This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer File: dB4rNVUHc-BTeX92TS4h1l5kKMc.cer (raw, json) Hash identifier: OC+Z9PJxVqa/6xKkhiGYj+/IlTb1HaaTj3MIPFSU/3c= Subject key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDAEBA8F30389B84767832CAD8719F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35798 IP: 185.70.176.0/22 IP: 195.130.222.0/24 IP: 2a02:65e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ae:ba:8f:30:38:9b:84:76:78:32:ca:d8:71:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=741e2b35550773e053797f764d2e21d65e6428c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:d3:a6:2a:a0:e1:cf:7f:13:48:82:6b:2d: e9:7c:ad:94:8d:43:76:f5:5f:c5:8f:5c:5f:d0:c7: b8:18:40:d3:2e:25:ad:49:21:9b:c5:12:7d:f5:56: 20:75:02:44:0a:84:cb:9c:7e:8e:d1:da:5f:8a:c6: fc:20:42:b9:90:37:ed:c1:5c:b9:d1:8c:66:c9:08: a8:9d:9a:6d:df:31:48:49:e1:e0:99:cf:43:2c:94: d8:fd:f7:a0:ca:5f:41:30:c4:3b:ed:85:b4:6d:65: 68:30:75:5b:7d:97:67:93:ef:1e:a8:92:74:6e:c5: 03:0e:0d:41:d4:93:a2:d8:f5:c0:c7:aa:31:7c:4f: 6b:6d:0e:7e:6d:f6:1d:ee:55:4b:d5:cf:d7:41:99: 14:b6:28:68:19:17:ee:3b:92:52:5e:e5:33:f3:e2: 30:6e:7a:64:03:b9:1b:b6:3d:d7:d9:8b:bb:0a:ef: 73:d5:5f:a9:ee:33:c5:54:8d:07:d9:01:be:29:60: ab:8a:3d:02:cb:8d:b3:30:2e:91:66:22:a3:e5:02: 25:a9:0a:dc:0c:31:86:41:74:1e:a3:ae:cf:62:a1: 4f:30:8d:ba:a8:52:8b:12:9c:3f:5e:ef:6c:32:c5: 6f:af:dd:2e:ca:77:4d:50:20:4c:cb:fd:40:74:82: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.176.0/22 195.130.222.0/24 IPv6: 2a02:65e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35798 Signature Algorithm: sha256WithRSAEncryption 58:18:64:17:e7:b3:25:bc:f0:c4:61:a0:c7:eb:23:9e:95:b9: 12:9d:9c:59:a3:a2:ee:99:1c:fb:1d:68:81:97:82:c6:61:a3: ed:32:40:0d:6a:f2:a9:d5:c8:df:eb:16:35:f2:1d:f1:88:2e: cf:02:9d:42:dd:db:29:66:4b:70:53:6a:85:d6:8e:15:74:56: 96:bd:65:95:da:64:74:57:14:1e:ca:2a:46:11:52:19:2a:6b: c7:08:d9:6f:28:1e:83:e5:53:34:5b:6c:72:f0:df:e9:cf:2c: ec:26:de:02:be:38:e1:88:65:4c:a4:5f:16:9a:d9:a4:af:af: a2:7a:07:b6:41:24:6a:3f:8d:96:83:bd:5d:be:18:7c:c5:8b: 07:8e:f6:18:d0:19:ec:ad:ed:fc:69:86:c3:88:6c:63:b6:07: d8:3d:25:1b:92:88:f1:07:4a:87:3f:63:6f:d7:7a:73:85:29: 73:91:bb:d1:35:aa:0c:96:db:37:f4:4a:e7:75:c8:04:f5:1c: 70:96:06:6e:3c:ae:8d:ba:65:fc:09:d2:6b:3d:f2:fe:16:78: 87:8e:f7:a2:ad:2a:99:ec:9f:27:c5:7e:5c:c8:3b:56:e4:95: 2b:e2:f5:47:2a:29:99:a5:fe:14:3b:d4:2c:a8:8f:42:4c:69: 7d:9d:34:9f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87a66jzA4m4R2eDLK2HGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDFlMmIzNTU1MDc3M2UwNTM3OTdmNzY0ZDJlMjFkNjVlNjQyOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7vTpiqg4c9/E0iCay3pfK2UjUN2 9V/Fj1xf0Me4GEDTLiWtSSGbxRJ99VYgdQJECoTLnH6O0dpfisb8IEK5kDftwVy5 0YxmyQionZpt3zFISeHgmc9DLJTY/fegyl9BMMQ77YW0bWVoMHVbfZdnk+8eqJJ0 bsUDDg1B1JOi2PXAx6oxfE9rbQ5+bfYd7lVL1c/XQZkUtihoGRfuO5JSXuUz8+Iw bnpkA7kbtj3X2Yu7Cu9z1V+p7jPFVI0H2QG+KWCrij0Cy42zMC6RZiKj5QIlqQrc DDGGQXQeo67PYqFPMI26qFKLEpw/Xu9sMsVvr90uyndNUCBMy/1AdILK0QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHQeKzVVB3PgU3l/dk0uIdZeZCjHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzZiNDFm NS1iN2M1LTQzMzQtOWZiZi1iMzhhNmYyMjBlNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvNmI0MWY1 LWI3YzUtNDMzNC05ZmJmLWIzOGE2ZjIyMGU2My8xL2RCNHJOVlVIYy1CVGVYOTJU UzRoMWw1a0tNYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuUawAwQAw4LeMA0EAgACMAcDBQAqAmXgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCL1jANBgkqhkiG9w0BAQsFAAOCAQEAWBhk F+ezJbzwxGGgx+sjnpW5Ep2cWaOi7pkc+x1ogZeCxmGj7TJADWryqdXI3+sWNfId 8YguzwKdQt3bKWZLcFNqhdaOFXRWlr1lldpkdFcUHsoqRhFSGSprxwjZbygeg+VT NFtscvDf6c8s7CbeAr444YhlTKRfFprZpK+vonoHtkEkaj+NloO9Xb4YfMWLB472 GNAZ7K3t/GmGw4hsY7YH2D0lG5KI8QdKhz9jb9d6c4Upc5G70TWqDJbbN/RK53XI BPUccJYGbjyujbpl/AnSaz3y/hZ4h473oq0qmeyfJ8V+XMg7VuSVK+L1RyopmaX+ FDvULKiPQkxpfZ00nw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:33 2026 by rpki-client