This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer (raw, json) Hash identifier: i5CCPNpEkUL/hNXMq7N9al+vSB3220TDwBkVaTnFrWQ= Subject key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5B71CC67069E07A84F01AD0B488BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212832 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:b7:1c:c6:70:69:e0:7a:84:f0:1a:d0:b4:88:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e29a482de0d56746c3045269f99205204f95484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:8b:32:c2:42:56:32:ac:27:0a:b9:05:45: 46:f5:be:e6:43:86:2f:1e:41:71:8b:a7:9e:58:14: 8c:41:91:f6:1d:07:f6:ea:08:17:f3:16:66:ff:ce: 42:e0:ee:ab:39:b7:bd:d2:78:f6:9f:e7:c5:d4:2e: ff:eb:0e:93:06:7b:48:05:f2:ae:dc:82:bc:22:2d: 37:4f:0f:d9:2c:b1:0a:b7:d0:f6:38:a0:84:34:aa: d8:1a:19:dd:7e:45:f7:b6:19:14:6f:40:3c:b7:67: 3b:7d:90:8d:a3:f8:84:7a:c6:14:91:16:b8:7d:99: ba:a8:8e:55:c6:37:d6:3a:ab:94:7a:ea:c8:2f:a9: ae:57:da:82:68:ef:70:b1:0e:90:b5:b2:34:e6:58: de:a5:c9:75:d1:53:cb:f3:ec:a8:bb:95:18:e2:c2: 31:93:18:c3:8a:12:b5:69:6c:56:fc:71:7b:5e:08: 16:a1:d3:2a:c2:d8:10:8f:e0:23:b7:fc:62:a8:04: 2a:0a:e8:af:64:f0:c2:eb:c0:3c:ab:19:4e:2f:5a: 2d:a9:6b:6a:94:c8:79:57:54:db:42:d2:c6:0c:0d: bd:33:52:fd:e4:87:82:52:f0:af:99:43:a4:31:28: 02:c5:d6:2a:bd:7e:b8:5d:b5:a6:0f:da:22:c3:7d: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212832 Signature Algorithm: sha256WithRSAEncryption 52:bd:e5:df:f9:f7:37:8d:07:85:02:48:ec:c9:ad:48:24:2a: 50:ba:c1:c0:5d:11:88:9b:71:ee:ab:24:2f:fc:d7:70:bd:87: af:69:0a:bf:7b:c6:0a:a4:1b:64:57:20:09:73:fd:56:d1:b6: 29:bc:ce:d0:57:b4:dc:a7:44:1c:88:38:21:b6:01:41:71:a9: ab:f6:ef:24:cd:45:d2:d0:95:e4:7f:8d:91:36:ee:a2:8b:96: 0d:16:62:3e:ba:e9:02:4f:db:a5:8c:8d:5f:14:cf:32:7e:10: d5:aa:e5:63:25:30:50:2f:35:79:f4:a2:e1:06:9f:4f:ec:36: 6e:ed:a5:64:80:04:4e:e4:b3:30:a1:0f:90:46:31:7a:3b:0a: 57:d6:2d:13:a7:7e:1e:17:0d:f8:9c:5f:c5:56:56:78:e4:d9: 9f:fc:8b:76:ea:c4:e2:05:6a:d2:b2:b3:62:ad:a2:13:2d:8f: e5:36:23:fe:df:09:be:f0:66:c0:af:60:a2:09:42:d7:0a:9a: 8f:9f:ab:88:66:4d:d4:ee:6f:f8:44:60:85:d3:1a:eb:58:8a: 98:a7:3f:f2:ee:c1:71:33:13:39:b0:d0:3f:49:07:63:20:6d: e0:58:74:94:60:37:d0:29:81:81:4c:4e:95:59:11:03:f5:f7: 63:85:df:c2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+pbccxnBp4HqE8BrQtIi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTI5YTQ4MmRlMGQ1Njc0NmMzMDQ1MjY5Zjk5MjA1MjA0Zjk1NDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbSLMsJCVjKsJwq5BUVG9b7mQ4Yv HkFxi6eeWBSMQZH2HQf26ggX8xZm/85C4O6rObe90nj2n+fF1C7/6w6TBntIBfKu 3IK8Ii03Tw/ZLLEKt9D2OKCENKrYGhndfkX3thkUb0A8t2c7fZCNo/iEesYUkRa4 fZm6qI5VxjfWOquUeurIL6muV9qCaO9wsQ6QtbI05ljepcl10VPL8+you5UY4sIx kxjDihK1aWxW/HF7XggWodMqwtgQj+Ajt/xiqAQqCuivZPDC68A8qxlOL1otqWtq lMh5V1TbQtLGDA29M1L95IeCUvCvmUOkMSgCxdYqvX64XbWmD9oiw33pdwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFA4ppILeDVZ0bDBFJp+ZIFIE+VSEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzE0YTI3 My04Yjc1LTQ3NmMtYjllMy04YmJkOTM5NDBlZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvMTRhMjcz LThiNzUtNDc2Yy1iOWUzLThiYmQ5Mzk0MGVlZi8xL0RpbWtndDROVm5Sc01FVW1u NWtnVWdUNVZJUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/YDANBgkqhkiG9w0BAQsFAAOCAQEAUr3l3/n3N40H hQJI7MmtSCQqULrBwF0RiJtx7qskL/zXcL2Hr2kKv3vGCqQbZFcgCXP9VtG2KbzO 0Fe03KdEHIg4IbYBQXGpq/bvJM1F0tCV5H+NkTbuoouWDRZiPrrpAk/bpYyNXxTP Mn4Q1arlYyUwUC81efSi4QafT+w2bu2lZIAETuSzMKEPkEYxejsKV9YtE6d+HhcN +JxfxVZWeOTZn/yLdurE4gVq0rKzYq2iEy2P5TYj/t8JvvBmwK9goglC1wqaj5+r iGZN1O5v+ERghdMa61iKmKc/8u7BcTMTObDQP0kHYyBt4Fh0lGA30CmBgUxOlVkR A/X3Y4Xfwg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:13 2026 by rpki-client