This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer File: DhcO6FnpH0lz3kpXKxutLzpdGCU.cer (raw, json) Hash identifier: N0Xbkr8kl6UcH4u83JY8DG47j6O+l6mOJVIJK1wsAtI= Subject key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84FF109BA399589BD1397D95C8A481 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208202 IP: 45.154.52.0/22 IP: 2a0f:ad00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ff:10:9b:a3:99:58:9b:d1:39:7d:95:c8:a4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:0a:a9:8d:7b:bc:f3:f6:d8:42:09:5b:a0: a9:7f:3d:d2:60:56:88:03:4d:10:3f:0c:24:79:e4: 9f:c1:b3:97:95:ad:90:58:59:1f:6f:78:9a:0f:2e: c1:4e:a7:c7:93:40:e6:0a:46:e7:37:ff:ed:33:1f: 08:f8:bd:0b:8d:3c:fb:65:05:7e:ee:ae:13:4a:ab: 49:e6:00:2f:a4:da:d5:c8:ed:15:f2:02:f1:f6:8c: a5:6f:80:f6:fe:81:24:88:00:9d:85:6d:e0:73:c2: d3:be:e5:3c:11:34:81:2c:cb:5d:a4:23:a2:7a:3c: 84:02:fd:01:6c:95:f6:b5:eb:4e:10:ca:63:dc:66: 00:b8:f1:04:2d:19:4a:9b:7b:2c:92:fd:8a:78:e2: 5d:e8:89:77:89:52:21:47:84:55:24:f4:5f:88:7c: a6:44:13:52:6a:f2:97:ca:7a:37:01:85:f0:8e:54: fc:05:3b:8f:3c:49:06:7b:e3:89:08:16:f3:28:1a: 95:7b:49:83:78:2a:c3:88:0f:05:51:d4:c3:ce:36: 46:d7:d8:f0:51:db:82:4d:85:24:8a:23:fe:a0:30: 49:a6:81:31:c6:d6:1d:c7:0b:37:5b:b7:47:6b:40: 31:3e:e6:ff:d8:c0:d9:19:e0:6c:f0:a3:c1:af:d4: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.52.0/22 IPv6: 2a0f:ad00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208202 Signature Algorithm: sha256WithRSAEncryption 32:8e:c1:46:67:10:ea:9a:2a:ad:f7:a5:ff:be:7e:a8:a6:6c: 91:dc:ac:c3:d0:e9:63:d5:6a:3d:1e:dd:fd:e0:bd:da:f2:e7: 5d:08:37:8d:be:7f:d1:e5:d1:ae:c3:18:fb:00:8f:91:df:85: 89:53:8e:0c:f3:fe:ce:7f:2c:e6:19:b9:1b:d4:a4:ea:18:85: b5:6c:9c:7d:77:1e:a1:d2:e8:9e:97:fa:ce:73:ba:a2:15:16: da:75:ad:22:0d:4c:4b:7c:ef:6c:d1:56:55:b9:81:a2:d2:0c: b9:62:9c:ff:60:9c:38:98:7c:1b:96:26:b1:eb:7a:d4:53:76: a5:eb:7e:f9:79:ec:7d:f3:db:4c:b3:a8:ee:a1:05:ce:24:94: 06:91:a0:ce:bc:df:0a:fe:13:49:0c:94:43:32:f6:c1:b5:42: 65:e0:35:aa:51:5d:ad:5d:2e:a6:dd:f8:50:de:18:60:d9:d5: ff:fd:85:59:25:71:0e:6c:ed:cb:4d:2d:b9:28:e4:ad:e4:d0: cd:f2:a0:e6:c3:51:ca:21:25:63:6a:f8:6e:bb:5a:5d:7f:8c: a0:7c:4c:e8:57:7f:0c:8e:56:e8:86:d8:fb:24:46:85:87:26: 50:c0:d9:57:a5:56:a9:0f:e6:c7:f7:ab:51:44:38:7e:fd:95: 04:1e:87:23 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hP8Qm6OZWJvROX2VyKSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE3MGVlODU5ZTkxZjQ5NzNkZTRhNTcyYjFiYWQyZjNhNWQxODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRsKqY17vPP22EIJW6Cpfz3SYFaI A00QPwwkeeSfwbOXla2QWFkfb3iaDy7BTqfHk0DmCkbnN//tMx8I+L0LjTz7ZQV+ 7q4TSqtJ5gAvpNrVyO0V8gLx9oylb4D2/oEkiACdhW3gc8LTvuU8ETSBLMtdpCOi ejyEAv0BbJX2tetOEMpj3GYAuPEELRlKm3sskv2KeOJd6Il3iVIhR4RVJPRfiHym RBNSavKXyno3AYXwjlT8BTuPPEkGe+OJCBbzKBqVe0mDeCrDiA8FUdTDzjZG19jw UduCTYUkiiP+oDBJpoExxtYdxws3W7dHa0AxPub/2MDZGeBs8KPBr9R83wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFA4XDuhZ6R9Jc95KVysbrS86XRglMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2NmNzIw ZS00ZDMzLTRkYjEtODZlOS1mYzJlYzRiYjU5NjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvY2Y3MjBl LTRkMzMtNGRiMS04NmU5LWZjMmVjNGJiNTk2Ny8xL0RoY082Rm5wSDBsejNrcFhL eHV0THpwZEdDVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZo0MA0EAgACMAcDBQMqD60AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtSjANBgkqhkiG9w0BAQsFAAOCAQEAMo7BRmcQ6poq rfel/75+qKZskdysw9DpY9VqPR7d/eC92vLnXQg3jb5/0eXRrsMY+wCPkd+FiVOO DPP+zn8s5hm5G9Sk6hiFtWycfXceodLonpf6znO6ohUW2nWtIg1MS3zvbNFWVbmB otIMuWKc/2CcOJh8G5Ymset61FN2pet++XnsffPbTLOo7qEFziSUBpGgzrzfCv4T SQyUQzL2wbVCZeA1qlFdrV0upt34UN4YYNnV//2FWSVxDmzty00tuSjkreTQzfKg 5sNRyiElY2r4brtaXX+MoHxM6Fd/DI5W6IbY+yRGhYcmUMDZV6VWqQ/mx/erUUQ4 fv2VBB6HIw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:52 2026 by rpki-client