5e:2e:0b:3f:77:9c:76:33:8f:52:20:89: 95:e9:aa:62:df:ab:55:8b:e1:92:bf:88:c4:3a:3b: d0:0d:b4:f5:7d:ee:1c:b8:24:8d:31:ed:b4:3a:dc: 79:34:e9:f3:bc:63:bb:4a:c4:27:b7:03:64:8e:ee: 66:04:69:6c:13:a7:3d:ae:cb:5c:c5:ed:dc:7b:66: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.162.144.0/22 IPv6: 2a09:d400::/29 Signature Algorithm: sha256WithRSAEncryption 5a:8c:ed:cf:5c:ca:a2:97:16:9c:f8:cc:ee:a6:1c:5a:0f:f4: 9b:86:cd:0b:ca:69:34:02:c1:81:5a:7f:0f:d6:66:80:a8:9d: 9d:38:f7:f4:8c:e5:7f:a8:ae:5c:d5:43:7e:ad:5b:7d:82:40: 04:a5:94:0e:1b:8b:eb:17:1d:37:2c:e7:1a:35:de:3f:85:eb: 83:78:6e:a9:ad:9b:7a:c3:e5:09:82:9b:fe:08:66:68:17:1d: fd:93:85:47:d2:be:a2:70:8a:b2:f9:f9:32:bc:93:9a:0b:ff: 0b:a6:8a:7c:87:ec:b2:de:dc:81:be:0b:ea:ea:82:eb:36:df: 20:c4:6c:79:33:70:9c:13:ee:29:ee:c1:c4:99:8f:48:c9:d0: b5:1a:47:04:b4:de:19:f2:7f:59:c6:38:93:8b:85:1e:f6:7a: 2d:0b:a0:4d:0a:38:28:71:9c:30:bd:28:df:08:35:b4:82:7d: ac:74:1f:96:4e:0b:9c:40:a5:07:4c:4a:4c:aa:59:69:f7:39: 55:7c:7a:10:61:06:70:f3:98:1a:ef:22:e2:bf:cb:af:96:79: 7e:d7:e2:12:02:ed:d7:9a:41:d9:5c:eb:46:1f:85:e5:c6:10: 50:d9:44:ac:6f:8b:96:f7:dc:f3:f2:4b:a8:ab:51:b9:60:90: 23:fe:ed:9a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+ONbYx/rpeXgPqHXgXm3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGM4NzFkYjUwOThiZjgzOGZmZWE5OWEwMmY2NzkzNjhiM2UxYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN05vKeTtyuuBPKLf8IPCVZ52Kvg XfmJ0sqYBuwFHcEclvU0dhaQ9RaV2825xjWQwnvurjXKPNytYKHl5ZcdqdRqcOCq 66JTlrXXkKIni73vIjiLwZh5TREWTXy64+thd+EPZnuLqi7bD83yWNEJLx3uXTdG zt4+rDT0vjMVULU3JEX1+yEAGVekO51B/b1uUlFOuTlwQGOJ9Bq+rwugIWn6a8Te nGhUp53Okxw8lLk3oSotiexeLgs/d5x2M49SIImV6api36tVi+GSv4jEOjvQDbT1 fe4cuCSNMe20Otx5NOnzvGO7SsQntwNkju5mBGlsE6c9rstcxe3ce2Zz5wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFA3IcdtQmL+Dj/6pmgL2eTaLPhqyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5LzRhMTIz OC1jYjY0LTRhNDYtYWY5NS02NWJlNDRkMGRiZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNGExMjM4 LWNiNjQtNGE0Ni1hZjk1LTY1YmU0NGQwZGJkNC8xL0RjaHgyMUNZdjRPUF9xbWFB dlo1Tm9zLUdySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQC1KKQMA0EAgACMAcDBQMqCdQAMA0GCSqGSIb3 DQEBCwUAA4IBAQBajO3PXMqilxac+MzuphxaD/Sbhs0Lymk0AsGBWn8P1maAqJ2d OPf0jOV/qK5c1UN+rVt9gkAEpZQOG4vrFx03LOcaNd4/heuDeG6prZt6w+UJgpv+ CGZoFx39k4VH0r6icIqy+fkyvJOaC/8Lpop8h+yy3tyBvgvq6oLrNt8gxGx5M3Cc E+4p7sHEmY9IydC1GkcEtN4Z8n9ZxjiTi4Ue9notC6BNCjgocZwwvSjfCDW0gn2s dB+WTgucQKUHTEpMqllp9zlVfHoQYQZw85ga7yLiv8uvlnl+1+ISAu3XmkHZXOtG H4XlxhBQ2USsb4uW99zz8kuoq1G5YJAj/u2a -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:11 2026 by rpki-client