This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer File: Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer (raw, json) Hash identifier: XF8FF7FVgMpTwnyNcSduvYyq9vGYZPNKE2p/gxDDj1Q= Subject key identifier: 0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B638B641F34A2B17B142F91FAC17F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.40.64.0/19 IP: 81.28.16.0/20 IP: 2a02:2aa0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:63:8b:64:1f:34:a2:b1:7b:14:2f:91:fa:c1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:ff:60:f3:18:cb:a3:b0:6c:f2:3b:fa:03: 58:8f:43:00:a5:29:81:67:7a:dc:1e:76:d3:f4:1a: 2e:fc:92:39:14:45:0c:61:db:66:88:cb:cb:6f:0a: fe:06:c6:5c:1d:c6:cc:fc:22:8d:84:87:e9:e4:9f: 3c:2d:5c:94:96:47:70:11:2c:d1:2e:8a:47:88:cf: 5a:82:be:38:0a:2e:05:f0:e2:d7:15:e9:d6:47:49: 4d:ce:bf:f5:24:5f:97:97:f6:9f:84:1c:24:7f:a7: f5:5a:8d:8e:f1:e6:5f:e4:f5:d8:84:b8:a5:5c:9b: ed:06:76:8a:98:5d:1f:ab:5f:b0:dd:84:1e:3e:e9: 7f:34:de:a8:70:72:e5:6d:df:72:27:aa:ea:bc:25: 4e:25:a0:6e:e3:af:dc:57:76:28:23:ab:58:d3:44: 6a:28:00:5a:38:88:55:21:ad:76:1a:28:f3:fe:85: df:c7:d9:fd:4a:00:a9:63:cb:55:6c:a6:fc:b2:9f: f8:4a:90:5c:62:90:4b:0a:0e:f9:66:c6:b1:c9:8b: 25:4b:56:b4:3a:68:5a:c7:a3:20:17:1c:d9:f1:94: 17:27:0d:31:5a:91:25:46:c6:87:ff:ba:13:43:57: c8:45:09:d8:6a:53:18:44:f0:c8:2b:b6:47:26:ec: 3f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.40.64.0/19 81.28.16.0/20 IPv6: 2a02:2aa0::/29 Signature Algorithm: sha256WithRSAEncryption ae:45:f7:c5:67:e4:8b:13:77:0e:7d:fa:49:e2:9c:53:c7:f2: 8e:7b:c7:84:6c:e6:7f:7e:80:b1:b5:02:69:b1:a5:06:c8:27: 13:34:9b:87:d4:71:81:4d:02:33:40:e8:ec:a5:dd:82:3f:bd: f5:5a:62:47:2f:c1:44:8a:9a:5e:5d:09:5e:1a:75:bc:88:12: e8:04:d7:60:f0:94:63:eb:3a:de:6b:2c:ab:7d:6d:b8:41:88: 8d:c4:fd:bf:73:4e:5c:32:1e:ed:cf:87:5c:04:d5:59:20:bc: 20:b4:19:63:0e:a1:b4:84:4f:96:23:b2:95:59:86:fe:a5:9e: 47:44:f0:47:ca:ae:a0:9b:33:fe:b8:71:ac:11:6b:fe:c4:d2: 5d:92:1d:9e:ff:a6:83:41:8e:83:ba:5c:5f:bb:29:72:7e:88: 16:79:4b:45:ee:58:c0:0a:f5:85:a4:27:a1:40:c4:22:7b:e1: 87:8d:e6:27:e8:e5:ed:3f:7d:8a:99:29:74:65:7f:7b:2e:bf: f0:81:5c:ff:7d:5e:55:d1:16:a4:d2:a7:b1:22:f3:fc:63:a5: 4c:dc:85:dc:a8:6e:c0:e3:5c:68:97:a1:95:e9:7e:29:43:c7: df:9a:97:4b:fa:38:4f:01:77:fa:cd:28:35:47:1c:84:e6:5f: 6a:d6:70:36 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6W2OLZB80orF7FC+R+sF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTFmYjcwZjkwYmEyY2YwNThjMTIwNmRlYjBlZjc5NzM3MDI2ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlT/YPMYy6OwbPI7+gNYj0MApSmB Z3rcHnbT9Bou/JI5FEUMYdtmiMvLbwr+BsZcHcbM/CKNhIfp5J88LVyUlkdwESzR LopHiM9agr44Ci4F8OLXFenWR0lNzr/1JF+Xl/afhBwkf6f1Wo2O8eZf5PXYhLil XJvtBnaKmF0fq1+w3YQePul/NN6ocHLlbd9yJ6rqvCVOJaBu46/cV3YoI6tY00Rq KABaOIhVIa12Gijz/oXfx9n9SgCpY8tVbKb8sp/4SpBcYpBLCg75ZsaxyYslS1a0 Omhax6MgFxzZ8ZQXJw0xWpElRsaH/7oTQ1fIRQnYalMYRPDIK7ZHJuw/WwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFA4ftw+QuizwWMEgbesO95c3Am6QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzlhNmJj Mi04ZTVmLTRhNmQtYjIwNi0yN2NiOWRjZDYwZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvOWE2YmMy LThlNWYtNGE2ZC1iMjA2LTI3Y2I5ZGNkNjBmYy8xL0RoLTNENUM2TFBCWXdTQnQ2 dzczbHpjQ2JwQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFPihAAwQEURwQMA0EAgACMAcDBQMqAiqgMA0G CSqGSIb3DQEBCwUAA4IBAQCuRffFZ+SLE3cOffpJ4pxTx/KOe8eEbOZ/foCxtQJp saUGyCcTNJuH1HGBTQIzQOjspd2CP731WmJHL8FEippeXQleGnW8iBLoBNdg8JRj 6zreayyrfW24QYiNxP2/c05cMh7tz4dcBNVZILwgtBljDqG0hE+WI7KVWYb+pZ5H RPBHyq6gmzP+uHGsEWv+xNJdkh2e/6aDQY6DulxfuylyfogWeUtF7ljACvWFpCeh QMQie+GHjeYn6OXtP32KmSl0ZX97Lr/wgVz/fV5V0Rak0qexIvP8Y6VM3IXcqG7A 41xol6GV6X4pQ8ffmpdL+jhPAXf6zSg1RxyE5l9q1nA2 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:17 2026 by rpki-client