This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dx5VRYknpRu66zh_IV91PO36lGs.cer File: Dx5VRYknpRu66zh_IV91PO36lGs.cer (raw, json) Hash identifier: jFVIoDK8GbAIl8fwelKjO4XjIddi81OoEwDXnDe/srg= Subject key identifier: 0F:1E:55:45:89:27:A5:1B:BA:EB:38:7F:21:5F:75:3C:ED:FA:94:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C2F303F0132DC815D7001E8106C5DABDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 05 Feb 2026 19:03:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60742 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:30:3f:01:32:dc:81:5d:70:01:e8:10:6c:5d:ab:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 5 19:03:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f1e55458927a51bbaeb387f215f753cedfa946b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:2a:bd:ca:7f:c1:1a:47:23:a4:2f:9e:ea: d1:22:9b:71:91:b6:5b:4f:11:62:fe:a7:e0:b5:68: e7:e5:34:8e:11:bb:12:89:4d:f6:e7:72:cd:e7:53: b2:3a:91:0f:04:72:cc:a0:ca:7d:43:44:fb:16:a9: 8c:23:7a:ad:dd:ca:b0:3c:00:5d:21:cb:b8:b4:13: 4c:66:49:64:86:74:57:a6:1e:e6:c4:6e:54:33:bd: 58:8b:ec:37:90:9b:e6:94:da:b2:d7:45:96:78:59: 0d:8c:d9:f5:9e:21:b3:fd:12:20:5b:84:1d:22:4c: d7:ef:6c:79:78:89:85:cf:a1:a5:9b:1f:2a:99:f0: d5:67:fa:0f:8c:29:9d:74:40:67:48:6b:f3:7a:5f: 6f:6e:7f:34:0e:b8:2a:59:47:1c:8d:50:c3:42:73: f8:a2:9a:94:3a:d3:a2:e5:ca:de:52:00:70:1f:68: 3b:2d:0d:d0:65:07:c1:bc:b8:f1:6b:01:df:50:e1: c3:04:5e:a7:98:c9:c8:e1:c4:38:97:d1:af:26:fc: 17:87:f7:b6:c8:fa:ed:7d:43:72:5b:ea:15:33:ca: b0:d9:2d:a5:0a:9b:f6:3f:74:12:90:5a:15:69:ba: c2:75:28:27:e0:4d:6e:b6:54:de:41:be:cd:8c:e8: ab:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1E:55:45:89:27:A5:1B:BA:EB:38:7F:21:5F:75:3C:ED:FA:94:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 60742 Signature Algorithm: sha256WithRSAEncryption 78:a5:55:d6:fb:32:8a:93:a2:22:a2:29:f3:59:ea:75:14:7b: 57:4d:76:41:29:71:e1:63:39:9c:69:26:fe:44:b8:8c:68:40: 74:b8:17:f6:97:bb:72:b7:df:85:2c:8e:8b:8e:80:6e:70:d3: ce:b6:c2:ae:d8:95:e2:12:2f:b3:64:c7:80:67:1f:e5:c6:b9: bd:ba:4e:32:04:37:f9:ca:8d:6d:c3:45:2e:b5:17:6d:3d:b6: 44:18:4c:42:d3:ea:09:bd:7f:10:30:fc:1e:d1:04:ce:5f:16: 1e:37:9a:e8:bb:ea:3d:af:bd:c8:d2:33:33:eb:8a:6e:7e:9c: af:b2:dc:23:17:48:3f:44:cf:b6:4e:2b:db:30:c7:86:e6:66: a0:b3:e6:ab:a3:0c:e9:c3:a5:bb:74:ec:60:83:7f:84:3f:12: 46:8e:a8:31:77:f3:bc:76:dd:a7:fe:c2:44:97:28:7a:bf:65: 64:aa:37:92:8b:ec:fb:81:be:79:fd:73:82:6a:a3:6b:a8:77: fb:07:89:b6:ee:90:91:52:7a:29:dc:75:8d:d2:6a:0f:c6:ad: de:7e:c7:ba:10:5c:a9:27:3c:ea:0e:7d:7e:49:80:9b:d0:ec: 6f:c7:10:02:dc:10:57:ef:e6:67:80:ef:78:b6:d3:d7:f6:0b: 80:8f:c7:89 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZwvMD8BMtyBXXAB6BBsXavfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA1MTkwMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjFlNTU0NTg5MjdhNTFiYmFlYjM4N2YyMTVmNzUzY2VkZmE5NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn98qvcp/wRpHI6QvnurRIptxkbZb TxFi/qfgtWjn5TSOEbsSiU3253LN51OyOpEPBHLMoMp9Q0T7FqmMI3qt3cqwPABd Icu4tBNMZklkhnRXph7mxG5UM71Yi+w3kJvmlNqy10WWeFkNjNn1niGz/RIgW4Qd IkzX72x5eImFz6Glmx8qmfDVZ/oPjCmddEBnSGvzel9vbn80DrgqWUccjVDDQnP4 opqUOtOi5creUgBwH2g7LQ3QZQfBvLjxawHfUOHDBF6nmMnI4cQ4l9GvJvwXh/e2 yPrtfUNyW+oVM8qw2S2lCpv2P3QSkFoVabrCdSgn4E1utlTeQb7NjOir5wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFA8eVUWJJ6Ubuus4fyFfdTzt+pRrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FkN2Ux YWIwLWQ2YTItNDQ1OS05ZGQ1LWRjMjY3ZTliZjZhNC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWQ3 ZTFhYjAtZDZhMi00NDU5LTlkZDUtZGMyNjdlOWJmNmE0LzAvMEYxRTU1NDU4OTI3 QTUxQkJBRUIzODdGMjE1Rjc1M0NFREZBOTQ2Qi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA7UYw DQYJKoZIhvcNAQELBQADggEBAHilVdb7MoqToiKiKfNZ6nUUe1dNdkEpceFjOZxp Jv5EuIxoQHS4F/aXu3K334UsjouOgG5w0862wq7YleISL7Nkx4BnH+XGub26TjIE N/nKjW3DRS61F209tkQYTELT6gm9fxAw/B7RBM5fFh43mui76j2vvcjSMzPrim5+ nK+y3CMXSD9Ez7ZOK9swx4bmZqCz5qujDOnDpbt07GCDf4Q/EkaOqDF387x23af+ wkSXKHq/ZWSqN5KL7PuBvnn9c4Jqo2uod/sHibbukJFSeincdY3Sag/Grd5+x7oQ XKknPOoOfX5JgJvQ7G/HEALcEFfv5meA73i209f2C4CPx4k= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:38 2026 by rpki-client