This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer File: DmmmfUshWj8x_EYvDqU074P471c.cer (raw, json) Hash identifier: WKp/t8u6sHa+4BCD0TdNh7ALMdm854sVVHwJ0rPQcyY= Subject key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12034BA1FB5CAC8963E46B8E07E370 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:2064::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:03:4b:a1:fb:5c:ac:89:63:e4:6b:8e:07:e3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:b0:0b:5b:ca:23:6c:42:35:ea:7d:88:c6: 79:4a:e1:8a:31:ee:bf:bd:fa:c6:f8:b2:24:f2:29: de:22:d7:ac:4b:a7:d9:6b:bc:78:0e:9a:ac:39:c8: 9e:0a:fe:a1:8d:3e:fd:1a:e4:39:e6:40:3a:fc:dd: bb:f7:b9:23:a9:90:e7:c0:44:bc:a0:eb:2b:70:f0: fb:68:d1:03:04:b1:b4:66:8a:71:b1:c7:0f:b4:4e: 5c:da:6d:00:3a:53:82:f3:70:84:df:24:f5:fa:ef: bb:14:71:d3:ae:f2:b6:b9:18:0f:50:6f:10:f5:ad: 26:68:72:ce:c1:70:36:ac:8a:f9:b3:cf:d9:67:ed: 98:69:69:f6:7b:33:6c:f0:b9:e8:ba:ff:2d:50:b5: 71:b6:53:e2:86:a0:34:6e:36:14:dc:89:11:cc:66: eb:bc:0a:8c:03:be:6c:bf:80:ab:3e:d2:76:33:02: de:f6:b6:01:fc:52:2d:60:94:17:b5:be:25:eb:d0: a4:30:4e:47:c1:a9:c1:fd:c5:cb:58:76:fb:f9:33: bc:fc:8e:72:46:2e:14:b9:e9:0a:51:5f:b3:39:b0: b4:9c:d1:61:d2:cf:f2:1d:52:24:d4:4e:c8:d1:59: a5:30:bb:85:7d:71:3c:98:6b:25:9d:30:f8:3f:56: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2064::/48 Signature Algorithm: sha256WithRSAEncryption 45:69:55:e5:3c:4e:e7:68:ef:f2:96:dd:be:bd:52:73:9b:99: 82:2c:24:53:e1:a5:22:91:ab:a6:99:5e:66:d8:89:06:e5:9d: fd:c4:3a:ca:e2:1e:89:7b:0e:7c:89:60:f5:e0:f9:d9:02:64: e0:a9:f5:45:b3:7d:c2:c3:ce:bc:e7:c6:4b:dc:72:6e:16:c7: f2:b3:28:21:f2:7c:0b:f5:0c:06:e3:85:24:1d:ae:16:55:ba: 25:2b:4c:88:8d:90:7a:10:6a:6f:7e:aa:c5:38:d5:94:2b:48: 7e:d3:f0:f0:f3:4a:03:2d:11:a8:e5:18:f9:40:87:58:31:da: 5a:b4:bf:e2:88:c4:3f:54:cd:01:7f:64:71:59:a6:a6:64:93: 48:75:ce:a0:80:66:d1:53:2a:94:6e:72:26:08:c7:de:70:c4: 59:41:bb:04:d5:57:fb:28:ae:33:db:02:7e:ed:d4:d2:4a:8f: 45:82:cb:3f:d2:ea:7a:69:f8:7e:b5:99:53:5e:8a:b1:0f:16: 82:43:e9:6b:30:d8:ab:9f:02:bc:46:24:ad:c4:20:bc:34:ae: d1:97:b6:8d:ac:8b:ec:e1:73:6f:1a:c7:57:35:57:a2:7e:b8: 44:2b:65:b4:52:90:2a:94:6b:a5:e9:cf:e3:f9:31:e5:07:08: 2c:6a:40:e6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt8EgNLoftcrIlj5GuOB+NwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTY5YTY3ZDRiMjE1YTNmMzFmYzQ2MmYwZWE1MzRlZjgzZjhlZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtuwC1vKI2xCNep9iMZ5SuGKMe6/ vfrG+LIk8ineItesS6fZa7x4DpqsOcieCv6hjT79GuQ55kA6/N2797kjqZDnwES8 oOsrcPD7aNEDBLG0ZopxsccPtE5c2m0AOlOC83CE3yT1+u+7FHHTrvK2uRgPUG8Q 9a0maHLOwXA2rIr5s8/ZZ+2YaWn2ezNs8Lnouv8tULVxtlPihqA0bjYU3IkRzGbr vAqMA75sv4CrPtJ2MwLe9rYB/FItYJQXtb4l69CkME5HwanB/cXLWHb7+TO8/I5y Ri4UuekKUV+zObC0nNFh0s/yHVIk1E7I0VmlMLuFfXE8mGslnTD4P1aygwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFA5ppn1LIVo/MfxGLw6lNO+D+O9XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzUwYmRk NC1lMmE5LTQ2YzktODM2ZS02OGMxYjdkZmIxOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNTBiZGQ0 LWUyYTktNDZjOS04MzZlLTY4YzFiN2RmYjE5MC8xL0RtbW1mVXNoV2o4eF9FWXZE cVUwNzRQNDcxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCBkMA0GCSqGSIb3DQEBCwUAA4IBAQBF aVXlPE7naO/ylt2+vVJzm5mCLCRT4aUikaummV5m2IkG5Z39xDrK4h6Jew58iWD1 4PnZAmTgqfVFs33Cw86858ZL3HJuFsfysygh8nwL9QwG44UkHa4WVbolK0yIjZB6 EGpvfqrFONWUK0h+0/Dw80oDLRGo5Rj5QIdYMdpatL/iiMQ/VM0Bf2RxWaamZJNI dc6ggGbRUyqUbnImCMfecMRZQbsE1Vf7KK4z2wJ+7dTSSo9Fgss/0up6afh+tZlT XoqxDxaCQ+lrMNirnwK8RiStxCC8NK7Rl7aNrIvs4XNvGsdXNVeifrhEK2W0UpAq lGul6c/j+THlBwgsakDm -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:36 2026 by rpki-client