This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer (raw, json) Hash identifier: xQNMenSvsRjlShK81QzitUcMVedZ6TEIz3zecbmlIB0= Subject key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6AC9AEFD7DAE6ACA1BEBC9C2496EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202220 IP: 195.149.98.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ac:9a:ef:d7:da:e6:ac:a1:be:bc:9c:24:96:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:d4:00:8f:dd:5e:0e:e5:9c:6d:ea:b3:75: 05:8d:24:12:c9:99:f4:aa:b2:e9:06:21:87:cc:84: 1f:d0:bb:72:f2:48:96:dd:75:17:82:81:5d:46:1d: ff:bd:94:15:63:67:30:77:1c:27:e7:45:92:a6:3a: 90:f8:b7:35:25:0c:df:9f:8f:4f:78:ff:fd:3a:f2: 10:49:20:55:da:2f:47:3e:ab:c7:12:98:56:9d:44: 0e:c8:9e:89:31:02:98:c1:ab:28:28:73:31:f3:e9: 4e:f4:3b:de:c0:f7:13:46:8a:49:6e:16:64:27:af: c9:c4:7a:ce:36:a2:5b:28:ba:f8:0f:d7:b5:da:cb: 5b:ef:3d:d0:e7:b4:f2:11:9f:8b:f8:f7:ef:1c:90: 4b:91:71:85:1e:69:eb:0e:d9:3b:53:0c:f2:45:55: 4a:c0:3f:e5:12:5f:86:80:0d:03:3a:49:37:33:34: 0b:5d:37:ac:d2:a7:26:93:e2:45:cb:75:57:d9:9e: 18:af:3e:48:6d:a1:aa:5c:f4:6f:ce:76:09:3b:d2: ce:00:7e:dc:46:96:1e:cb:ac:a9:79:ef:6c:f3:fa: cf:80:30:93:1e:d8:0d:e6:51:f7:02:27:23:bd:e0: 9c:01:35:3c:28:70:b2:26:d4:e6:cb:55:38:5f:f9: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.98.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202220 Signature Algorithm: sha256WithRSAEncryption 4c:2f:66:c9:8d:fa:3f:ea:c0:80:f2:ca:01:46:3f:b3:1d:2f: 21:5a:be:61:86:d3:55:e6:10:1c:12:a3:80:bd:00:1d:bd:b1: 2f:5e:bd:db:f7:37:78:9b:c6:51:70:50:c6:06:fc:0a:89:bf: e8:5b:6e:8f:fb:21:86:95:85:ec:98:20:65:97:69:5b:2c:1d: 7c:57:ae:7d:7e:2e:36:21:67:22:58:ed:08:fb:b4:a6:56:b0: 31:bf:15:14:64:52:39:1c:14:18:98:bb:14:dd:fc:71:3d:98: de:d0:f3:94:8c:68:ce:20:af:3d:e9:c3:8b:39:b1:8e:f3:f3: 80:24:31:bd:f8:3d:2a:18:af:c1:66:8e:d0:84:e1:6e:a0:4a: d1:86:33:c3:e7:cf:de:5a:c3:bc:f1:80:dd:9d:59:fb:10:0c: 20:b2:35:e2:7b:b7:ba:9b:28:3b:84:ea:c6:53:d3:50:a2:8f: 8d:07:f2:25:23:42:e8:f5:d8:23:21:df:e9:39:9a:7b:37:ce: 3f:14:12:cb:07:d6:9b:ed:56:d6:4a:4a:af:a1:24:5f:25:ca: 9d:2c:a4:33:95:db:a8:4c:70:66:a3:3d:48:78:67:21:a3:e5: 63:89:8f:12:45:75:91:4d:4a:c7:a4:40:24:fa:4c:cd:29:7f: 36:de:7c:4e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xqya79fa5qyhvrycJJbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTAwMTllZDJjYjYyMTk3YjBjYTk2ZTFlNzE2MWM5ODY0OTA4NmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobnUAI/dXg7lnG3qs3UFjSQSyZn0 qrLpBiGHzIQf0Lty8kiW3XUXgoFdRh3/vZQVY2cwdxwn50WSpjqQ+Lc1JQzfn49P eP/9OvIQSSBV2i9HPqvHEphWnUQOyJ6JMQKYwasoKHMx8+lO9DvewPcTRopJbhZk J6/JxHrONqJbKLr4D9e12stb7z3Q57TyEZ+L+PfvHJBLkXGFHmnrDtk7UwzyRVVK wD/lEl+GgA0DOkk3MzQLXTes0qcmk+JFy3VX2Z4Yrz5IbaGqXPRvznYJO9LOAH7c RpYey6ypee9s8/rPgDCTHtgN5lH3AicjveCcATU8KHCyJtTmy1U4X/lbFwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFA4AGe0stiGXsMqW4ecWHJhkkIavMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2I5Y2Y1 Ny02YzI1LTRhNDMtYTBiMS0wNTliMDA2ZjM5ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYjljZjU3 LTZjMjUtNGE0My1hMGIxLTA1OWIwMDZmMzlkOS8xL0RnQVo3U3kySVpld3lwYmg1 eFljbUdTUWhxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw5ViMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMV7DANBgkqhkiG9w0BAQsFAAOCAQEATC9myY36P+rAgPLKAUY/sx0vIVq+YYbT VeYQHBKjgL0AHb2xL1692/c3eJvGUXBQxgb8Com/6Ftuj/shhpWF7JggZZdpWywd fFeufX4uNiFnIljtCPu0plawMb8VFGRSORwUGJi7FN38cT2Y3tDzlIxoziCvPenD izmxjvPzgCQxvfg9KhivwWaO0IThbqBK0YYzw+fP3lrDvPGA3Z1Z+xAMILI14nu3 upsoO4TqxlPTUKKPjQfyJSNC6PXYIyHf6TmaezfOPxQSywfWm+1W1kpKr6EkXyXK nSykM5XbqExwZqM9SHhnIaPlY4mPEkV1kU1Kx6RAJPpMzSl/Nt58Tg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:47 2026 by rpki-client