This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer File: DigOW_CXDHM8w0vBvnkmdZrDHe0.cer (raw, json) Hash identifier: 8SKPpQf828dWi9+TPojhG5oCnm+UUUQcTVcioKKbOdo= Subject key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF05B06DBC0E79B25812BDA7C9920D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197916 IP: 91.228.169.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:5b:06:db:c0:e7:9b:25:81:2b:da:7c:99:20:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:14:a2:8b:ea:e6:75:06:7d:ab:08:7e:29: 69:a6:1c:8c:90:53:1c:74:29:79:c0:fa:78:e2:4c: 5f:86:a3:f3:36:48:8a:59:15:6c:a5:8f:90:bf:41: d3:1a:ac:7d:74:48:41:96:56:ba:0c:9b:37:0e:bd: 9e:87:60:77:77:1c:63:a3:8c:31:0f:aa:58:15:b4: 59:0a:7b:ea:e8:5a:4b:8c:5e:5c:35:84:67:77:20: bc:9e:f3:0b:16:ce:57:46:68:ca:3a:67:5e:ee:12: a4:4a:90:85:79:d1:fc:3a:bb:7a:ee:4b:f6:36:3a: 4b:e3:9a:4f:3e:7e:9b:68:e2:46:ac:84:86:3b:e4: 62:71:80:af:8d:77:19:94:38:9f:a9:e5:39:d6:71: 5b:d9:12:23:31:2f:1e:78:08:fa:c1:67:48:3b:dc: 4c:09:e1:a0:1d:84:12:21:e2:09:e5:6f:bd:77:05: dd:0a:59:b9:4e:73:fa:0e:4f:c5:42:84:57:12:e6: 6f:12:4a:4f:c9:d5:76:c8:07:f9:bb:1f:e6:4e:73: 50:67:2b:93:56:9b:4c:37:bb:42:f5:5b:37:dc:c9: 9f:a0:28:50:9c:7c:cc:98:00:c7:fa:41:d7:36:9b: 35:7d:43:27:23:b8:02:1b:c0:df:bf:a9:1c:9e:df: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.169.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197916 Signature Algorithm: sha256WithRSAEncryption ae:d1:d9:4e:ec:b8:d0:0f:c0:fe:5d:f2:64:a6:9e:06:db:65: 72:2f:c9:ec:47:5a:7c:4b:0a:49:a2:d5:36:65:de:24:0b:78: 71:c1:86:81:e1:2b:aa:a4:6a:7f:53:f3:d5:42:f9:a9:c5:5b: f6:9d:42:6b:cf:5e:42:72:08:0a:4f:08:74:10:7a:e6:4c:a0: 8a:61:ab:70:9c:c0:44:78:b3:89:f1:fa:2e:3c:03:35:5d:97: 3a:27:14:a7:d7:e1:cd:03:9f:92:0b:8e:d2:32:2e:5b:6f:ec: 5d:5b:4f:ae:da:8a:a8:c5:cc:cc:92:99:85:b5:c7:bb:29:a6: ba:f4:e3:81:86:54:1e:03:b9:cf:2a:bc:7b:07:77:14:a4:a7: 09:b5:b4:18:4f:5b:ed:11:91:1e:81:90:06:f4:84:93:08:11: c2:65:80:84:f6:0b:cb:02:bb:41:c7:76:ce:9c:20:15:6b:80: 37:c6:74:9d:db:6d:53:28:00:9d:fa:e2:b8:28:8e:8c:0e:ce: 5b:d0:17:c9:66:aa:c9:9f:78:a2:50:2b:7f:ae:87:32:f7:b4: 1b:1e:af:17:6c:0f:ba:be:a7:2e:b9:5f:3d:b8:d2:7c:5a:8c: b2:d4:cf:81:ed:c8:9c:8a:b0:f6:9e:c4:0a:e6:10:6f:1d:51: ef:9a:65:f8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8FsG28DnmyWBK9p8mSDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTI4MGU1YmYwOTcwYzczM2NjMzRiYzFiZTc5MjY3NTlhYzMxZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiIUoovq5nUGfasIfilpphyMkFMc dCl5wPp44kxfhqPzNkiKWRVspY+Qv0HTGqx9dEhBlla6DJs3Dr2eh2B3dxxjo4wx D6pYFbRZCnvq6FpLjF5cNYRndyC8nvMLFs5XRmjKOmde7hKkSpCFedH8Ort67kv2 NjpL45pPPn6baOJGrISGO+RicYCvjXcZlDifqeU51nFb2RIjMS8eeAj6wWdIO9xM CeGgHYQSIeIJ5W+9dwXdClm5TnP6Dk/FQoRXEuZvEkpPydV2yAf5ux/mTnNQZyuT VptMN7tC9Vs33MmfoChQnHzMmADH+kHXNps1fUMnI7gCG8Dfv6kcnt8B1wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFA4oDlvwlwxzPMNLwb55JnWawx3tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzcxZjBj My0yN2RmLTQ2YjgtODk1YS0zNjU4M2MxNjVkYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNzFmMGMz LTI3ZGYtNDZiOC04OTVhLTM2NTgzYzE2NWRjOS8xL0RpZ09XX0NYREhNOHcwdkJ2 bmttZFpyREhlMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+SpMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMFHDANBgkqhkiG9w0BAQsFAAOCAQEArtHZTuy40A/A/l3yZKaeBttlci/J7Eda fEsKSaLVNmXeJAt4ccGGgeErqqRqf1Pz1UL5qcVb9p1Ca89eQnIICk8IdBB65kyg imGrcJzARHizifH6LjwDNV2XOicUp9fhzQOfkguO0jIuW2/sXVtPrtqKqMXMzJKZ hbXHuymmuvTjgYZUHgO5zyq8ewd3FKSnCbW0GE9b7RGRHoGQBvSEkwgRwmWAhPYL ywK7Qcd2zpwgFWuAN8Z0ndttUygAnfriuCiOjA7OW9AXyWaqyZ94olArf66HMve0 Gx6vF2wPur6nLrlfPbjSfFqMstTPge3InIqw9p7ECuYQbx1R75pl+A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:39 2026 by rpki-client