This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer File: dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer (raw, json) Hash identifier: aEr9pm+B4AcR2pIVXfejKjoRq5rfim8620ek4yrtNCk= Subject key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12A414770C650FF203B1E7809EB091 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59767 IP: 185.34.4.0/22 IP: 2a04:5d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a4:14:77:0c:65:0f:f2:03:b1:e7:80:9e:b0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=749ea3b1e58ba060b41fc2a078f6016264759664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:44:32:6d:f2:f8:dd:9a:60:b7:77:d7:e9: 3e:1e:11:36:af:96:cb:31:f3:a7:1d:4c:5d:08:5c: c1:28:48:68:12:2f:9d:6b:90:c7:ec:02:12:dc:85: 34:2c:60:0a:58:77:57:4f:8b:d9:df:ff:83:f3:ea: 5e:df:9f:18:04:fa:42:35:e0:cc:fc:26:b7:28:69: 7e:49:43:7c:ef:f5:ba:a4:88:de:36:b1:ec:af:5b: bd:c1:59:68:54:71:c5:2a:01:1a:03:1e:c9:1b:cb: 77:f9:fe:9b:43:cf:fd:17:85:e2:ca:47:d0:e4:2c: f6:af:94:66:88:20:75:0f:19:df:62:25:42:43:af: a8:61:38:d0:cf:72:57:e6:f3:5c:f4:32:06:ba:a0: 83:c7:cb:39:b4:d6:37:2a:9c:e7:98:8d:42:fb:e0: 66:31:e3:bd:25:6a:13:80:c5:2c:23:04:26:73:8d: 36:87:62:72:05:68:d3:40:a2:2e:4c:53:54:83:a5: c5:14:da:8a:57:80:78:eb:8e:77:33:77:8d:d1:6e: e7:54:ef:21:aa:eb:5a:9b:ca:df:6b:52:7f:03:d6: 08:23:20:4f:a0:37:7b:7a:2e:86:54:38:4c:af:a4: 1e:85:c2:3f:48:9a:72:36:3b:d3:1b:eb:2a:ce:5f: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.4.0/22 IPv6: 2a04:5d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59767 Signature Algorithm: sha256WithRSAEncryption 8b:92:60:18:6c:cd:bb:18:3c:00:3b:2a:ae:4e:37:1b:ed:9b: 9f:08:28:e3:29:3d:7e:76:78:b2:35:9f:4e:85:09:9a:1f:b1: dc:7a:52:ec:85:80:ec:53:c9:c4:a8:c1:fe:3c:85:4e:77:9e: c5:65:4b:05:1b:fd:9f:c8:e6:bf:5d:3c:c9:81:9e:bc:47:5f: 4f:8c:70:f5:e0:66:66:d1:d5:ce:11:4f:81:2e:ea:28:9d:37: d1:11:10:af:64:5e:15:b6:b8:08:d8:70:63:e6:31:2b:7f:c5: d7:e6:38:c0:8e:7a:e5:6e:dd:c6:fa:1e:bb:60:7d:71:aa:79: f4:14:b6:f7:3c:06:b2:ca:74:53:07:b5:c1:d2:d9:33:15:2d: c4:69:02:63:28:a0:ef:d1:12:ed:74:2b:9b:92:e5:c5:c7:f1: ce:3c:1e:9d:7d:fb:57:ee:a0:53:69:45:1c:78:8a:10:93:e3: 92:bc:8d:4f:76:0e:1b:64:6c:53:d9:75:e4:fb:4f:09:35:18: fc:ca:4b:7a:13:73:d1:48:62:d5:1a:8e:5a:0b:03:ed:88:a9: 4c:a6:f8:39:ec:b4:da:1f:40:58:c3:e4:62:c8:98:bb:a3:2d: 35:09:39:21:5e:15:55:be:ed:42:8b:fe:e1:29:0a:d9:ce:e4: 61:15:9d:2a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EqQUdwxlD/IDseeAnrCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDllYTNiMWU1OGJhMDYwYjQxZmMyYTA3OGY2MDE2MjY0NzU5NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyBEMm3y+N2aYLd31+k+HhE2r5bL MfOnHUxdCFzBKEhoEi+da5DH7AIS3IU0LGAKWHdXT4vZ3/+D8+pe358YBPpCNeDM /Ca3KGl+SUN87/W6pIjeNrHsr1u9wVloVHHFKgEaAx7JG8t3+f6bQ8/9F4XiykfQ 5Cz2r5RmiCB1DxnfYiVCQ6+oYTjQz3JX5vNc9DIGuqCDx8s5tNY3KpznmI1C++Bm MeO9JWoTgMUsIwQmc402h2JyBWjTQKIuTFNUg6XFFNqKV4B46453M3eN0W7nVO8h qutam8rfa1J/A9YIIyBPoDd7ei6GVDhMr6QehcI/SJpyNjvTG+sqzl8pdwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHSeo7Hli6BgtB/CoHj2AWJkdZZkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3Lzg2MjQ2 YS1mMDMzLTRlNDgtYjdkZC0yZjQyNDJhMTNkMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvODYyNDZh LWYwMzMtNGU0OC1iN2RkLTJmNDI0MmExM2QwMC8xL2RKNmpzZVdMb0dDMEg4S2dl UFlCWW1SMWxtUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSIEMA0EAgACMAcDBQMqBF1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDpdzANBgkqhkiG9w0BAQsFAAOCAQEAi5JgGGzNuxg8 ADsqrk43G+2bnwgo4yk9fnZ4sjWfToUJmh+x3HpS7IWA7FPJxKjB/jyFTneexWVL BRv9n8jmv108yYGevEdfT4xw9eBmZtHVzhFPgS7qKJ030REQr2ReFba4CNhwY+Yx K3/F1+Y4wI565W7dxvoeu2B9cap59BS29zwGssp0Uwe1wdLZMxUtxGkCYyig79ES 7XQrm5LlxcfxzjwenX37V+6gU2lFHHiKEJPjkryNT3YOG2RsU9l15PtPCTUY/MpL ehNz0Uhi1RqOWgsD7YipTKb4Oey02h9AWMPkYsiYu6MtNQk5IV4VVb7tQov+4SkK 2c7kYRWdKg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:53 2026 by rpki-client