This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer File: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer (raw, json) Hash identifier: o0/glw6GrIau4v6nZvxQCjIQBxbyHM1MGjH+eh2ffJM= Subject key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3367EAF9D5B35AAB09ED0C25E7EBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198179 IP: 91.242.222.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:36:7e:af:9d:5b:35:aa:b0:9e:d0:c2:5e:7e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:22:08:63:27:7b:f1:1e:5f:9a:78:be:48: 5c:62:d0:56:a4:ac:5f:1e:ba:81:7e:60:af:f2:96: e3:ea:ee:bc:88:90:26:44:73:c9:b5:13:9b:a9:20: 15:94:97:66:7e:de:44:9a:ee:36:a6:62:a7:60:99: d7:98:d3:5c:8b:27:1f:84:2b:df:e2:fd:ec:29:67: 37:48:32:b5:62:c1:b4:14:a2:8b:ae:65:4f:87:1c: 4c:ff:35:f4:78:cc:59:43:bc:d5:94:3c:3a:1c:ab: 50:f4:03:32:34:d0:7d:75:8f:cd:7f:5d:54:c2:57: 67:31:04:2a:f1:87:8f:af:b0:32:c3:1c:0c:67:ff: 4d:64:3f:68:9e:d9:00:30:d0:f3:8b:1c:e5:85:61: 75:31:5f:df:97:2e:08:c3:d6:0d:4c:15:1f:3a:5b: 05:c2:6b:15:55:7b:39:62:ac:df:31:fe:48:bd:f1: 4e:8c:7e:0d:d9:08:52:aa:57:6e:10:49:92:06:35: 98:5a:78:45:03:67:c8:22:95:4a:4b:d5:28:a1:18: 96:1e:30:86:87:00:7c:3f:ea:dd:8e:5d:ff:fa:d2: 02:4c:8c:6c:a4:f5:98:49:50:1f:e7:27:af:b1:b7: 13:2a:94:a5:32:ec:21:db:b8:5e:d8:6d:d9:ee:34: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198179 Signature Algorithm: sha256WithRSAEncryption 2b:82:d9:2b:e5:8a:cf:62:fc:ea:16:4b:b8:22:44:3f:f3:a8: 14:6f:fa:fa:8b:c1:77:a9:ac:c2:66:14:35:51:a0:57:fa:6b: 4c:79:70:4d:62:a8:0c:6c:a1:fd:47:1c:3c:be:86:b8:5d:bd: 27:71:39:67:80:89:1f:57:79:42:bc:7e:59:81:7d:30:9f:6a: 50:06:a4:24:48:f0:42:81:d0:65:70:9f:fe:70:76:08:34:5b: 6d:17:3c:2c:a4:50:30:0a:aa:ce:89:e4:7f:6a:85:5a:07:4b: c2:c8:f6:88:e3:c5:68:2e:19:dc:5c:41:f9:a2:45:93:fc:3d: 9e:ae:34:c2:52:ac:ee:06:58:4e:04:61:4e:03:1f:9a:9d:94: b0:cf:22:c0:13:91:d3:42:33:19:ed:03:cb:62:f7:ef:8d:4b: 97:2e:f1:c2:c2:00:75:35:4b:b8:67:67:a9:45:f2:32:97:48: 6d:62:87:e5:51:0f:04:1d:a4:f4:39:19:bb:7f:ad:6e:79:ae: 8b:76:c9:df:9c:e6:37:bf:a3:6e:97:12:df:fa:87:11:be:8d: 8f:e8:79:0e:7f:99:58:db:2a:72:3d:cd:a3:df:f1:ef:b4:58: 21:d3:c8:98:e0:49:55:e7:42:04:7e:1f:80:db:8d:2f:72:42: 8c:0f:bc:d0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7ozZ+r51bNaqwntDCXn69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDVkYmE1NmNmMWZmYzJjZmMxZDA1ZjRmYTgzMzExN2VmZDdjNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXUiCGMne/EeX5p4vkhcYtBWpKxf HrqBfmCv8pbj6u68iJAmRHPJtRObqSAVlJdmft5Emu42pmKnYJnXmNNciycfhCvf 4v3sKWc3SDK1YsG0FKKLrmVPhxxM/zX0eMxZQ7zVlDw6HKtQ9AMyNNB9dY/Nf11U wldnMQQq8YePr7AywxwMZ/9NZD9ontkAMNDzixzlhWF1MV/fly4Iw9YNTBUfOlsF wmsVVXs5YqzfMf5IvfFOjH4N2QhSqlduEEmSBjWYWnhFA2fIIpVKS9UooRiWHjCG hwB8P+rdjl3/+tICTIxspPWYSVAf5yevsbcTKpSlMuwh27he2G3Z7jRpawIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHRdulbPH/ws/B0F9PqDMRfv18eKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzY1ZDNh NC01Y2NjLTQwMzctYThmOC0wYTMyNzExNjY1YWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNjVkM2E0 LTVjY2MtNDAzNy1hOGY4LTBhMzI3MTE2NjVhZC8xL2RGMjZWczhmX0N6OEhRWDAt b014Ri1fWHg0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW/LeMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMGIzANBgkqhkiG9w0BAQsFAAOCAQEAK4LZK+WKz2L86hZLuCJEP/OoFG/6+ovB d6mswmYUNVGgV/prTHlwTWKoDGyh/UccPL6GuF29J3E5Z4CJH1d5Qrx+WYF9MJ9q UAakJEjwQoHQZXCf/nB2CDRbbRc8LKRQMAqqzonkf2qFWgdLwsj2iOPFaC4Z3FxB +aJFk/w9nq40wlKs7gZYTgRhTgMfmp2UsM8iwBOR00IzGe0Dy2L3741Lly7xwsIA dTVLuGdnqUXyMpdIbWKH5VEPBB2k9DkZu3+tbnmui3bJ35zmN7+jbpcS3/qHEb6N j+h5Dn+ZWNsqcj3No9/x77RYIdPImOBJVedCBH4fgNuNL3JCjA+80A== -----END CERTIFICATE-----Generated at Sun Jan 18 16:41:09 2026 by rpki-client