This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer (raw, json) Hash identifier: 4W9OR7iLlIB1o5sayZ36tu8JZiKE7EjD2nAdrkZ8o2E= Subject key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3333DB94360FC1A77F0D11798F773 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49552 IP: 91.213.36.0/24 IP: 2001:67c:24::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:33:3d:b9:43:60:fc:1a:77:f0:d1:17:98:f7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74ae941a681c1586379e07247dcc19f3f41035d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:ff:99:18:e5:d4:a7:88:0f:84:82:b2:bc: 07:dc:20:65:12:ca:7a:78:66:27:f3:a7:2c:41:c3: 72:79:17:24:11:83:5e:b9:79:37:aa:22:7e:57:68: 1c:bc:f5:4a:71:6b:22:c1:2a:a8:aa:f5:a4:a9:62: 69:76:a3:a0:6e:ea:73:c4:37:1b:13:cb:9c:a6:6e: 38:aa:f2:47:3f:d2:6a:5f:44:80:8c:40:2e:49:e7: b4:87:6f:a4:fe:a6:26:79:dd:69:d6:79:72:c7:11: 73:1a:6f:8d:98:8e:24:d1:63:6c:79:59:34:0b:61: 6c:ff:c0:3f:da:f3:ab:01:36:b8:6d:da:ab:43:54: 8b:d5:88:19:b5:9e:47:d6:b7:17:b0:b7:ec:fe:54: e8:1c:bd:94:d0:33:21:d8:69:a7:8d:3d:81:24:82: 85:db:4d:12:54:da:23:bf:ea:42:83:d5:fc:b5:8e: 9f:c2:ef:9f:00:c4:e0:e8:2e:ae:19:81:f7:f9:9f: 86:93:52:5b:72:03:24:66:15:63:45:94:f4:cd:f7: f2:12:b1:5f:d2:a6:e8:5a:76:33:53:3b:8a:f0:e2: a6:c9:34:d9:f3:30:3a:c5:b0:bf:f2:68:e7:53:0b: 60:84:43:85:5d:4e:64:24:8b:86:15:0d:d5:e1:e3: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.36.0/24 IPv6: 2001:67c:24::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49552 Signature Algorithm: sha256WithRSAEncryption a8:bb:03:94:ba:03:7a:cc:b2:54:28:31:c5:58:21:d5:1f:51: bc:0a:6b:69:6c:61:26:5d:d0:5c:85:3a:7f:de:f3:64:61:5b: 20:da:13:ca:f9:3c:b9:09:a2:7e:10:c7:52:78:ee:0a:0e:e2: 5f:d1:d8:42:45:e8:62:b3:91:73:3d:5c:0e:eb:cf:17:a7:c5: 28:65:13:de:d0:1f:ba:c5:81:47:db:38:a9:18:b9:45:04:68: 4b:7a:03:ef:e0:c2:3f:95:0b:6a:1c:a7:08:3b:fe:2d:24:d5: fc:fd:e4:c8:e1:b0:22:8a:ea:41:fd:10:eb:88:58:86:60:e1: 41:e4:09:ea:68:fd:70:da:fb:4c:22:54:91:5f:d4:47:6a:ab: fd:77:a8:ad:14:66:68:3f:84:e1:bf:52:3e:41:e4:1d:cc:1d: a0:ab:18:25:58:27:b7:8b:02:a7:71:99:2d:15:40:73:f7:a6: 4c:eb:2d:12:1f:ff:32:6a:70:cb:3b:ae:9a:4f:9d:c7:93:25: f7:47:64:2b:ef:4c:7c:5f:bc:1c:55:c9:4f:05:01:ba:16:ed: 47:2f:55:6b:96:b6:84:b4:f7:3e:76:5a:ef:b1:bd:46:dc:f1: df:59:45:0a:7d:68:94:44:9e:f5:ca:db:f0:d2:90:e1:e3:80: 82:04:04:1a -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7ozM9uUNg/Bp38NEXmPdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGFlOTQxYTY4MWMxNTg2Mzc5ZTA3MjQ3ZGNjMTlmM2Y0MTAzNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA//mRjl1KeID4SCsrwH3CBlEsp6 eGYn86csQcNyeRckEYNeuXk3qiJ+V2gcvPVKcWsiwSqoqvWkqWJpdqOgbupzxDcb E8ucpm44qvJHP9JqX0SAjEAuSee0h2+k/qYmed1p1nlyxxFzGm+NmI4k0WNseVk0 C2Fs/8A/2vOrATa4bdqrQ1SL1YgZtZ5H1rcXsLfs/lToHL2U0DMh2GmnjT2BJIKF 200SVNojv+pCg9X8tY6fwu+fAMTg6C6uGYH3+Z+Gk1JbcgMkZhVjRZT0zffyErFf 0qboWnYzUzuK8OKmyTTZ8zA6xbC/8mjnUwtghEOFXU5kJIuGFQ3V4eNt9QIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFHSulBpoHBWGN54HJH3MGfP0EDXYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzE0ZTRj Mi04YTk4LTQ1NmUtOTYxMi05NDI5ZGE4N2JkNTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvMTRlNGMy LThhOTgtNDU2ZS05NjEyLTk0MjlkYTg3YmQ1MC8xL2RLNlVHbWdjRllZM25nY2tm Y3daOF9RUU5kZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9UkMA8EAgACMAkDBwAgAQZ8ACQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMGQMA0GCSqGSIb3DQEBCwUAA4IBAQCouwOUugN6 zLJUKDHFWCHVH1G8CmtpbGEmXdBchTp/3vNkYVsg2hPK+Ty5CaJ+EMdSeO4KDuJf 0dhCRehis5FzPVwO688Xp8UoZRPe0B+6xYFH2zipGLlFBGhLegPv4MI/lQtqHKcI O/4tJNX8/eTI4bAiiupB/RDriFiGYOFB5AnqaP1w2vtMIlSRX9RHaqv9d6itFGZo P4Thv1I+QeQdzB2gqxglWCe3iwKncZktFUBz96ZM6y0SH/8yanDLO66aT53HkyX3 R2Qr70x8X7wcVclPBQG6Fu1HL1VrlraEtPc+dlrvsb1G3PHfWUUKfWiURJ71ytvw 0pDh44CCBAQa -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:48 2026 by rpki-client