This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer (raw, json) Hash identifier: O2l8F62OX0WDHDaey4OjNQWXa5pdT/fpn/a3vEWwknU= Subject key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C32551C816CA32756DFF998907777E404 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 06 Feb 2026 09:42:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20959 IP: 80.204.0.0/14 IP: 81.112.0.0 -- 81.125.255.255 IP: 217.222.0.0/15 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:55:1c:81:6c:a3:27:56:df:f9:98:90:77:77:e4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 6 09:42:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:3d:28:8d:c2:62:23:95:8e:e0:04:08:6f: 18:6d:72:1d:0f:0c:14:e1:82:be:d2:44:9a:4c:3b: 21:42:1c:f0:05:f9:53:cb:7a:cc:f8:ec:05:53:c5: d5:81:c4:22:c3:8b:d2:23:ef:32:70:2c:9f:e7:46: 2a:a1:8b:e1:88:7b:38:7c:2f:1c:01:d9:3e:f2:11: 11:4b:eb:be:39:7c:f6:5c:f0:7f:4f:da:dd:0a:96: 2a:c4:2d:a5:5a:91:4a:4c:7b:08:09:a1:14:bf:08: f5:23:e1:43:b3:48:82:27:27:a4:1f:90:7b:1e:ac: b3:de:93:30:77:23:a6:31:7a:11:7b:72:d4:a3:51: 5c:56:f1:fe:75:df:65:f4:ac:d3:2a:42:c8:74:0e: 57:6a:98:da:2d:18:96:74:ba:f7:13:3c:9f:3b:c5: 92:d7:9c:90:22:3e:bf:d8:67:b8:d9:64:96:ad:5f: 8f:c7:31:cb:88:60:b5:c4:23:c1:9c:4d:17:e7:22: d1:1d:df:cc:af:9d:9b:b0:d4:5a:ff:2b:08:90:24: 5b:03:d6:7f:1a:ca:58:53:2f:d5:ef:91:79:8b:4e: 0e:4e:1a:1f:f4:e9:e1:10:61:ac:4a:6e:7d:58:38: da:52:67:38:47:68:da:c9:c1:44:ce:d3:2b:cf:1f: 74:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.204.0.0/14 81.112.0.0-81.125.255.255 217.222.0.0/15 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20959 Signature Algorithm: sha256WithRSAEncryption 1a:52:8a:f5:32:fb:2f:ae:ea:d9:ff:03:29:6b:7f:5d:09:63: 33:75:7a:f5:f0:1b:6c:34:a4:23:a1:c5:95:66:22:82:e0:2f: 0e:87:de:6c:24:e3:45:a5:3a:80:cf:90:e4:a2:5d:6f:ed:3a: 4d:42:04:68:ce:f0:e0:2e:58:71:f1:15:f5:70:b6:cf:51:15: e1:cc:a9:96:e3:87:65:bd:f1:51:b6:ee:bb:51:6a:21:1f:64: 31:22:25:e3:1f:8a:5e:d2:3d:57:8d:22:d5:e6:0a:26:e7:5c: e5:84:7d:9d:db:c8:9e:7e:35:6d:38:4a:75:50:38:14:be:a3: 10:74:4e:3c:8a:2f:b3:54:bc:8b:47:e4:86:4c:03:bf:41:ce: 6b:50:3d:bf:4d:df:2c:e6:4c:34:dd:02:d6:23:c4:90:43:c9: 5a:27:4c:e1:11:01:6b:38:89:23:82:ac:33:37:67:99:2c:9e: 59:2c:ca:9b:62:5a:bf:7e:e4:8e:97:5f:f7:d8:9c:23:74:d3: 4f:b9:ee:c8:fe:63:52:12:7c:9e:03:ee:1f:ad:8a:9c:8f:b8: c2:85:c0:15:6d:6b:29:83:de:fd:14:e8:c5:72:d4:92:44:43: 72:12:2c:10:fe:cb:f5:52:c9:9f:8c:2d:b6:4d:53:21:fb:21: 10:e6:dd:3d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwyVRyBbKMnVt/5mJB3d+QEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA2MDk0MjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTQzZmI0MjViYzFjMzUyNTc3ZTBhOWFkZTViZmY1OWMwYjRjNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/k9KI3CYiOVjuAECG8YbXIdDwwU 4YK+0kSaTDshQhzwBflTy3rM+OwFU8XVgcQiw4vSI+8ycCyf50YqoYvhiHs4fC8c Adk+8hERS+u+OXz2XPB/T9rdCpYqxC2lWpFKTHsICaEUvwj1I+FDs0iCJyekH5B7 Hqyz3pMwdyOmMXoRe3LUo1FcVvH+dd9l9KzTKkLIdA5XapjaLRiWdLr3EzyfO8WS 15yQIj6/2Ge42WSWrV+PxzHLiGC1xCPBnE0X5yLRHd/Mr52bsNRa/ysIkCRbA9Z/ GspYUy/V75F5i04OThof9OnhEGGsSm59WDjaUmc4R2jaycFEztMrzx90FwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFA5D+0JbwcNSV34Kmt5b/1nAtMWCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlL2ZkMWE0 NS0zMTE4LTQxMWQtOGUxYi05MTFmMWRkZGQ2NmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvZmQxYTQ1 LTMxMTgtNDExZC04ZTFiLTkxMWYxZGRkZDY2Yi8xL0RrUDdRbHZCdzFKWGZncWEz bHZfV2NDMHhZSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC8GCCsGAQUF BwEHAQH/BCAwHjAcBAIAATAWAwMCUMwwCgMDBFFwAwMBUXwDAwHZ3jAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJR3zANBgkqhkiG9w0BAQsFAAOCAQEAGlKK9TL7L67q 2f8DKWt/XQljM3V69fAbbDSkI6HFlWYiguAvDofebCTjRaU6gM+Q5KJdb+06TUIE aM7w4C5YcfEV9XC2z1EV4cypluOHZb3xUbbuu1FqIR9kMSIl4x+KXtI9V40i1eYK Judc5YR9ndvInn41bThKdVA4FL6jEHROPIovs1S8i0fkhkwDv0HOa1A9v03fLOZM NN0C1iPEkEPJWidM4REBaziJI4KsMzdnmSyeWSzKm2Jav37kjpdf99icI3TTT7nu yP5jUhJ8ngPuH62KnI+4woXAFW1rKYPe/RToxXLUkkRDchIsEP7L9VLJn4wttk1T IfshEObdPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:33 2026 by rpki-client