This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer File: _dbuAQuZCjNzV1a0_i89PCZx3Z0.cer (raw, json) Hash identifier: cA3fTY3GpOukUG/xct/qxfJew1yfc07ontjjxMgSxa4= Subject key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38A92C403041517370C5324850BB87 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62246 IP: 185.125.243.0/24 IP: 2a13:a5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a9:2c:40:30:41:51:73:70:c5:32:48:50:bb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:30:89:fe:9e:3c:78:33:71:e1:3d:78:83: 4f:dc:ac:73:d7:01:5a:3e:b4:33:04:38:2c:fa:38: 3b:9d:a8:41:6c:f2:3d:a1:72:d9:c1:dc:16:3a:95: 9a:fc:59:39:be:a3:1d:42:e7:c4:1d:8f:75:81:54: 30:1e:19:99:51:08:88:90:4c:a9:c1:a6:5c:7d:f0: bc:55:68:89:aa:24:3f:09:10:83:e3:20:cd:c8:bb: c6:87:6d:08:5f:68:a0:42:e5:f7:d7:26:ac:6a:e9: 07:0c:48:9b:de:e2:c6:c8:3b:1e:90:60:10:01:e3: c4:0a:32:01:c4:61:c0:17:8b:d6:27:07:09:e8:d2: 97:08:03:92:c8:68:5b:ff:84:a1:ff:45:64:ca:7e: dc:55:c7:32:30:f7:21:3b:57:e9:90:19:0e:37:37: 3f:11:c4:50:73:5b:a4:b5:81:b3:87:00:ec:3c:8c: 84:c4:cf:5d:e4:1c:6e:d8:68:30:d2:02:f3:e6:ef: 0c:9f:b2:78:71:13:9a:4f:ce:15:31:13:52:1d:0a: 81:b3:5b:f3:aa:8f:d4:20:89:00:fa:c5:79:a0:af: 29:42:4f:5c:76:82:61:f5:78:28:16:9d:12:6a:65: ac:f1:cf:bc:21:14:96:37:25:60:39:b1:09:c3:e9: fe:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.243.0/24 IPv6: 2a13:a5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62246 Signature Algorithm: sha256WithRSAEncryption 0f:7d:12:bb:e2:50:b4:bf:b2:26:18:5e:b9:29:4f:e3:2d:44: 2c:cb:69:82:4f:6e:ab:66:01:01:47:3c:65:8f:b3:17:99:e3: b3:45:00:59:b3:c1:99:d0:35:d0:d0:61:4e:1c:d3:9b:e4:60: a3:6f:42:39:a9:91:93:7d:af:25:d4:91:52:b2:c9:4f:5d:36: 95:0c:8f:0e:2e:c9:60:7a:27:38:7a:79:e3:f6:20:35:79:b6: d6:70:6f:6e:77:34:5a:96:23:fe:06:39:e7:5b:fc:f8:3c:1d: 97:e8:09:7b:77:b1:54:cd:74:22:6e:98:a8:52:75:ec:38:ba: ae:04:ae:02:56:ca:9e:34:63:96:b7:51:cf:20:17:f0:92:9a: 65:fc:df:7a:b7:27:19:0e:4d:17:ad:d5:e8:fa:66:42:da:73: ff:97:ef:1c:12:4c:c7:23:f5:d6:a9:96:95:cf:f3:91:1c:63: 21:5a:e9:0f:15:07:df:fb:c3:f4:f0:bd:32:d2:79:d1:3a:e7: 07:ad:8d:b4:22:09:44:bf:9c:4a:a9:16:9f:02:80:fb:1e:95: 13:c1:2f:16:21:6a:53:80:9b:31:6d:d9:03:5a:1c:24:34:3e: bd:6c:77:a2:2f:36:3d:15:3c:95:7f:b0:15:cb:71:35:a2:28: ed:44:c9:27 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OKksQDBBUXNwxTJIULuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGQ2ZWUwMTBiOTkwYTMzNzM1NzU2YjRmZTJmM2QzYzI2NzFkZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAwwif6ePHgzceE9eINP3Kxz1wFa PrQzBDgs+jg7nahBbPI9oXLZwdwWOpWa/Fk5vqMdQufEHY91gVQwHhmZUQiIkEyp waZcffC8VWiJqiQ/CRCD4yDNyLvGh20IX2igQuX31yasaukHDEib3uLGyDsekGAQ AePECjIBxGHAF4vWJwcJ6NKXCAOSyGhb/4Sh/0Vkyn7cVccyMPchO1fpkBkONzc/ EcRQc1uktYGzhwDsPIyExM9d5Bxu2Ggw0gLz5u8Mn7J4cROaT84VMRNSHQqBs1vz qo/UIIkA+sV5oK8pQk9cdoJh9XgoFp0SamWs8c+8IRSWNyVgObEJw+n+CwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFP3W7gELmQozc1dWtP4vPTwmcd2dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzJkMWEz NS1mZjhhLTQ2YjQtOGM0Ny02M2M3MjFjZjFmNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvMmQxYTM1 LWZmOGEtNDZiNC04YzQ3LTYzYzcyMWNmMWY1Ni8xL19kYnVBUXVaQ2pOelYxYTBf aTg5UENaeDNaMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuX3zMA0EAgACMAcDBQMqE6XAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzJjANBgkqhkiG9w0BAQsFAAOCAQEAD30Su+JQtL+y JhheuSlP4y1ELMtpgk9uq2YBAUc8ZY+zF5njs0UAWbPBmdA10NBhThzTm+Rgo29C OamRk32vJdSRUrLJT102lQyPDi7JYHonOHp54/YgNXm21nBvbnc0WpYj/gY551v8 +Dwdl+gJe3exVM10Im6YqFJ17Di6rgSuAlbKnjRjlrdRzyAX8JKaZfzfercnGQ5N F63V6PpmQtpz/5fvHBJMxyP11qmWlc/zkRxjIVrpDxUH3/vD9PC9MtJ50TrnB62N tCIJRL+cSqkWnwKA+x6VE8EvFiFqU4CbMW3ZA1ocJDQ+vWx3oi82PRU8lX+wFctx NaIo7UTJJw== -----END CERTIFICATE-----Generated at Fri Jan 23 17:22:04 2026 by rpki-client