This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer File: DghrZ9iYllO662i40kq56b0Mryo.cer (raw, json) Hash identifier: OaP6wYjPUpohziXZtKbHBDmpDlaeg3iCNRmhrLN1iYA= Subject key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FC7121A91E89BC919C74DBB36A4C8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.17.48.0/22 IP: 194.9.128.0 -- 194.9.166.255 IP: 2a04:1440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c7:12:1a:91:e8:9b:c9:19:c7:4d:bb:36:a4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:3b:71:26:36:bc:aa:6d:16:45:58:7b:78: af:2b:9a:09:71:ad:29:6f:8b:5b:8a:c7:46:85:8d: 34:99:c3:3e:85:d3:4f:2d:71:6d:f3:f6:43:ce:51: 31:89:bf:33:9c:8a:07:34:57:cf:11:53:d7:2b:41: d3:0c:fc:03:fa:03:75:17:67:85:05:9f:0d:12:7f: be:d4:e7:34:b8:02:e7:9c:a6:45:56:87:6e:4c:2a: 95:5f:99:69:71:72:e0:da:c7:57:b8:f5:85:b0:9e: 3d:68:05:74:cb:53:7f:f5:23:ef:28:07:0d:3f:e0: af:20:0a:9b:10:ec:6c:d8:ad:c8:17:be:d4:09:8f: 0c:a4:df:db:e0:ec:e2:bb:d2:63:79:99:01:c3:04: db:1d:1d:50:f0:05:19:c8:f0:fa:6d:8e:6a:30:dd: 90:7d:2b:66:3d:29:9d:8b:24:75:cf:8e:c9:5d:f1: 2a:01:66:f1:52:74:7a:c2:22:b1:83:e8:b2:90:e2: 85:0b:6b:bd:65:59:e5:92:92:50:a0:41:ca:8d:b3: 90:d0:55:d3:67:61:96:60:14:56:4f:e8:e5:e0:a9: 27:4b:70:04:6a:d8:41:a3:87:42:d8:cc:68:56:67: 82:98:d3:90:bd:04:b1:6f:e5:33:3c:9c:02:fc:d0: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.48.0/22 194.9.128.0-194.9.166.255 IPv6: 2a04:1440::/29 Signature Algorithm: sha256WithRSAEncryption 47:d8:c2:13:9d:87:69:2d:94:08:ab:71:b0:d3:4a:08:3e:6e: 21:80:07:33:1a:c1:09:6b:81:3b:b8:e9:4e:15:8a:cc:4a:eb: b2:ed:3a:94:af:53:6f:78:e0:60:29:67:90:9f:c2:d5:54:d9: c0:c2:05:39:f2:f9:82:77:86:34:86:a8:5e:d7:00:00:eb:5b: 6d:59:67:06:71:c8:f9:02:d8:e9:1c:cc:68:be:a7:eb:b5:8c: bf:1e:a1:9e:d6:10:8f:62:cf:6f:77:70:4d:a0:cd:7c:ae:38: 19:5e:26:fc:19:2e:48:19:66:2c:08:16:a1:3e:85:00:bc:5d: ec:9b:36:5b:a9:97:fb:32:f9:57:0c:fc:6f:6c:e2:f8:85:1a: b6:19:7a:a5:58:08:28:4f:73:b9:a4:4a:86:9c:24:2b:0b:b1: 4a:b0:50:ce:0c:c8:38:d2:a4:6a:a8:0d:f8:47:db:80:65:e7: ff:ca:26:18:72:7f:10:7a:55:b4:de:03:3b:ac:a1:33:3d:c6: 19:b3:f6:71:71:e0:9a:7e:dc:49:b1:9e:16:df:1e:d7:19:39: 75:d2:04:88:c2:d6:3e:00:1a:ea:3f:85:3f:07:44:cb:b3:99: 69:fe:6c:59:bb:e1:45:7d:53:cf:65:e7:b6:3b:8c:38:a4:ae: d9:7f:bd:b9 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt8f8cSGpHom8kZx027NqTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTA4NmI2N2Q4OTg5NjUzYmFlYjY4YjhkMjRhYjllOWJkMGNhZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lg7cSY2vKptFkVYe3ivK5oJca0p b4tbisdGhY00mcM+hdNPLXFt8/ZDzlExib8znIoHNFfPEVPXK0HTDPwD+gN1F2eF BZ8NEn++1Oc0uALnnKZFVoduTCqVX5lpcXLg2sdXuPWFsJ49aAV0y1N/9SPvKAcN P+CvIAqbEOxs2K3IF77UCY8MpN/b4Oziu9JjeZkBwwTbHR1Q8AUZyPD6bY5qMN2Q fStmPSmdiyR1z47JXfEqAWbxUnR6wiKxg+iykOKFC2u9ZVnlkpJQoEHKjbOQ0FXT Z2GWYBRWT+jl4KknS3AEathBo4dC2MxoVmeCmNOQvQSxb+UzPJwC/NB2xQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFA4Ia2fYmJZTuutouNJKuem9DK8qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzM3OTZm YS1jMDJlLTQ1ZjktYTFhNC02MjJiYjQ4OTk4ODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMzc5NmZh LWMwMmUtNDVmOS1hMWE0LTYyMmJiNDg5OTg4Ny8xL0RnaHJaOWlZbGxPNjYyaTQw a3E1NmIwTXJ5by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQCwREwMAwDBAfCCYADBADCCaYwDQQCAAIwBwMF AyoEFEAwDQYJKoZIhvcNAQELBQADggEBAEfYwhOdh2ktlAircbDTSgg+biGABzMa wQlrgTu46U4VisxK67LtOpSvU2944GApZ5CfwtVU2cDCBTny+YJ3hjSGqF7XAADr W21ZZwZxyPkC2OkczGi+p+u1jL8eoZ7WEI9iz293cE2gzXyuOBleJvwZLkgZZiwI FqE+hQC8XeybNlupl/sy+VcM/G9s4viFGrYZeqVYCChPc7mkSoacJCsLsUqwUM4M yDjSpGqoDfhH24Bl5//KJhhyfxB6VbTeAzusoTM9xhmz9nFx4Jp+3EmxnhbfHtcZ OXXSBIjC1j4AGuo/hT8HRMuzmWn+bFm74UV9U89l57Y7jDikrtl/vbk= -----END CERTIFICATE-----Generated at Fri Jan 23 16:24:40 2026 by rpki-client