This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer File: DxoYFt02i3fPMr0hqeC61d9s3_A.cer (raw, json) Hash identifier: syZvX3jkGeWNs6FUynRoEYzntr8OdD7cROOwJp/tyBg= Subject key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910C99E7499FD7478710C55FD701AC7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.104.124.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c9:9e:74:99:fd:74:78:71:0c:55:fd:70:1a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0f:9c:c9:af:ea:73:f2:a2:25:af:96:a1:43: fd:f2:18:64:a5:3a:3f:16:b5:13:df:58:64:54:94: 96:be:b0:5a:3b:ca:9a:27:fe:e7:e1:e6:8d:92:95: 69:19:cf:a0:96:0e:30:3a:08:c2:0c:d0:96:67:b1: e9:a2:4e:ed:34:4b:4a:e5:a9:e6:75:41:00:b9:4b: d5:32:d0:b6:47:da:92:ef:cb:88:8e:3e:ff:8e:1b: b9:d6:9e:1c:3b:c6:73:1c:48:cd:ff:3f:5b:49:aa: 25:a2:90:16:a8:f0:8c:04:b2:0e:23:ce:6d:ad:4b: 2e:6f:0c:b7:f9:5b:b9:3f:54:eb:17:1b:30:22:62: 32:53:2e:97:48:1e:38:47:33:6d:02:cc:93:6a:cd: eb:ab:86:1a:89:a7:77:f3:67:dd:d9:ad:f5:ff:0e: 92:cb:b5:7b:d3:31:2c:57:79:32:97:1d:78:b3:cd: 84:0b:9f:21:76:31:e9:84:c9:e6:2a:b7:69:2d:b4: 52:12:f0:d4:a9:a6:ea:e8:0d:69:3b:58:31:0d:f2: 30:72:48:21:99:2a:c2:bf:a6:c1:8b:52:d6:ee:7d: d3:3c:97:7e:35:43:5d:ba:cf:d2:69:af:e6:9c:e8: d1:a6:18:66:84:59:1a:85:8d:d5:f4:ce:21:23:05: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.124.0/24 Signature Algorithm: sha256WithRSAEncryption 09:6a:47:98:40:51:fb:cc:08:a4:66:a7:9b:23:e8:68:c8:8e: 5e:d0:71:13:c7:4e:dc:2f:c8:c2:04:f5:28:11:8a:f2:0a:fd: 46:91:fe:81:8e:5e:f8:b8:b8:9f:52:1b:e8:81:0a:5a:0d:86: 63:97:ff:b7:de:da:4b:21:78:90:48:2d:64:de:50:e3:23:0d: a2:24:39:c1:2b:ea:f8:78:ec:11:b9:78:c8:92:e9:c9:62:56: 73:e6:70:d2:79:d1:39:43:c0:32:30:ac:b4:5f:98:04:ad:be: 94:26:95:48:b0:b3:9b:29:85:be:49:ee:13:ed:86:06:70:ec: 9c:43:28:57:4a:49:ff:7a:1f:2f:58:9d:7e:35:c7:59:39:ec: 87:89:9e:c7:7b:91:1e:72:d9:65:29:e0:f6:90:1b:28:1b:8a: 99:ed:d8:de:af:6b:13:51:2f:18:c3:0f:b9:8c:ff:cb:83:91: 5b:6d:6f:ac:f2:67:84:87:f0:eb:d4:59:a5:bd:fc:c9:27:8a: cf:3c:3b:b0:78:c2:af:b7:57:fe:00:75:12:7d:c5:f0:3f:4c: e8:35:48:2a:61:b1:90:d2:ae:7d:4b:a4:36:5e:e2:37:d0:67: 61:a4:5d:46:8f:d6:9d:f1:e0:7f:5e:56:2a:d4:a2:06:61:2a: 09:b6:97:a4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EMmedJn9dHhxDFX9cBrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjFhMTgxNmRkMzY4Yjc3Y2YzMmJkMjFhOWUwYmFkNWRmNmNkZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w+cya/qc/KiJa+WoUP98hhkpTo/ FrUT31hkVJSWvrBaO8qaJ/7n4eaNkpVpGc+glg4wOgjCDNCWZ7Hpok7tNEtK5anm dUEAuUvVMtC2R9qS78uIjj7/jhu51p4cO8ZzHEjN/z9bSaolopAWqPCMBLIOI85t rUsubwy3+Vu5P1TrFxswImIyUy6XSB44RzNtAsyTas3rq4Yaiad382fd2a31/w6S y7V70zEsV3kylx14s82EC58hdjHphMnmKrdpLbRSEvDUqabq6A1pO1gxDfIwckgh mSrCv6bBi1LW7n3TPJd+NUNdus/Saa/mnOjRphhmhFkahY3V9M4hIwV+CQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFA8aGBbdNot3zzK9IangutXfbN/wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzdiMmRh Yy0wZmI0LTQzMDktODg2MS03MjMxMTQ2ZDE1NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvN2IyZGFj LTBmYjQtNDMwOS04ODYxLTcyMzExNDZkMTU2Zi8xL0R4b1lGdDAyaTNmUE1yMGhx ZUM2MWQ5czNfQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWh8MA0GCSqGSIb3DQEBCwUAA4IBAQAJakeY QFH7zAikZqebI+hoyI5e0HETx07cL8jCBPUoEYryCv1Gkf6Bjl74uLifUhvogQpa DYZjl/+33tpLIXiQSC1k3lDjIw2iJDnBK+r4eOwRuXjIkunJYlZz5nDSedE5Q8Ay MKy0X5gErb6UJpVIsLObKYW+Se4T7YYGcOycQyhXSkn/eh8vWJ1+NcdZOeyHiZ7H e5EectllKeD2kBsoG4qZ7djer2sTUS8Yww+5jP/Lg5FbbW+s8meEh/Dr1FmlvfzJ J4rPPDuweMKvt1f+AHUSfcXwP0zoNUgqYbGQ0q59S6Q2XuI30GdhpF1Gj9ad8eB/ XlYq1KIGYSoJtpek -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:06 2026 by rpki-client