This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer File: dEMndQQU00na3gIjNJfPR2Vc0-Q.cer (raw, json) Hash identifier: zKrQEtba1xrVM+pdRGNodhaTdaKLb/ut09L2fOyzTLE= Subject key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3D70E302838068932AE89BF224FF8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211470 IP: 185.216.15.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d7:0e:30:28:38:06:89:32:ae:89:bf:22:4f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=744327750414d349dade02233497cf47655cd3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:98:c5:6f:5f:02:da:51:1b:0f:57:8d:73: a1:bc:64:c1:0c:50:6a:94:a7:39:d7:e3:05:26:22: 74:42:11:78:8a:ca:42:fb:9d:3f:7c:36:26:c7:02: d6:90:58:a3:07:54:95:20:6c:1e:a7:72:82:68:b1: 19:83:ec:5c:92:13:ed:45:6d:f7:e4:ef:23:a2:28: ed:84:5a:c4:b6:56:ed:19:ab:8f:60:df:fd:bd:1b: fe:01:55:fa:2b:70:b0:b8:88:2b:1a:e9:c9:5c:cd: 9c:5c:7e:38:9d:8a:e2:d8:71:66:8c:61:e1:34:11: f6:19:5f:93:42:64:0c:ad:b0:0e:6c:98:cb:36:2d: 9f:c4:17:3f:38:de:84:2d:c5:87:75:5b:ad:87:2a: 3b:34:62:6b:52:68:ff:57:8b:b7:4b:21:d3:3b:04: 24:61:eb:9d:ca:ce:14:00:3f:e0:23:9f:d1:11:da: 3a:ac:92:1d:82:bd:fc:1f:c6:bf:13:e0:ab:8f:0b: 4c:49:d2:35:88:25:e6:4d:17:dd:f5:e5:b7:a1:e4: 79:cd:ea:e3:0d:34:c3:e3:45:2b:de:a5:3a:ed:da: 02:67:fe:30:b2:8c:52:80:de:4f:62:eb:32:b0:8a: 61:47:8c:13:4b:6f:2f:c7:6e:bc:e4:09:61:83:22: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.15.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211470 Signature Algorithm: sha256WithRSAEncryption 09:7c:1f:71:d9:f2:a3:82:42:b0:21:36:a8:4d:76:a7:fa:2e: f8:98:30:45:be:ac:bb:a9:7b:fd:a6:7d:ba:52:61:b4:47:bb: d3:c7:98:ac:6f:fe:90:00:fe:cd:33:0a:ae:e5:16:dc:39:56: 96:b3:68:ac:73:8e:f6:d9:b0:9d:84:f1:54:a7:6b:ad:0a:4f: 61:fc:f3:10:5a:65:58:03:62:cb:9b:03:80:50:ba:6d:57:b6: 70:c9:d9:49:e9:42:cd:f7:9f:ed:20:66:4c:b8:e8:1a:23:96: f5:a6:44:2b:8b:98:f6:02:82:68:7c:16:b3:b4:c8:71:d4:90: bb:c1:55:e6:43:0b:6a:f3:b7:3e:91:5b:f8:0d:36:a9:9d:f2: 09:ac:71:69:a4:24:91:26:d5:34:21:df:21:fb:be:20:30:1d: 73:30:ac:85:35:40:5e:80:b3:73:1e:39:69:ad:78:5c:90:45: 2d:57:36:ab:df:43:1f:30:99:fc:ea:5b:78:61:e8:4c:dd:86: b5:49:da:3d:f5:92:59:b5:46:6c:d9:53:de:4e:96:fa:55:68: b7:b0:bb:ac:89:54:3b:d0:3e:93:03:a4:40:97:e8:ed:f8:e3: 35:36:03:f9:20:f2:f3:f7:c4:7f:4c:95:42:78:a2:2f:57:7e: fa:10:52:38 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o9cOMCg4Bokyrom/Ik/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQzMjc3NTA0MTRkMzQ5ZGFkZTAyMjMzNDk3Y2Y0NzY1NWNkM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TeYxW9fAtpRGw9XjXOhvGTBDFBq lKc51+MFJiJ0QhF4ispC+50/fDYmxwLWkFijB1SVIGwep3KCaLEZg+xckhPtRW33 5O8joijthFrEtlbtGauPYN/9vRv+AVX6K3CwuIgrGunJXM2cXH44nYri2HFmjGHh NBH2GV+TQmQMrbAObJjLNi2fxBc/ON6ELcWHdVuthyo7NGJrUmj/V4u3SyHTOwQk Yeudys4UAD/gI5/REdo6rJIdgr38H8a/E+CrjwtMSdI1iCXmTRfd9eW3oeR5zerj DTTD40Ur3qU67doCZ/4wsoxSgN5PYusysIphR4wTS28vx2685AlhgyKgGQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHRDJ3UEFNNJ2t4CIzSXz0dlXNPkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzYxMDg3 Mi1iNWI1LTQ0MmYtYjYzMC1lNWQxYWY1OWRlYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvNjEwODcy LWI1YjUtNDQyZi1iNjMwLWU1ZDFhZjU5ZGVhNi8xL2RFTW5kUVFVMDBuYTNnSWpO SmZQUjJWYzAtUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAudgPMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM6DjANBgkqhkiG9w0BAQsFAAOCAQEACXwfcdnyo4JCsCE2qE12p/ou+JgwRb6s u6l7/aZ9ulJhtEe708eYrG/+kAD+zTMKruUW3DlWlrNorHOO9tmwnYTxVKdrrQpP YfzzEFplWANiy5sDgFC6bVe2cMnZSelCzfef7SBmTLjoGiOW9aZEK4uY9gKCaHwW s7TIcdSQu8FV5kMLavO3PpFb+A02qZ3yCaxxaaQkkSbVNCHfIfu+IDAdczCshTVA XoCzcx45aa14XJBFLVc2q99DHzCZ/OpbeGHoTN2GtUnaPfWSWbVGbNlT3k6W+lVo t7C7rIlUO9A+kwOkQJfo7fjjNTYD+SDy8/fEf0yVQniiL1d++hBSOA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:41 2026 by rpki-client