This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.cer (raw, json) Hash identifier: EMe0hCCKwFA+BWAoTfmIE8FGHHrBNGg0R3cIsU50f1Y= Subject key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E9D7B55BD48DF6365214A9B7A2E3E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29273 IP: 193.41.36.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9d:7b:55:bd:48:df:63:65:21:4a:9b:7a:2e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:45:21:42:6b:a7:fa:fd:ba:31:bc:53:64: 2a:ec:09:0a:27:10:6d:81:21:9c:1c:10:17:e9:e9: 77:dc:45:9f:9e:b2:ac:84:ff:60:47:c3:a2:6e:e5: 98:46:34:29:4a:56:f4:24:20:73:a1:32:48:2d:04: 16:ad:a9:2d:73:59:fc:c9:f2:b8:7d:8e:85:7d:d3: cb:aa:ee:02:fe:ca:3a:66:b9:b9:34:3f:b6:f7:7b: 61:77:59:80:50:57:28:aa:98:3e:7e:56:b9:b1:d9: 98:8a:47:8b:dd:5a:ec:50:0c:a5:d5:8d:58:99:04: 37:75:12:60:de:26:1f:91:f7:df:37:36:40:03:59: 0f:5b:83:95:96:34:d1:48:72:6f:07:8b:b5:1f:c2: f6:fd:90:85:91:49:9c:0d:b9:1a:18:76:21:78:95: 5b:57:76:52:8e:8d:59:f2:3d:30:5b:0e:60:e3:a2: 68:23:97:43:09:e7:37:4b:d3:c7:58:a1:b8:84:a1: 12:af:b6:fc:73:c7:2e:31:a0:d4:62:03:92:b7:57: 00:29:4b:03:d1:aa:2b:08:92:47:aa:95:16:e0:e9: 3f:0d:20:59:4f:d4:46:bb:96:4e:45:1c:f7:fb:0a: eb:b3:39:a5:92:3d:9d:b7:04:b1:8e:51:b2:6f:44: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.36.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29273 Signature Algorithm: sha256WithRSAEncryption 04:8b:23:25:d4:44:07:fd:3f:f3:fb:e7:f6:82:b7:ba:4c:cd: 62:90:e9:81:f1:cc:12:f4:74:a8:4b:78:59:e5:b6:18:32:20: 6a:5f:84:1a:67:b4:18:df:85:1b:23:e5:30:46:a6:e2:be:fa: 52:5f:c0:95:e4:ae:2e:68:d7:7e:58:f3:7a:62:6e:df:17:55: 90:b2:ae:91:a0:12:ac:64:5e:d1:32:48:77:c3:22:ee:23:36: f4:b6:e5:4c:0c:d1:0b:e8:65:b5:19:43:f1:6a:01:fa:b1:f9: 61:54:0d:72:dc:dd:d5:3b:a9:93:4f:e4:fc:86:a5:6a:99:5f: e2:84:b2:31:02:db:63:92:27:fb:57:16:2c:66:ab:64:2c:b3: b5:05:69:c5:3b:e9:92:4a:8a:5d:8a:b3:57:33:89:4c:fd:39: ab:10:9f:96:4c:a3:f4:b1:2e:b7:b0:47:e0:49:07:e1:bb:4e: 5c:14:fd:c4:5d:c6:f2:e8:1c:11:0a:8b:90:2a:0e:93:8b:b9: c6:4c:19:ef:96:48:1f:88:cb:c3:5b:4f:ce:30:e6:0b:19:5d: 65:4c:8f:46:e2:02:e2:61:f3:31:24:e9:fc:c4:c1:b7:47:5a: 12:27:fd:95:5b:c8:45:51:85:1b:c8:f8:d3:7f:eb:2a:b1:52: ef:a9:9e:0c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5fp17Vb1I32NlIUqbei4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGQ3MDAyYmYzYTJlYWNmYzg4MWQ1ZTFhMDIxMTA5OGM2Njk5NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq5FIUJrp/r9ujG8U2Qq7AkKJxBt gSGcHBAX6el33EWfnrKshP9gR8OibuWYRjQpSlb0JCBzoTJILQQWraktc1n8yfK4 fY6FfdPLqu4C/so6Zrm5ND+293thd1mAUFcoqpg+fla5sdmYikeL3VrsUAyl1Y1Y mQQ3dRJg3iYfkfffNzZAA1kPW4OVljTRSHJvB4u1H8L2/ZCFkUmcDbkaGHYheJVb V3ZSjo1Z8j0wWw5g46JoI5dDCec3S9PHWKG4hKESr7b8c8cuMaDUYgOSt1cAKUsD 0aorCJJHqpUW4Ok/DSBZT9RGu5ZORRz3+wrrszmlkj2dtwSxjlGyb0RAPQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFP3XACvzourPyIHV4aAhEJjGaZVsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzEwMWJj Zi1kMWRmLTQ3YzQtYTJlYi0yMTYxZmY0Nzg4MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvMTAxYmNm LWQxZGYtNDdjNC1hMmViLTIxNjFmZjQ3ODgxYy8xL19kY0FLX09pNnNfSWdkWGhv Q0VRbU1acGxXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSkkMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnJZMA0GCSqGSIb3DQEBCwUAA4IBAQAEiyMl1EQH/T/z++f2gre6TM1ikOmB8cwS 9HSoS3hZ5bYYMiBqX4QaZ7QY34UbI+UwRqbivvpSX8CV5K4uaNd+WPN6Ym7fF1WQ sq6RoBKsZF7RMkh3wyLuIzb0tuVMDNEL6GW1GUPxagH6sflhVA1y3N3VO6mTT+T8 hqVqmV/ihLIxAttjkif7VxYsZqtkLLO1BWnFO+mSSopdirNXM4lM/TmrEJ+WTKP0 sS63sEfgSQfhu05cFP3EXcby6BwRCouQKg6Ti7nGTBnvlkgfiMvDW0/OMOYLGV1l TI9G4gLiYfMxJOn8xMG3R1oSJ/2VW8hFUYUbyPjTf+sqsVLvqZ4M -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:00 2026 by rpki-client