This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer File: DloI_DRpD1LbDCt-R-jlOIMUWpg.cer (raw, json) Hash identifier: t2Bzm6LBqO6eXOp1tOlSqlwcDObEunPf/UWYfWeC1A8= Subject key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2143109AAA1DF5BF74954CF7F1576 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210360 IP: 2001:678:b24::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:14:31:09:aa:a1:df:5b:f7:49:54:cf:7f:15:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:29:03:30:ae:ff:df:1d:44:fd:4e:ff:ae:59: 78:8e:db:54:cd:c1:70:5f:f3:e0:b2:95:9b:d5:c5: 2f:76:f6:b4:6a:28:33:d5:45:00:7c:dc:b5:99:6b: b0:22:91:4c:bf:5f:af:90:4a:95:a8:fd:67:c4:f7: f1:e6:15:2c:4d:c7:6a:67:7f:46:56:41:51:59:07: e8:cf:bf:d1:48:05:9d:e4:46:fe:dc:f6:be:a3:79: d0:d9:4e:40:80:98:fe:6f:19:f4:e3:92:46:8c:ed: 47:57:eb:40:8f:d1:ad:04:3f:36:f9:d5:91:6b:7c: 97:ae:5f:8b:1e:ac:1b:12:dc:ea:dd:ef:13:c6:13: 71:0e:e3:4a:6f:b7:04:f1:b3:48:44:5a:74:c9:55: 85:9a:6b:81:93:db:18:9d:63:ab:d5:81:cd:da:64: e3:9a:9a:ea:95:2d:d8:98:24:ff:de:31:0e:4a:ac: 74:f7:4f:68:24:8b:d0:05:f5:c8:89:b6:89:b0:63: 35:35:d3:dc:dd:c3:ac:48:b4:01:70:3d:d7:38:b5: 1b:a6:3e:8f:cb:43:17:ab:c0:a1:ae:a2:73:f3:74: 6b:fa:ad:3d:7f:65:1b:ef:6a:6e:89:37:fa:3a:7c: 86:34:09:1a:ae:9f:a0:99:8f:fa:d2:41:0c:69:b7: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b24::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210360 Signature Algorithm: sha256WithRSAEncryption 14:f8:d5:28:c3:c5:bd:74:a1:85:99:02:3f:fe:f3:ef:06:18: d2:ac:49:9d:45:14:22:86:b6:1c:81:19:b2:0f:38:4e:01:dd: 07:69:07:c8:58:46:a8:f3:6f:1c:c6:21:4c:ed:bd:cf:8c:70: 78:c5:9f:53:85:c0:c9:96:06:4e:fc:c4:64:8a:84:32:75:9f: 2b:0f:2d:78:00:22:cd:8f:67:3f:5b:fa:cd:43:82:ba:d7:20: 97:9c:9d:67:70:ff:42:b8:3b:cf:ab:4d:26:e3:15:d5:fd:f0: e9:c0:85:8e:ab:bd:3f:ba:bd:bd:27:1b:a8:49:ad:b5:2f:c6: 68:3b:61:1f:c9:a6:2a:3c:77:a4:9d:ed:b5:c5:6e:d1:9f:29: d8:51:ce:59:cc:8e:1e:3e:1f:1c:82:89:41:42:d9:5b:2b:1e: a7:23:ab:57:1b:06:5b:f0:85:9a:e6:b0:7d:b9:f0:57:9e:37: 48:fe:df:a3:66:67:b0:79:25:1f:76:35:27:6c:f2:9d:38:24: 5b:99:df:c4:49:d1:dd:55:5f:07:01:8c:23:76:6c:03:83:36: 4f:03:c9:78:57:b6:59:28:08:da:66:88:ba:da:b3:4b:26:61: 31:b3:f7:9b:ef:2a:fe:59:9e:e8:4c:b0:57:69:25:32:c9:ad: 6b:d3:9b:9c -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4ohQxCaqh31v3SVTPfxV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTVhMDhmYzM0NjkwZjUyZGIwYzJiN2U0N2U4ZTUzODgzMTQ1YTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SkDMK7/3x1E/U7/rll4jttUzcFw X/PgspWb1cUvdva0aigz1UUAfNy1mWuwIpFMv1+vkEqVqP1nxPfx5hUsTcdqZ39G VkFRWQfoz7/RSAWd5Eb+3Pa+o3nQ2U5AgJj+bxn045JGjO1HV+tAj9GtBD82+dWR a3yXrl+LHqwbEtzq3e8TxhNxDuNKb7cE8bNIRFp0yVWFmmuBk9sYnWOr1YHN2mTj mprqlS3YmCT/3jEOSqx0909oJIvQBfXIibaJsGM1NdPc3cOsSLQBcD3XOLUbpj6P y0MXq8ChrqJz83Rr+q09f2Ub72puiTf6OnyGNAkarp+gmY/60kEMabd+kQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFA5aCPw0aQ9S2wwrfkfo5TiDFFqYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzAxNzg0 OS03Y2NmLTQ4MTUtYmM2OS1hNzdmMGIzMjE0NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMDE3ODQ5 LTdjY2YtNDgxNS1iYzY5LWE3N2YwYjMyMTQ0ZS8xL0Rsb0lfRFJwRDFMYkRDdC1S LWpsT0lNVVdwZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAskMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM1uDANBgkqhkiG9w0BAQsFAAOCAQEAFPjVKMPFvXShhZkCP/7z7wYY0qxJ nUUUIoa2HIEZsg84TgHdB2kHyFhGqPNvHMYhTO29z4xweMWfU4XAyZYGTvzEZIqE MnWfKw8teAAizY9nP1v6zUOCutcgl5ydZ3D/Qrg7z6tNJuMV1f3w6cCFjqu9P7q9 vScbqEmttS/GaDthH8mmKjx3pJ3ttcVu0Z8p2FHOWcyOHj4fHIKJQULZWysepyOr VxsGW/CFmuawfbnwV543SP7fo2ZnsHklH3Y1J2zynTgkW5nfxEnR3VVfBwGMI3Zs A4M2TwPJeFe2WSgI2maIutqzSyZhMbP3m+8q/lme6EywV2klMsmta9ObnA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:27 2026 by rpki-client