This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer File: dHnfUKMVAp6AqhlHr-EtselIYos.cer (raw, json) Hash identifier: +Uohrl8LYsgUxiZqb6D3s8W8frvWaGWSLw0RBQVSKOA= Subject key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C6B4FAB0A27C522A36F2AF3FD9450 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30833 IP: 79.98.136.0/21 IP: 80.249.200.0/22 IP: 217.78.176.0/20 IP: 2a00:d98::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6b:4f:ab:0a:27:c5:22:a3:6f:2a:f3:fd:94:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7479df50a315029e80aa1947afe12db1e948628b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:c4:d9:ee:f2:bd:71:1d:71:d8:e7:96:ba: f8:94:8d:f6:83:25:5c:02:a4:40:75:dc:7c:af:7d: ac:93:be:c6:c0:00:c6:9d:1c:e0:39:c1:16:e1:16: e5:e5:4d:30:7f:49:3b:ae:9e:62:3b:12:31:3e:97: 7a:8a:7a:d3:0e:e3:03:21:20:36:fb:f7:a9:03:06: 4e:a0:ae:58:53:99:36:48:10:aa:ed:47:ef:5c:af: 69:e6:9f:18:c4:64:d1:9f:09:fe:6c:0f:ba:7c:2f: d4:7b:f8:0d:6f:d8:6a:ba:31:18:01:e9:cd:d8:89: 87:66:d1:9d:6e:88:3f:09:99:e6:94:ef:7f:db:66: f0:8b:7c:cb:c8:10:1b:15:53:12:16:7d:e1:ef:94: ef:6e:66:b4:79:9a:3e:96:90:b3:e9:2b:0e:f8:da: b0:bd:45:26:86:86:67:f7:88:25:ae:57:82:55:57: fb:1e:12:0e:87:ac:73:c1:ed:a9:eb:59:9d:40:40: 80:45:5e:d6:01:58:dd:be:bf:83:fc:02:95:a6:18: 90:98:de:15:a4:40:67:9d:06:cf:b1:f5:1b:82:e9: 2b:50:ee:fc:2b:8b:32:6e:b2:aa:06:c5:e8:07:ab: 14:a6:fb:1a:32:1e:3c:b8:01:1e:63:68:a5:4e:99: 16:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.136.0/21 80.249.200.0/22 217.78.176.0/20 IPv6: 2a00:d98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30833 Signature Algorithm: sha256WithRSAEncryption 2c:7f:be:0c:c2:e7:f5:71:4f:6c:03:64:d8:2d:76:68:b0:53: 7d:19:82:66:7e:1c:7f:b6:cd:c8:f6:4a:99:3b:b7:55:a5:0b: 49:bc:63:60:e5:3f:a6:a6:9b:88:cd:b5:b4:9e:da:cf:85:4b: c9:c7:82:3a:32:bc:89:bd:ba:ea:77:27:df:39:c1:12:cb:df: 46:75:89:d9:ab:c6:ce:21:dc:dc:72:61:66:90:2d:12:fc:1b: e2:85:6a:0e:2a:fe:bc:cb:09:d5:86:63:5b:82:85:3b:65:76: bd:1b:7e:ad:86:69:4a:5b:5b:32:dc:55:b6:7c:e2:70:fe:cf: ee:3a:6c:85:a6:78:99:ad:c5:bd:bb:1f:d1:e0:8b:ce:cc:e5: f7:94:70:a1:3b:52:df:32:64:4b:3b:70:ce:74:c2:ef:2a:81: ea:03:d7:c6:cc:de:12:c9:ef:14:8f:5c:94:1c:79:e1:8d:c4: c3:b9:fa:05:ff:00:f4:5b:d7:26:e9:c3:b9:0c:a9:a5:5c:57: 8f:0f:ed:57:12:74:53:24:5c:05:a0:ff:b1:ed:55:d5:ab:08: b3:e0:ef:ad:de:9c:c4:b2:14:37:50:4e:11:5a:f9:90:09:38: 7c:f7:f5:97:78:62:ac:f0:15:96:c2:8e:3a:cb:b6:fc:d3:a5: 9a:30:e0:46 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt9XGtPqwonxSKjbyrz/ZRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDc5ZGY1MGEzMTUwMjllODBhYTE5NDdhZmUxMmRiMWU5NDg2MjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllnE2e7yvXEdcdjnlrr4lI32gyVc AqRAddx8r32sk77GwADGnRzgOcEW4Rbl5U0wf0k7rp5iOxIxPpd6inrTDuMDISA2 +/epAwZOoK5YU5k2SBCq7UfvXK9p5p8YxGTRnwn+bA+6fC/Ue/gNb9hqujEYAenN 2ImHZtGdbog/CZnmlO9/22bwi3zLyBAbFVMSFn3h75Tvbma0eZo+lpCz6SsO+Nqw vUUmhoZn94glrleCVVf7HhIOh6xzwe2p61mdQECARV7WAVjdvr+D/AKVphiQmN4V pEBnnQbPsfUbgukrUO78K4sybrKqBsXoB6sUpvsaMh48uAEeY2ilTpkW3QIDAQAB o4ICujCCArYwHQYDVR0OBBYEFHR531CjFQKegKoZR6/hLbHpSGKLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzE2NzM1 ZC02NjU4LTRiNmYtYTI2MS05N2JhMzczNDVhYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMTY3MzVk LTY2NTgtNGI2Zi1hMjYxLTk3YmEzNzM0NWFhOC8xL2RIbmZVS01WQXA2QXFobEhy LUV0c2VsSVlvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDT2KIAwQCUPnIAwQE2U6wMA0EAgACMAcDBQAq AA2YMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnhxMA0GCSqGSIb3DQEBCwUAA4IB AQAsf74Mwuf1cU9sA2TYLXZosFN9GYJmfhx/ts3I9kqZO7dVpQtJvGNg5T+mppuI zbW0ntrPhUvJx4I6MryJvbrqdyffOcESy99GdYnZq8bOIdzccmFmkC0S/BvihWoO Kv68ywnVhmNbgoU7ZXa9G36thmlKW1sy3FW2fOJw/s/uOmyFpniZrcW9ux/R4IvO zOX3lHChO1LfMmRLO3DOdMLvKoHqA9fGzN4Sye8Uj1yUHHnhjcTDufoF/wD0W9cm 6cO5DKmlXFePD+1XEnRTJFwFoP+x7VXVqwiz4O+t3pzEshQ3UE4RWvmQCTh89/WX eGKs8BWWwo46y7b806WaMOBG -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:16 2026 by rpki-client