This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer File: DyKg7jvG4y2JLt3iV8u3mRefLNY.cer (raw, json) Hash identifier: HO7kT8nnoTp5I7vpIuzJHOhrKT0QcMhkHKbDzQ1Ul5E= Subject key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC96ECAFCAE66917DD6FEA683AB5B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60667 IP: 91.132.102.0/24 IP: 2a13:1e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:96:ec:af:ca:e6:69:17:dd:6f:ea:68:3a:b5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:91:1c:ce:04:cd:6e:97:8c:5d:98:71:30: 49:43:3d:6f:6b:45:05:10:5a:f9:45:a8:37:ad:15: cc:fe:8b:73:ad:9f:6f:7f:3b:68:57:81:9f:03:80: 91:c0:91:aa:07:1d:52:c3:a1:06:0a:bc:2d:67:8e: cb:2c:9e:b5:9a:be:48:59:5f:45:5a:4d:5b:f6:72: 38:4b:b7:f7:59:9e:bb:05:d0:d2:eb:fd:14:8b:73: de:42:c9:b7:7c:95:bf:39:d9:8b:d0:07:7e:89:8d: f3:2d:4b:80:d9:4b:c9:f9:51:8e:d0:4d:d4:92:05: d3:43:11:ab:b7:08:ab:b1:b5:b9:16:86:0b:19:ee: f8:b9:ea:0d:75:ba:31:bf:db:0e:11:7c:64:7d:0d: c4:6a:69:99:7c:3c:63:c3:1b:e3:70:d1:5e:bd:08: 56:48:37:4a:8a:a9:3a:59:5e:97:96:25:65:7c:1e: 32:52:7d:d5:5d:91:d9:ad:c9:94:6d:ef:9c:6b:03: 47:46:32:ab:fb:67:c7:81:2a:e3:30:29:13:a6:81: 7c:87:d0:16:aa:d3:af:83:42:ac:22:b5:4f:83:43: d2:dd:aa:5a:dc:8d:ec:8e:80:a1:27:0e:ef:f8:bb: aa:ef:3b:6b:be:cd:f9:fb:ef:41:9f:6b:a2:a2:c3: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.102.0/24 IPv6: 2a13:1e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60667 Signature Algorithm: sha256WithRSAEncryption 85:10:75:90:02:4d:b9:17:11:da:be:7a:a1:b3:0b:14:29:4f: d0:6d:fa:82:62:0a:4e:a9:a6:4e:38:5a:ba:87:6a:9c:f4:49: 56:6f:f6:b3:f6:f7:f5:61:c9:55:ef:22:35:dd:19:f8:f2:ba: 38:0d:ca:1e:88:35:24:61:23:9f:32:87:6f:ad:02:6e:fb:40: 4a:2e:23:3c:67:2d:63:4f:54:56:36:7c:76:fd:57:d3:c0:52: 83:66:51:a7:d1:4f:8d:48:b6:bb:4f:ed:86:19:97:fb:24:23: bc:3f:35:ec:c7:2a:7e:00:eb:03:22:8e:3a:3b:53:0f:4f:28: 33:91:5d:43:0f:ee:5b:0e:cc:2a:e8:b0:1e:d3:94:1d:45:67: b4:10:45:64:40:da:59:ca:08:35:f6:29:3d:f6:0e:37:d0:0d: aa:e4:29:d9:b6:99:13:ea:88:fc:5b:5d:9b:fb:a2:9e:30:58: 79:8f:a7:5c:0a:f3:3a:41:cc:c7:80:05:65:45:6a:1e:43:67: 30:0b:98:50:3f:c8:28:c8:0e:0b:d0:7a:aa:6e:03:1b:e4:8e: 60:7f:96:9c:f7:da:a8:4b:33:41:c0:27:ef:5a:66:ab:4d:83: 18:20:2c:90:5b:9e:64:c1:a8:03:44:18:08:a4:33:c5:39:b5: 87:ea:35:e3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57Jbsr8rmaRfdb+poOrW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjIyYTBlZTNiYzZlMzJkODkyZWRkZTI1N2NiYjc5OTE3OWYyY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdmRHM4EzW6XjF2YcTBJQz1va0UF EFr5Rag3rRXM/otzrZ9vfztoV4GfA4CRwJGqBx1Sw6EGCrwtZ47LLJ61mr5IWV9F Wk1b9nI4S7f3WZ67BdDS6/0Ui3PeQsm3fJW/OdmL0Ad+iY3zLUuA2UvJ+VGO0E3U kgXTQxGrtwirsbW5FoYLGe74ueoNdboxv9sOEXxkfQ3EammZfDxjwxvjcNFevQhW SDdKiqk6WV6XliVlfB4yUn3VXZHZrcmUbe+cawNHRjKr+2fHgSrjMCkTpoF8h9AW qtOvg0KsIrVPg0PS3apa3I3sjoChJw7v+Luq7ztrvs35++9Bn2uiosPodwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFA8ioO47xuMtiS7d4lfLt5kXnyzWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzMwODRk ZS1iMTU5LTRlNTQtOWVkNy00MmQ2Nzg0MDk0NGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvMzA4NGRl LWIxNTktNGU1NC05ZWQ3LTQyZDY3ODQwOTQ0ZC8xL0R5S2c3anZHNHkySkx0M2lW OHUzbVJlZkxOWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW4RmMA0EAgACMAcDBQMqEx4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDs+zANBgkqhkiG9w0BAQsFAAOCAQEAhRB1kAJNuRcR 2r56obMLFClP0G36gmIKTqmmTjhauodqnPRJVm/2s/b39WHJVe8iNd0Z+PK6OA3K Hog1JGEjnzKHb60CbvtASi4jPGctY09UVjZ8dv1X08BSg2ZRp9FPjUi2u0/thhmX +yQjvD817McqfgDrAyKOOjtTD08oM5FdQw/uWw7MKuiwHtOUHUVntBBFZEDaWcoI NfYpPfYON9ANquQp2baZE+qI/Ftdm/uinjBYeY+nXArzOkHMx4AFZUVqHkNnMAuY UD/IKMgOC9B6qm4DG+SOYH+WnPfaqEszQcAn71pmq02DGCAskFueZMGoA0QYCKQz xTm1h+o14w== -----END CERTIFICATE-----Generated at Tue Feb 10 05:31:28 2026 by rpki-client