This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer File: dJFafoze18DuIhnnMMGYy7eLxfI.cer (raw, json) Hash identifier: pBJLZl/pncK+msjDhhCjrTYmtGon0cKr/E7/D4N7L/Y= Subject key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA47430E372B6F45DD633104AF33E03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215271 IP: 213.177.181.0/24 IP: 2a14:2740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:74:30:e3:72:b6:f4:5d:d6:33:10:4a:f3:3e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:a6:a8:ed:f8:ef:4f:96:a0:d7:0f:29:c1: 4d:1c:dd:f4:79:b0:73:55:2c:02:45:45:7e:c0:ad: cd:17:e6:0c:cb:c9:15:31:dd:b5:93:80:b8:64:cc: 37:3c:16:23:19:8f:62:af:94:78:5c:0d:37:6e:f8: ef:3a:a2:f9:2c:e1:08:86:b1:a6:aa:fe:fb:f2:db: 3e:37:a6:82:97:e8:f1:27:20:9e:76:0c:90:37:54: fc:a2:8b:19:6a:0a:9c:de:4e:0f:9e:98:8a:ad:a7: 66:9a:01:85:0f:8f:55:48:f2:d7:b2:5e:c3:b5:19: c2:66:85:f2:85:7a:18:fc:fc:8a:d3:d1:d2:d8:90: f8:df:06:d0:ab:3c:68:3f:8f:22:59:af:87:f7:0d: ef:c5:47:39:09:95:e9:e3:47:6d:8f:85:06:f1:12: c8:9a:d4:6e:c1:8a:74:a5:5b:d6:b1:31:d6:a9:ab: 02:1a:36:90:f9:c9:16:ba:0d:49:ab:cf:c5:4b:84: 4b:78:9c:52:5c:8f:ce:6f:e6:f3:1c:af:37:65:02: ad:fd:f1:1c:4b:bf:25:4a:43:8d:78:d1:44:89:53: 94:f3:49:d2:cb:a6:91:fd:47:1a:09:fa:6b:18:05: 7a:ee:1f:0f:08:5e:43:72:22:20:cd:12:21:69:6e: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.181.0/24 IPv6: 2a14:2740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215271 Signature Algorithm: sha256WithRSAEncryption 9f:ce:da:72:76:ca:e7:da:28:48:dd:06:9d:03:50:e7:56:00: fc:d0:66:aa:d1:24:46:8a:8d:3d:56:94:8a:fb:84:b0:98:3d: 42:b2:35:92:c0:f0:73:89:17:4b:96:cf:b8:ed:e2:cd:7c:c1: d1:af:3f:f0:f1:03:d6:ba:ca:50:7e:0c:87:43:aa:2b:f5:6c: 02:96:b0:00:33:c9:09:f9:1c:b4:40:5a:b6:b2:88:82:72:96: 75:c2:53:7d:7c:27:2b:0e:ff:cf:92:69:46:d4:b5:99:70:a4: c7:65:f7:68:f4:a8:b9:3b:ff:69:3a:fc:bd:0a:bc:bd:b5:60: da:2a:85:40:cf:fc:01:95:61:22:64:52:96:66:3f:3c:2e:c8: ac:ab:ec:0b:8a:59:22:47:5d:b3:20:a5:fd:71:87:72:74:99: 0e:9c:fc:db:27:73:37:11:c0:f9:cc:ef:a2:54:32:69:6b:45: e4:b8:e3:23:46:1e:39:1c:7a:9a:13:ee:2c:92:44:34:c4:90: 9d:9e:14:0d:37:15:44:39:6e:94:5c:09:d0:0e:94:2b:7f:98: 6c:cb:45:49:ff:96:36:1f:93:71:91:75:c7:19:3b:53:21:52: a8:7a:2b:57:9b:59:fd:dd:ba:7d:2a:d1:49:25:3d:df:9f:b4: 15:f7:4b:2b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pHQw43K29F3WMxBK8z4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDkxNWE3ZThjZGVkN2MwZWUyMjE5ZTczMGMxOThjYmI3OGJjNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E6mqO3470+WoNcPKcFNHN30ebBz VSwCRUV+wK3NF+YMy8kVMd21k4C4ZMw3PBYjGY9ir5R4XA03bvjvOqL5LOEIhrGm qv778ts+N6aCl+jxJyCedgyQN1T8oosZagqc3k4PnpiKradmmgGFD49VSPLXsl7D tRnCZoXyhXoY/PyK09HS2JD43wbQqzxoP48iWa+H9w3vxUc5CZXp40dtj4UG8RLI mtRuwYp0pVvWsTHWqasCGjaQ+ckWug1Jq8/FS4RLeJxSXI/Ob+bzHK83ZQKt/fEc S78lSkONeNFEiVOU80nSy6aR/UcaCfprGAV67h8PCF5DciIgzRIhaW5anwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHSRWn6M3tfA7iIZ5zDBmMu3i8XyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzdiMWU0 Mi00NjhmLTQxZTctYTllNy0wYTJhOGM2Yzk1ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvN2IxZTQy LTQ2OGYtNDFlNy1hOWU3LTBhMmE4YzZjOTVkYS8xL2RKRmFmb3plMThEdUlobm5N TUdZeTdlTHhmSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1bG1MA0EAgACMAcDBQMqFCdAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNI5zANBgkqhkiG9w0BAQsFAAOCAQEAn87acnbK59oo SN0GnQNQ51YA/NBmqtEkRoqNPVaUivuEsJg9QrI1ksDwc4kXS5bPuO3izXzB0a8/ 8PED1rrKUH4Mh0OqK/VsApawADPJCfkctEBatrKIgnKWdcJTfXwnKw7/z5JpRtS1 mXCkx2X3aPSouTv/aTr8vQq8vbVg2iqFQM/8AZVhImRSlmY/PC7IrKvsC4pZIkdd syCl/XGHcnSZDpz82ydzNxHA+czvolQyaWtF5LjjI0YeORx6mhPuLJJENMSQnZ4U DTcVRDlulFwJ0A6UK3+YbMtFSf+WNh+TcZF1xxk7UyFSqHorV5tZ/d26fSrRSSU9 35+0FfdLKw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:54 2026 by rpki-client