This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DwQeIIaCRVpnlCzipkhYygcEfos.cer File: DwQeIIaCRVpnlCzipkhYygcEfos.cer (raw, json) Hash identifier: 438DfkXbOqvDPslFxNIQucX04/rR+Co8F3AK4CYzIdQ= Subject key identifier: 0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D2E1D2C11677758A3B26047E14B8C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200412 IP: 185.107.216.0/22 IP: 2a0a:b140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:1d:2c:11:67:77:58:a3:b2:60:47:e1:4b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f041e208682455a67942ce2a64858ca07047e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:3f:c3:30:ca:a0:cf:b4:fe:1a:e0:04:11: 66:7c:e2:ff:8f:d1:0f:92:94:b7:25:27:30:48:73: dc:fc:cd:44:1a:a4:0f:87:b4:e8:28:46:66:fe:c9: 36:70:ea:b0:f6:4e:28:89:e6:93:f4:5f:45:b7:eb: 9e:ef:7b:f4:0b:31:f3:11:bd:1f:42:03:64:6a:a3: 3a:9b:dd:39:80:4a:d6:3d:83:25:93:43:4d:92:bc: 0b:97:f4:8e:f1:2a:6a:eb:b8:8b:2b:59:c7:7f:45: f0:c4:64:3a:c8:e9:84:e9:52:6d:bf:3e:13:00:1a: 16:b1:4d:5b:fe:43:aa:20:3d:bf:ac:a0:04:7f:b9: 5d:4e:f8:0d:f5:09:30:c1:57:d7:2f:b4:cd:d4:52: c2:b0:b9:3c:c6:bc:b3:9d:b9:9a:d6:fe:e2:03:22: 2d:a7:f8:47:5e:4b:16:5d:e0:bc:bd:e9:13:00:e9: 97:52:a6:b8:6e:a9:ba:58:17:a9:e5:a9:2b:a3:50: 3c:b3:7a:0c:f5:db:93:df:07:d4:4d:a7:dd:6c:21: 70:11:6a:23:6c:6d:b9:0e:9d:12:19:63:b7:d3:43: 04:49:3d:de:9f:5b:58:ac:08:17:5b:3a:60:c4:a5: ed:c3:be:b3:06:4b:50:90:0a:bb:a4:53:c1:35:dd: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:04:1E:20:86:82:45:5A:67:94:2C:E2:A6:48:58:CA:07:04:7E:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f922e7-d53e-4daf-8770-7ffdfee57f52/1/DwQeIIaCRVpnlCzipkhYygcEfos.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.216.0/22 IPv6: 2a0a:b140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200412 Signature Algorithm: sha256WithRSAEncryption a4:55:63:9c:d1:2e:3e:69:f5:3e:9b:51:42:cd:3d:e8:60:d6: 84:da:37:df:21:ac:34:54:f5:41:46:3e:00:ad:09:ca:4a:82: fb:60:8e:e6:c6:51:c7:d8:cc:db:c6:2e:c2:57:1e:5e:6f:42: 56:46:0b:00:8c:01:49:b5:1e:6f:f6:cf:e7:7c:4d:0d:87:54: a3:2a:b1:56:24:86:6b:d6:fb:4e:e6:72:90:c7:42:55:62:87: ae:28:d2:88:8e:e8:a3:1e:7c:f3:fa:dc:f0:12:ff:87:fe:f9: 9d:98:3a:a9:f4:91:d3:20:59:c6:35:c6:4c:21:9c:19:86:62: 57:68:9b:f0:11:b1:11:7e:6d:c3:04:d9:f6:5f:d0:c1:4c:ee: 9d:41:13:8f:9a:31:84:7a:d8:4d:5a:04:56:89:76:97:d7:70: 95:35:9c:7e:53:72:b2:4e:eb:ad:04:c8:97:30:84:b5:24:a2: 21:04:30:80:44:68:67:fd:27:f7:97:c8:fb:81:43:c8:7e:7b: 53:5b:a8:82:73:d7:ba:f7:19:f7:f9:21:db:55:51:64:62:68: 62:c8:c9:42:81:4c:50:fb:83:f9:50:34:09:f9:6b:39:af:89: 82:52:a3:d7:44:60:2f:91:8f:91:53:85:a5:8d:3a:5b:7a:af: 1e:c6:36:8d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XS4dLBFnd1ijsmBH4UuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjA0MWUyMDg2ODI0NTVhNjc5NDJjZTJhNjQ4NThjYTA3MDQ3ZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRk/wzDKoM+0/hrgBBFmfOL/j9EP kpS3JScwSHPc/M1EGqQPh7ToKEZm/sk2cOqw9k4oieaT9F9Ft+ue73v0CzHzEb0f QgNkaqM6m905gErWPYMlk0NNkrwLl/SO8Spq67iLK1nHf0XwxGQ6yOmE6VJtvz4T ABoWsU1b/kOqID2/rKAEf7ldTvgN9QkwwVfXL7TN1FLCsLk8xryznbma1v7iAyIt p/hHXksWXeC8vekTAOmXUqa4bqm6WBep5akro1A8s3oM9duT3wfUTafdbCFwEWoj bG25Dp0SGWO300MEST3en1tYrAgXWzpgxKXtw76zBktQkAq7pFPBNd1lnwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFA8EHiCGgkVaZ5Qs4qZIWMoHBH6LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2Y5MjJl Ny1kNTNlLTRkYWYtODc3MC03ZmZkZmVlNTdmNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvZjkyMmU3 LWQ1M2UtNGRhZi04NzcwLTdmZmRmZWU1N2Y1Mi8xL0R3UWVJSWFDUlZwbmxDemlw a2hZeWdjRWZvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWvYMA0EAgACMAcDBQAqCrFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMO3DANBgkqhkiG9w0BAQsFAAOCAQEApFVjnNEuPmn1 PptRQs096GDWhNo33yGsNFT1QUY+AK0JykqC+2CO5sZRx9jM28YuwlceXm9CVkYL AIwBSbUeb/bP53xNDYdUoyqxViSGa9b7TuZykMdCVWKHrijSiI7oox588/rc8BL/ h/75nZg6qfSR0yBZxjXGTCGcGYZiV2ib8BGxEX5twwTZ9l/QwUzunUETj5oxhHrY TVoEVol2l9dwlTWcflNysk7rrQTIlzCEtSSiIQQwgERoZ/0n95fI+4FDyH57U1uo gnPXuvcZ9/kh21VRZGJoYsjJQoFMUPuD+VA0CflrOa+JglKj10RgL5GPkVOFpY06 W3qvHsY2jQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:22 2026 by rpki-client