This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer (raw, json) Hash identifier: FdddxLD5MyOjpNdYjM4Q4nv6zqByB0c4GujVYob1qNI= Subject key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B97BC35DF7BC9547BDF1E0DFFF0DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44482 IP: 91.199.138.0/24 IP: 91.225.92.0/22 IP: 194.28.52.0/22 IP: 195.238.116.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:bc:35:df:7b:c9:54:7b:df:1e:0d:ff:f0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:60:e2:e5:ab:57:43:56:6b:45:1a:84:7b: 5c:09:bd:8b:eb:a1:71:19:01:d9:a4:5d:d3:b6:54: e9:7b:18:4b:7f:7f:55:34:68:d8:7a:5c:9e:23:fd: ac:eb:12:f4:7a:81:30:b4:3f:1e:ea:17:47:b0:b4: 12:c8:09:62:a1:cc:59:c5:49:1e:39:3d:be:84:86: e0:69:df:da:aa:01:d5:8e:d6:5a:4a:a4:64:7e:ba: 3c:15:b6:0f:c7:fa:3e:e9:f5:f3:3f:5c:4a:51:f2: c9:12:50:f0:40:7b:6f:76:06:26:b1:18:fb:5e:f2: 80:d9:b7:f1:97:cc:6f:15:8c:c3:cf:cd:4d:9e:b2: ce:b6:48:ab:c7:bd:58:4c:05:86:3d:76:3f:bd:76: e4:04:06:3a:d1:42:8f:ac:fb:da:2b:ae:85:c6:d2: 24:ea:91:87:e4:e9:fb:d3:51:78:b0:7d:13:34:6f: 4f:f4:16:99:0a:0c:49:9c:e7:67:01:b0:46:61:36: 07:5f:51:8d:cd:20:a0:1c:a6:30:bf:31:92:a7:cd: 1f:a3:0e:09:0b:3d:10:49:61:82:f1:e8:e3:81:bb: 1d:30:83:e6:35:c5:61:e5:e4:97:64:d0:94:e6:d4: 5c:fb:24:11:70:c0:dc:57:71:5d:fc:bb:2c:28:df: cb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.138.0/24 91.225.92.0/22 194.28.52.0/22 195.238.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44482 Signature Algorithm: sha256WithRSAEncryption 8f:9c:d6:c5:f1:01:f0:78:e7:5b:8e:0e:68:18:be:c6:0b:a9: e2:c6:c2:ef:dc:a3:26:5e:f9:38:10:ac:7a:e0:d5:00:7c:b5: 3a:7e:b2:38:4d:ee:a0:aa:81:47:41:2e:4a:93:09:aa:c7:0b: 7d:cc:72:f1:37:9d:14:ae:de:22:97:35:33:64:d8:13:9f:7e: 30:61:7e:42:79:82:72:11:80:b9:cf:b3:d3:08:7d:86:d3:fb: 36:c3:46:7f:38:e3:55:51:bf:28:bf:da:06:75:5c:e6:19:ca: d5:21:90:55:40:89:fe:1d:98:8c:2b:b8:43:0a:9b:f8:44:38: fd:1b:6e:de:a8:0b:d1:a8:ea:9f:a3:3e:bb:6b:33:2c:2c:bb: bc:88:11:7d:c5:3a:bd:4a:53:46:07:1c:9a:b7:cd:10:2b:1e: c7:f6:3f:0f:e0:aa:60:17:e0:20:38:f8:34:af:8d:5d:94:48: 33:4c:ea:5a:ac:23:3b:99:f3:e5:4b:6f:19:9d:c2:2d:3e:3d: 84:0e:cc:e6:c7:c6:22:09:34:e1:90:67:12:c8:a3:c6:ca:67: 73:07:cb:61:f2:8a:c6:3b:b2:0e:53:2e:b5:de:45:5d:76:ec: b8:4e:d1:2e:6b:0f:6b:c3:de:c2:73:5b:6a:73:4d:bb:b3:66: ff:52:9d:f0 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt6W5e8Nd97yVR73x4N//DeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTExN2EzZTBkMGQwNWQ0YjBhYjgyMzA4MGU3YmY2Y2ZkNGIzNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUlg4uWrV0NWa0UahHtcCb2L66Fx GQHZpF3TtlTpexhLf39VNGjYelyeI/2s6xL0eoEwtD8e6hdHsLQSyAliocxZxUke OT2+hIbgad/aqgHVjtZaSqRkfro8FbYPx/o+6fXzP1xKUfLJElDwQHtvdgYmsRj7 XvKA2bfxl8xvFYzDz81NnrLOtkirx71YTAWGPXY/vXbkBAY60UKPrPvaK66FxtIk 6pGH5On701F4sH0TNG9P9BaZCgxJnOdnAbBGYTYHX1GNzSCgHKYwvzGSp80fow4J Cz0QSWGC8ejjgbsdMIPmNcVh5eSXZNCU5tRc+yQRcMDcV3Fd/LssKN/LnQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFA4Rej4NDQXUsKuCMIDnv2z9Szd2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzE0MjJm YS1lODJiLTRjMGItYjIzYi1kODQ3NWYxODQ2NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvMTQyMmZh LWU4MmItNGMwYi1iMjNiLWQ4NDc1ZjE4NDY0ZS8xL0RoRjZQZzBOQmRTd3E0SXdn T2VfYlAxTE4zWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAW8eKAwQCW+FcAwQCwhw0AwQCw+50MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwCtwjANBgkqhkiG9w0BAQsFAAOCAQEAj5zWxfEB 8HjnW44OaBi+xgup4sbC79yjJl75OBCseuDVAHy1On6yOE3uoKqBR0EuSpMJqscL fcxy8TedFK7eIpc1M2TYE59+MGF+QnmCchGAuc+z0wh9htP7NsNGfzjjVVG/KL/a BnVc5hnK1SGQVUCJ/h2YjCu4Qwqb+EQ4/Rtu3qgL0ajqn6M+u2szLCy7vIgRfcU6 vUpTRgccmrfNECsex/Y/D+CqYBfgIDj4NK+NXZRIM0zqWqwjO5nz5UtvGZ3CLT49 hA7M5sfGIgk04ZBnEsijxspncwfLYfKKxjuyDlMutd5FXXbsuE7RLmsPa8PewnNb anNNu7Nm/1Kd8A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:39 2026 by rpki-client