This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer File: DlNS2UQbZcIBbtjrfi8jWVRDT10.cer (raw, json) Hash identifier: k7hnWfDHXm0wvmt7qA7Ex/U/PooD2YessJaWQyHDkOY= Subject key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA32B24E6E177B065010D42CAE05954 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212183 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2b:24:e6:e1:77:b0:65:01:0d:42:ca:e0:59:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:e5:6b:78:3f:1e:6e:a7:10:55:77:9c:1e: 6f:45:17:47:1d:3e:27:a0:30:00:e5:2c:38:e9:02: 7e:74:6c:c3:fb:81:5c:6c:c8:27:c8:4c:30:01:d6: a2:0b:4c:5a:d1:97:07:4b:98:c1:e6:81:77:29:83: 91:af:99:ff:c1:72:85:1c:6e:f4:ac:d4:0a:d1:26: 02:63:c9:ff:ee:61:5f:04:07:a8:c6:e1:bd:25:0d: ce:28:25:a4:d7:a5:d2:51:f6:5c:cd:91:b1:6e:49: 8f:b7:e2:41:9b:1a:57:88:59:ce:f5:1f:fe:60:6b: 9f:ce:bc:d4:35:cc:cd:03:08:80:bd:f9:a0:d7:07: 71:1a:3a:b4:2d:72:9a:cb:41:1e:db:47:18:03:0d: 11:79:ae:a7:ef:b1:4c:4a:92:7f:cf:85:b9:db:50: 44:68:a6:eb:eb:a3:7d:c2:98:a8:0d:73:00:1d:26: 97:88:68:74:a1:11:da:a1:54:57:85:c5:08:6f:4f: 4f:13:b2:65:32:bf:33:cc:9a:05:ae:0b:85:e6:b9: a8:96:0e:64:7f:6b:9c:c8:f4:c5:ab:24:ad:7b:9f: f6:ac:14:10:92:72:5d:b4:e6:82:47:5b:7f:cb:0d: dd:ba:a0:cb:c4:0e:b1:90:f1:c2:79:99:f4:80:d6: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212183 Signature Algorithm: sha256WithRSAEncryption 44:2d:9f:95:eb:cc:ca:8c:fb:ef:5c:f0:71:61:ae:20:6b:00: d0:fd:84:a5:ed:38:c4:d1:c8:12:b5:0c:ec:d4:5e:16:f2:2d: b8:f6:1e:5a:e4:dd:d4:8f:1a:98:e1:50:1f:eb:84:17:57:86: f7:d6:5a:8b:4e:e6:b3:ac:da:dc:66:80:c0:65:0a:85:04:05: 4a:77:9a:4e:5d:f1:2a:aa:54:df:28:fe:4b:ce:3d:1c:f5:b9: f9:cf:e5:49:d0:5a:5d:43:65:d3:a7:51:62:8c:6a:7b:72:60: c1:17:b7:a9:89:31:4c:cb:be:8f:85:9c:2c:af:b8:5e:77:65: c5:c5:c2:80:1c:bd:88:83:62:57:a1:be:3d:c6:f0:39:e3:0f: cd:a2:94:f8:8b:fc:b2:9c:a0:09:fe:7b:92:46:28:1a:4d:02: 70:93:5d:79:3f:ce:cd:74:63:1f:8e:c3:e8:b7:7c:c2:13:7c: 82:bc:5a:e0:2f:17:66:5c:b1:52:b1:3e:f2:19:68:6c:a5:4a: c3:7b:02:21:49:7d:54:ab:91:27:87:6e:ef:3f:90:6c:dd:d1: 2a:5d:30:e8:07:ec:9a:a5:4a:ef:0c:b3:f5:1e:a9:85:53:6a: 12:c5:0b:ea:5c:e6:d8:29:c2:56:a9:b4:f8:fe:61:6d:c7:5c: c6:d9:fe:a0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7oysk5uF3sGUBDULK4FlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTUzNTJkOTQ0MWI2NWMyMDE2ZWQ4ZWI3ZTJmMjM1OTU0NDM0ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZPla3g/Hm6nEFV3nB5vRRdHHT4n oDAA5Sw46QJ+dGzD+4FcbMgnyEwwAdaiC0xa0ZcHS5jB5oF3KYORr5n/wXKFHG70 rNQK0SYCY8n/7mFfBAeoxuG9JQ3OKCWk16XSUfZczZGxbkmPt+JBmxpXiFnO9R/+ YGufzrzUNczNAwiAvfmg1wdxGjq0LXKay0Ee20cYAw0Rea6n77FMSpJ/z4W521BE aKbr66N9wpioDXMAHSaXiGh0oRHaoVRXhcUIb09PE7JlMr8zzJoFrguF5rmolg5k f2ucyPTFqySte5/2rBQQknJdtOaCR1t/yw3duqDLxA6xkPHCeZn0gNa2zQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFA5TUtlEG2XCAW7Y634vI1lUQ09dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzFmNTY4 MS1iMTA1LTRmZjEtOWJmNC1hZGM1NmQ0M2UwYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvMWY1Njgx LWIxMDUtNGZmMS05YmY0LWFkYzU2ZDQzZTBjNC8xL0RsTlMyVVFiWmNJQmJ0anJm aThqV1ZSRFQxMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM81zANBgkqhkiG9w0BAQsFAAOCAQEARC2flevMyoz7 71zwcWGuIGsA0P2Epe04xNHIErUM7NReFvItuPYeWuTd1I8amOFQH+uEF1eG99Za i07ms6za3GaAwGUKhQQFSneaTl3xKqpU3yj+S849HPW5+c/lSdBaXUNl06dRYoxq e3JgwRe3qYkxTMu+j4WcLK+4XndlxcXCgBy9iINiV6G+PcbwOeMPzaKU+Iv8spyg Cf57kkYoGk0CcJNdeT/OzXRjH47D6Ld8whN8grxa4C8XZlyxUrE+8hlobKVKw3sC IUl9VKuRJ4du7z+QbN3RKl0w6AfsmqVK7wyz9R6phVNqEsUL6lzm2CnCVqm0+P5h bcdcxtn+oA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:32 2026 by rpki-client