This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer (raw, json) Hash identifier: +Gaq8hdSd1CO3uxSN/uQKq3KP5FrfFA6TG/9veSiiYM= Subject key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CDBAFBB4B9133FBCFD01DD46CB0B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.49.72.0/24 IP: 194.49.110.0/24 IP: 194.55.158.0/24 IP: 2001:678:e9c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:db:af:bb:4b:91:33:fb:cf:d0:1d:d4:6c:b0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:cf:93:36:15:b7:65:96:6b:3f:a5:a4:8e: 8d:ab:e5:b7:7e:b3:9d:39:c5:e0:61:1a:0f:15:f2: 50:e2:f6:49:d9:eb:db:3e:14:4d:27:1b:bd:fa:8b: 4d:8e:88:ed:52:67:e9:3c:62:35:44:3c:23:d9:1a: 0f:9f:3b:bb:15:e3:12:7a:31:b3:9b:42:05:bb:b5: 30:f5:f5:05:bc:ff:9e:c4:9b:a3:a6:f1:52:8b:5c: 88:8c:ce:03:d1:1d:a4:02:0f:e8:ff:3d:76:75:e8: f0:01:d5:d2:c5:95:ba:9d:28:96:4c:07:7e:1e:b1: 7f:bd:b4:da:3d:39:b6:77:7c:7e:57:41:96:38:3d: 2c:b4:80:60:88:7a:cf:cb:90:75:79:f9:91:9a:67: 89:0a:1f:bd:b3:17:ca:ae:66:1e:d6:73:4c:35:ed: 1e:37:ce:b2:fb:14:a6:05:68:c6:7e:86:5e:ff:64: e0:1f:56:c8:93:fa:5b:55:0a:35:25:04:a5:01:22: 85:1a:cc:7b:ba:15:de:65:a2:63:09:3a:81:16:79: 80:43:54:9e:90:a9:3e:07:4c:72:f7:86:7f:41:c9: 99:c5:f5:87:4f:db:f9:a2:4a:f1:42:c0:d9:62:ea: ec:32:06:cf:a9:2f:2b:fa:fc:d1:a3:a4:f7:87:08: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.72.0/24 194.49.110.0/24 194.55.158.0/24 IPv6: 2001:678:e9c::/48 Signature Algorithm: sha256WithRSAEncryption 9e:2b:3f:90:79:d2:5e:c2:ec:17:8a:ae:fd:99:d6:c1:dc:94: 27:11:02:e5:ec:71:24:b7:eb:18:86:1f:43:f4:d5:9a:ae:aa: a8:36:41:9b:42:93:c4:78:a0:34:7a:98:8c:89:c1:89:5b:25: 5b:ba:f0:37:64:f3:3d:d0:0e:36:e5:cf:db:6b:55:2b:46:0c: 4d:f3:00:d7:d3:9a:eb:18:02:92:d3:85:5f:d2:e4:96:8c:9b: 4a:cf:3f:47:ff:ef:89:c8:e5:11:d6:25:84:21:99:37:c5:a9: 57:c3:a9:5f:5a:20:a5:c9:91:4e:21:af:52:65:11:2d:45:22: 90:51:be:60:1f:43:42:80:3d:84:63:1e:d1:9c:c9:39:ce:cd: 4a:db:51:89:8e:c1:cb:c6:b2:27:a2:75:13:03:a2:12:cd:04: 51:70:2a:57:2d:a2:6e:ca:bd:c6:cf:48:85:1a:fa:71:4b:61: 12:56:f0:98:12:a4:97:e2:ed:8f:22:78:12:ba:56:1b:b4:1e: 84:03:6d:a9:dc:17:e1:40:7f:83:e2:b5:49:f4:d7:6b:98:c1: 01:45:86:af:e5:2d:09:a4:b8:75:c7:7e:a8:93:fb:c3:b6:6b: 47:42:e9:c3:d7:09:a0:c5:93:34:18:5d:8d:c7:93:b3:cf:bf: 70:ff:e9:13 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt9XNuvu0uRM/vP0B3UbLCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTU2YzllNThkOTZhZjFlNDEzMGQ3MjI0MjIxMTkyYjJjMTMyYTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJDPkzYVt2WWaz+lpI6Nq+W3frOd OcXgYRoPFfJQ4vZJ2evbPhRNJxu9+otNjojtUmfpPGI1RDwj2RoPnzu7FeMSejGz m0IFu7Uw9fUFvP+exJujpvFSi1yIjM4D0R2kAg/o/z12dejwAdXSxZW6nSiWTAd+ HrF/vbTaPTm2d3x+V0GWOD0stIBgiHrPy5B1efmRmmeJCh+9sxfKrmYe1nNMNe0e N86y+xSmBWjGfoZe/2TgH1bIk/pbVQo1JQSlASKFGsx7uhXeZaJjCTqBFnmAQ1Se kKk+B0xy94Z/QcmZxfWHT9v5okrxQsDZYursMgbPqS8r+vzRo6T3hwh5cwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFA5WyeWNlq8eQTDXIkIhGSssEypcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzRjODIw OC1iYTMwLTQ3MTYtYTZjOC04NGYzNTI0NjI2YmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNGM4MjA4 LWJhMzAtNDcxNi1hNmM4LTg0ZjM1MjQ2MjZiZC8xL0RsYko1WTJXcng1Qk1OY2lR aUVaS3l3VEtsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAYBAIAATASAwQAwjFIAwQAwjFuAwQAwjeeMA8EAgACMAkDBwAg AQZ4DpwwDQYJKoZIhvcNAQELBQADggEBAJ4rP5B50l7C7BeKrv2Z1sHclCcRAuXs cSS36xiGH0P01Zquqqg2QZtCk8R4oDR6mIyJwYlbJVu68Ddk8z3QDjblz9trVStG DE3zANfTmusYApLThV/S5JaMm0rPP0f/74nI5RHWJYQhmTfFqVfDqV9aIKXJkU4h r1JlES1FIpBRvmAfQ0KAPYRjHtGcyTnOzUrbUYmOwcvGsieidRMDohLNBFFwKlct om7KvcbPSIUa+nFLYRJW8JgSpJfi7Y8ieBK6Vhu0HoQDbancF+FAf4PitUn012uY wQFFhq/lLQmkuHXHfqiT+8O2a0dC6cPXCaDFkzQYXY3Hk7PPv3D/6RM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:32 2026 by rpki-client