This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer (raw, json) Hash identifier: I51P1U9luLb3I6u2+MZOY4D5gCNS7CuC1LmefJdo7/Q= Subject key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36D4381DF82DE02D8117CA1F9928D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204446 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d4:38:1d:f8:2d:e0:2d:81:17:ca:1f:99:28:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ebf0bdcd901622b16ffd4144b5888707322c534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:f8:92:8d:82:3c:19:a9:6a:22:d6:b4:12: c4:d2:7b:0e:ef:dc:52:5f:dd:61:1e:9d:d0:09:f4: ba:cb:37:27:55:20:1c:82:3a:c4:d6:ef:f5:a2:52: 2f:f0:fe:c4:fd:5b:0e:e8:2d:12:09:68:30:6f:65: 99:29:f1:ba:92:74:e2:3b:4b:a9:39:c0:72:ac:d5: 66:1e:b4:58:2c:6e:5e:1c:c3:ca:01:9c:d2:d7:68: 48:e8:a5:42:e0:e7:f5:34:c6:16:a4:8a:71:19:9d: d7:98:62:00:a7:1d:2a:7e:35:10:a7:1c:d9:86:79: 7a:b0:cb:af:9a:70:6e:6a:55:81:9c:13:c6:fa:a8: 9f:d8:10:56:d0:66:33:8c:37:09:79:52:ce:69:21: 72:f7:db:52:61:44:b5:ce:01:b6:b2:47:3b:1f:c0: 4d:11:cf:97:e1:1b:29:72:bd:d7:13:b7:d1:af:e5: 1d:97:22:25:5e:83:6b:24:9a:0b:5e:5a:64:d9:57: 75:3e:d2:17:0d:da:a7:02:05:3b:1c:a0:b5:22:fa: ea:a1:50:3d:1e:9f:02:d0:0e:fb:e8:93:d9:53:5a: 62:38:f9:57:6c:62:d8:29:72:e1:67:67:57:d3:f7: 3d:4a:d9:0f:80:5d:68:35:e5:b5:f6:b8:5e:c3:99: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204446 Signature Algorithm: sha256WithRSAEncryption 4e:6a:8c:d1:dd:e8:e6:03:1e:6e:cd:9c:3e:72:23:38:ad:71: cb:e8:e6:6f:13:fe:df:bb:82:08:76:c9:85:ee:df:36:fd:33: 99:ef:37:b1:fa:13:7a:99:09:fe:41:36:7a:95:fd:61:1c:3a: 93:09:c3:9a:9f:c9:56:11:fa:09:8c:6c:e2:9d:b6:88:b3:00: 77:69:d5:fc:f8:89:93:17:49:11:df:a7:6b:dc:e7:3a:0e:7d: 1b:11:07:ef:8d:b0:2a:7d:e1:6a:2e:da:c9:84:06:01:65:cb: 10:0a:d8:ea:a8:f7:8c:85:e7:8e:a3:76:f6:e3:e0:3d:d4:af: 9a:b6:63:14:0a:1d:45:04:e5:32:04:3a:6a:4a:a4:72:86:5e: 85:07:95:71:c7:9e:a9:67:a9:9c:ef:cd:02:72:c3:51:69:37: 86:78:2b:86:cc:e9:97:02:b2:be:f8:d8:7b:9b:63:e9:51:77: bd:22:ae:5b:e6:72:81:bf:99:33:75:15:d7:fb:5d:b7:16:29: 06:7f:13:03:09:63:6d:24:66:d9:f9:2d:62:cf:a5:e4:b6:5e: e4:0d:ee:a8:1e:10:d5:ad:b5:aa:ef:53:5a:34:58:ed:1d:55: 5f:38:49:b1:56:0f:54:35:96:1f:df:d7:5a:e4:94:77:6a:37: dd:c9:77:7d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NtQ4Hfgt4C2BF8ofmSjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWJmMGJkY2Q5MDE2MjJiMTZmZmQ0MTQ0YjU4ODg3MDczMjJjNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LX4ko2CPBmpaiLWtBLE0nsO79xS X91hHp3QCfS6yzcnVSAcgjrE1u/1olIv8P7E/VsO6C0SCWgwb2WZKfG6knTiO0up OcByrNVmHrRYLG5eHMPKAZzS12hI6KVC4Of1NMYWpIpxGZ3XmGIApx0qfjUQpxzZ hnl6sMuvmnBualWBnBPG+qif2BBW0GYzjDcJeVLOaSFy99tSYUS1zgG2skc7H8BN Ec+X4Rspcr3XE7fRr+UdlyIlXoNrJJoLXlpk2Vd1PtIXDdqnAgU7HKC1IvrqoVA9 Hp8C0A776JPZU1piOPlXbGLYKXLhZ2dX0/c9StkPgF1oNeW19rhew5koBQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFA6/C9zZAWIrFv/UFEtYiHBzIsU0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyL2E5Yjkx Yi02ODRlLTRkNzgtYWFlOS1jNDQ3YjQxOTMyMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvYTliOTFi LTY4NGUtNGQ3OC1hYWU5LWM0NDdiNDE5MzIxMC8xL0RyOEwzTmtCWWlzV185UVVT MWlJY0hNaXhUUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMenjANBgkqhkiG9w0BAQsFAAOCAQEATmqM0d3o5gMe bs2cPnIjOK1xy+jmbxP+37uCCHbJhe7fNv0zme83sfoTepkJ/kE2epX9YRw6kwnD mp/JVhH6CYxs4p22iLMAd2nV/PiJkxdJEd+na9znOg59GxEH742wKn3hai7ayYQG AWXLEArY6qj3jIXnjqN29uPgPdSvmrZjFAodRQTlMgQ6akqkcoZehQeVcceeqWep nO/NAnLDUWk3hngrhszplwKyvvjYe5tj6VF3vSKuW+Zygb+ZM3UV1/tdtxYpBn8T AwljbSRm2fktYs+l5LZe5A3uqB4Q1a21qu9TWjRY7R1VXzhJsVYPVDWWH9/XWuSU d2o33cl3fQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:36 2026 by rpki-client