This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer File: DoVoAb747TroEOfmejH9AStE0ww.cer (raw, json) Hash identifier: 7FvMtrjchnJw0TbxoSy/fS49L9xKwOTDW2ZvARDWuhw= Subject key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77597028506B1365A943420C48827BD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.117.57.0/24 IP: 2001:67c:17ec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:70:28:50:6b:13:65:a9:43:42:0c:48:82:7b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:cf:11:38:fb:15:08:87:51:35:e6:7d:96: 91:62:38:9a:66:36:e1:0e:3e:ef:de:c2:6a:fe:2e: 39:fe:54:aa:34:57:bc:7c:7b:ae:00:8f:ca:aa:33: e4:f9:aa:c9:9d:ed:64:35:bd:6a:7f:01:dd:9e:52: 09:95:cb:89:00:1b:fc:48:d3:6b:08:11:3f:a5:3b: 4a:e7:cf:0a:29:9f:f3:35:10:a7:aa:bf:10:20:2c: 9b:da:3b:a3:09:ea:ba:bd:a4:e6:5e:cb:54:e1:b7: bb:2c:3f:54:6f:ef:b6:ce:4e:9e:01:7a:aa:95:f0: 87:71:b4:5b:4a:b1:10:cc:30:ee:38:4e:cf:64:c8: a7:41:e7:ea:38:e8:f3:26:d3:a6:d3:9f:d7:b4:58: e0:82:0f:4e:8e:d6:b3:71:05:cf:2d:4e:bc:10:d3: 81:db:7d:aa:d6:ce:60:26:13:5e:b1:f6:5b:82:3a: fa:bb:bc:d7:12:12:c9:da:09:8e:74:68:7d:bc:47: 23:23:b4:bb:f5:79:91:55:c2:82:30:5f:25:d4:86: c5:05:3d:83:67:a3:31:aa:9b:33:ed:97:bf:ee:d9: 72:0a:bd:5d:6d:df:95:57:67:af:44:a8:47:ec:56: f7:c4:b1:44:f7:0c:f9:61:bb:62:d2:75:6d:9d:e8: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.57.0/24 IPv6: 2001:67c:17ec::/48 Signature Algorithm: sha256WithRSAEncryption 33:9d:c7:b2:7d:3d:b9:27:23:51:32:70:57:9c:98:54:f4:30: fe:c9:f9:58:69:19:46:3f:b9:dc:e1:f9:54:e7:d9:5c:60:be: 46:43:06:22:57:0f:08:0d:54:eb:cb:e8:a1:40:5f:fa:ba:dc: 1e:02:55:f5:c0:5d:e5:a2:fe:47:3a:65:24:e5:0d:61:9f:8d: b1:e1:2e:88:84:c5:c4:e3:a9:90:35:e6:f6:d6:f4:14:f3:cc: c3:9b:13:4b:a4:dd:cf:59:6d:b9:27:d6:d8:77:cc:03:37:d9: 52:ff:b0:49:f2:1e:13:40:6c:88:04:49:0d:e9:4a:7e:f9:24: 43:e5:cb:00:45:00:6d:26:d0:59:07:9f:2d:fc:9d:c9:d9:bc: a5:1f:bd:99:09:54:f5:90:24:4c:6e:58:ea:35:24:47:8f:af: 60:78:ab:b9:91:2b:6d:2d:5a:50:6c:8f:59:75:c4:77:8d:68: 2e:4e:0f:b7:0a:54:5b:58:5d:aa:10:0b:7f:69:39:a0:34:7e: b6:bc:c1:1c:5e:95:1a:10:d3:7d:5a:0b:9e:3b:70:53:eb:9c: 46:21:a3:a7:b5:6b:fa:3c:21:46:aa:e5:53:6c:44:ef:b9:4f: 5d:8e:e4:1a:9a:e0:28:21:c4:b3:2a:c0:94:02:50:18:86:16: 55:82:ae:bc -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt3WXAoUGsTZalDQgxIgnvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTg1NjgwMWJlZjhlZDNhZTgxMGU3ZTY3YTMxZmQwMTJiNDRkMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL7PETj7FQiHUTXmfZaRYjiaZjbh Dj7v3sJq/i45/lSqNFe8fHuuAI/KqjPk+arJne1kNb1qfwHdnlIJlcuJABv8SNNr CBE/pTtK588KKZ/zNRCnqr8QICyb2jujCeq6vaTmXstU4be7LD9Ub++2zk6eAXqq lfCHcbRbSrEQzDDuOE7PZMinQefqOOjzJtOm05/XtFjggg9OjtazcQXPLU68ENOB 232q1s5gJhNesfZbgjr6u7zXEhLJ2gmOdGh9vEcjI7S79XmRVcKCMF8l1IbFBT2D Z6Mxqpsz7Ze/7tlyCr1dbd+VV2evRKhH7Fb3xLFE9wz5Ybti0nVtneh+vQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFA6FaAG++O066BDn5nox/QErRNMMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzU0MTQz NC04NzlkLTRlNTUtYTQ3Zi0xOTBiMDZkZWU0ZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNTQxNDM0 LTg3OWQtNGU1NS1hNDdmLTE5MGIwNmRlZTRkYy8xL0RvVm9BYjc0N1Ryb0VPZm1l akg5QVN0RTB3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAsHU5MA8EAgACMAkDBwAgAQZ8F+wwDQYJKoZI hvcNAQELBQADggEBADOdx7J9PbknI1EycFecmFT0MP7J+VhpGUY/udzh+VTn2Vxg vkZDBiJXDwgNVOvL6KFAX/q63B4CVfXAXeWi/kc6ZSTlDWGfjbHhLoiExcTjqZA1 5vbW9BTzzMObE0uk3c9Zbbkn1th3zAM32VL/sEnyHhNAbIgESQ3pSn75JEPlywBF AG0m0FkHny38ncnZvKUfvZkJVPWQJExuWOo1JEePr2B4q7mRK20tWlBsj1l1xHeN aC5OD7cKVFtYXaoQC39pOaA0fra8wRxelRoQ031aC547cFPrnEYho6e1a/o8IUaq 5VNsRO+5T12O5Bqa4CghxLMqwJQCUBiGFlWCrrw= -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:04 2026 by rpki-client