This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer (raw, json) Hash identifier: 7msrEaB2hQgvzmq7yKrMn3/VsluvYUWOuCxCBvqoYis= Subject key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3115A6986ACEC6BAAE64B332126C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 132.68.0.0/15 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:11:5a:69:86:ac:ec:6b:aa:e6:4b:33:21:26:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:4b:53:be:55:40:ca:51:eb:b8:4e:94:78: e8:84:67:be:d8:16:5b:95:95:c0:a1:4c:5b:0c:2f: c2:44:fc:94:66:ac:9a:af:e7:dd:d6:d0:c4:3c:38: 55:11:e5:a0:ed:50:eb:b9:79:5b:e6:f8:ef:9f:02: 99:40:a2:34:0b:7e:ad:78:bb:3b:ac:95:4e:bf:14: bd:5e:36:04:37:89:5f:db:15:ac:e0:ea:db:29:cd: e3:8e:d9:65:0c:1b:ce:ce:94:a2:d4:93:97:e4:91: c6:4f:cb:d4:25:7b:e2:c9:76:0a:65:83:68:e9:f6: 0e:56:0d:84:30:31:16:7c:5a:ad:7c:66:7c:42:4e: 33:04:ae:9f:24:eb:99:1f:a4:15:66:f0:58:1e:7d: 3a:d0:94:37:c0:c0:a2:98:70:ae:70:bd:59:82:a6: 73:e4:ac:5b:a8:6c:f3:b5:08:5d:05:fd:3a:65:87: 0e:ae:3b:b9:a2:46:2c:e4:50:46:ba:3d:c9:f2:61: 2e:ee:6d:c6:b0:42:93:37:04:54:87:e7:d5:68:a2: 46:54:76:ef:38:7f:b1:37:20:3d:33:df:80:77:62: 29:af:93:0b:bf:40:fa:d2:45:0d:bb:87:13:c0:d5: 69:e7:2c:60:a3:7a:70:f3:58:11:2a:8b:60:1e:dc: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.68.0.0/15 Signature Algorithm: sha256WithRSAEncryption 24:14:36:f1:05:8b:fa:95:67:a3:eb:c9:52:92:71:5b:e8:a1: 89:49:b1:8b:c8:54:1b:d4:f2:b5:5b:4f:ae:4f:2f:c3:d4:84: 57:19:a1:74:dd:3f:53:68:ff:2d:bb:57:31:29:f2:fe:0e:bf: 68:fa:5e:09:e5:45:ae:25:f7:60:b8:ba:65:df:97:cb:b6:24: 55:41:0c:63:2d:58:e9:c7:10:90:06:8b:c0:51:cc:94:fe:b9: 18:4f:93:a2:c1:7a:cf:1d:f5:d6:ca:85:80:dc:6d:39:f3:9f: 01:6a:80:e3:83:44:70:ff:7a:14:9e:8d:db:3c:49:f1:25:53: 96:b4:16:4b:39:f0:e0:0f:d9:55:cc:fd:f5:dc:80:b7:03:b5: a5:df:d2:c2:33:91:99:55:aa:ab:d2:49:66:2c:e7:25:17:0a: 32:66:f9:36:4e:e4:ce:4e:4e:c9:8c:fd:0b:41:85:84:e1:37: f7:f3:4f:ef:09:58:03:8a:dd:43:3f:1d:23:86:bf:fb:d5:2f: 21:84:67:6a:bc:90:24:8c:e4:44:aa:26:fc:48:26:53:fe:17: 49:a1:83:46:5c:99:da:95:e5:5c:1c:b5:6b:d4:3f:2f:02:6f: 71:91:e5:20:88:c4:23:8c:04:df:29:98:e8:58:a3:4c:ac:51: 37:45:65:08 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt4oxFaaYas7Guq5kszISbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjIxYjc4Y2U5N2IwZjVmYjNkODhiZjk1Y2ZiYjA4YjJmYmVhOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6hLU75VQMpR67hOlHjohGe+2BZb lZXAoUxbDC/CRPyUZqyar+fd1tDEPDhVEeWg7VDruXlb5vjvnwKZQKI0C36teLs7 rJVOvxS9XjYEN4lf2xWs4OrbKc3jjtllDBvOzpSi1JOX5JHGT8vUJXviyXYKZYNo 6fYOVg2EMDEWfFqtfGZ8Qk4zBK6fJOuZH6QVZvBYHn060JQ3wMCimHCucL1ZgqZz 5KxbqGzztQhdBf06ZYcOrju5okYs5FBGuj3J8mEu7m3GsEKTNwRUh+fVaKJGVHbv OH+xNyA9M9+Ad2Ipr5MLv0D60kUNu4cTwNVp5yxgo3pw81gRKotgHtz0wwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFA8ht4zpew9fs9iL+Vz7sIsvvqjlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzBmNzU5 NC1mMDQ4LTQ3M2QtYTM5YS1kZGI5ZTRkYjk4YzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvMGY3NTk0 LWYwNDgtNDczZC1hMzlhLWRkYjllNGRiOThjNi8xL0R5RzNqT2w3RDEtejJJdjVY UHV3aXktLXFPVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMBhEQwDQYJKoZIhvcNAQELBQADggEBACQUNvEF i/qVZ6PryVKScVvooYlJsYvIVBvU8rVbT65PL8PUhFcZoXTdP1No/y27VzEp8v4O v2j6XgnlRa4l92C4umXfl8u2JFVBDGMtWOnHEJAGi8BRzJT+uRhPk6LBes8d9dbK hYDcbTnznwFqgOODRHD/ehSejds8SfElU5a0Fks58OAP2VXM/fXcgLcDtaXf0sIz kZlVqqvSSWYs5yUXCjJm+TZO5M5OTsmM/QtBhYThN/fzT+8JWAOK3UM/HSOGv/vV LyGEZ2q8kCSM5ESqJvxIJlP+F0mhg0ZcmdqV5VwctWvUPy8Cb3GR5SCIxCOMBN8p mOhYo0ysUTdFZQg= -----END CERTIFICATE-----Generated at Fri Jan 9 00:11:08 2026 by rpki-client