This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer File: dLTNPt9SHfjsChURESctP7kbmcM.cer (raw, json) Hash identifier: QYIPXysUgysyuA2+wJ4CWCNE2RBtiA6HrLtm2zs9Yx8= Subject key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35A07E8BDD70FE037BEB660648C220 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209814 IP: 45.144.16.0/22 IP: 91.227.246.0/23 IP: 91.228.22.0/23 IP: 193.148.64.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a0:7e:8b:dd:70:fe:03:7b:eb:66:06:48:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:16:09:9b:11:1f:08:e8:7a:c5:58:8c:7a: e5:1f:89:d7:e0:f7:44:1b:7a:b7:5e:a1:f6:9a:ff: 5d:76:f0:19:05:0f:6c:ee:55:35:f6:20:40:26:75: 80:e2:6f:04:77:a8:72:c2:32:fa:eb:5f:2d:98:76: 88:66:f9:9f:57:51:8d:eb:4b:5e:82:64:20:6e:d3: 8e:d1:0e:b5:7a:15:74:61:58:e9:54:14:c9:df:5a: b4:3a:f2:2f:0d:68:2d:58:34:47:49:23:19:3b:10: 71:94:de:f8:3b:c8:14:10:f7:12:bf:73:52:3d:07: a1:db:ae:64:26:1e:34:7e:60:2a:91:1a:8f:d8:ec: b6:7b:04:21:74:da:c0:da:44:7e:c0:0a:5c:8e:a9: ea:4b:8a:e6:84:40:ee:ad:fb:49:68:a5:ea:48:ef: 9f:61:51:be:0e:07:6a:6d:c3:a3:9a:16:9d:0b:c2: 33:e6:91:28:aa:0a:66:96:a4:8f:a1:83:ef:40:ef: 81:24:82:bb:47:b4:19:94:21:30:b8:3d:06:d3:5f: 7d:3f:71:8c:9e:25:6e:b1:f4:6c:d5:06:ae:9a:3e: 8b:50:fa:45:04:7a:0f:47:7f:92:0e:da:17:79:87: c1:49:97:9d:5d:cf:10:c9:38:26:dd:ad:78:e4:cf: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.16.0/22 91.227.246.0/23 91.228.22.0/23 193.148.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209814 Signature Algorithm: sha256WithRSAEncryption 65:fd:f9:1a:17:d4:5d:6c:92:9d:1f:0e:af:f6:32:f3:65:65: 51:b3:33:dc:2a:a9:54:e8:e1:34:cf:7d:f2:e2:fe:01:ee:b4: 84:be:c9:a8:c5:f5:b6:c6:31:78:64:53:50:bf:62:c0:eb:f8: 5c:bf:d3:57:59:c3:09:d8:53:f3:9e:47:35:ab:85:8e:5b:7a: a5:6e:83:43:f8:8a:28:23:10:c4:f3:8e:9a:ee:45:e1:4c:9c: 3c:f8:3f:9e:91:ab:a4:b2:b7:75:8c:e8:49:da:2e:48:a4:42: c4:af:cc:f6:9d:5e:0c:e1:95:00:44:99:42:89:d7:97:b9:f2: d3:8e:87:77:3f:05:8f:e8:3e:de:29:99:0b:54:1a:8f:cf:80: 52:90:ed:4b:f0:35:69:49:4c:d6:f5:6d:82:83:bc:9d:c4:29: 12:e9:e6:df:35:04:59:e9:74:23:1a:81:a9:93:51:01:68:1a: 43:80:2b:d6:5f:12:40:ad:42:86:3f:37:3d:59:7a:89:2e:12: 45:9a:ba:98:f7:1b:7c:6e:70:2b:f5:7c:64:3b:a9:df:a4:ba: f1:42:a2:fc:ef:7d:f1:67:1e:0a:c9:2a:5d:8e:1f:c7:d4:28: 0e:21:09:28:e7:90:8a:85:1d:f9:12:cf:76:e7:db:76:67:5a: b6:ea:02:f3 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt7NaB+i91w/gN762YGSMIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGI0Y2QzZWRmNTIxZGY4ZWMwYTE1MTExMTI3MmQzZmI5MWI5OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB8WCZsRHwjoesVYjHrlH4nX4PdE G3q3XqH2mv9ddvAZBQ9s7lU19iBAJnWA4m8Ed6hywjL6618tmHaIZvmfV1GN60te gmQgbtOO0Q61ehV0YVjpVBTJ31q0OvIvDWgtWDRHSSMZOxBxlN74O8gUEPcSv3NS PQeh265kJh40fmAqkRqP2Oy2ewQhdNrA2kR+wApcjqnqS4rmhEDurftJaKXqSO+f YVG+DgdqbcOjmhadC8Iz5pEoqgpmlqSPoYPvQO+BJIK7R7QZlCEwuD0G0199P3GM niVusfRs1Qaumj6LUPpFBHoPR3+SDtoXeYfBSZedXc8QyTgm3a145M8CUwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFHS0zT7fUh347AoVEREnLT+5G5nDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzllNDdl OS0zMjgxLTRkMTctYTZiYy1lMmE3ZmI4NDgzMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvOWU0N2U5 LTMyODEtNGQxNy1hNmJjLWUyYTdmYjg0ODMxOC8xL2RMVE5QdDlTSGZqc0NoVVJF U2N0UDdrYm1jTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQCLZAQAwQBW+P2AwQBW+QWAwQCwZRAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwMzljANBgkqhkiG9w0BAQsFAAOCAQEAZf35GhfU XWySnR8Or/Yy82VlUbMz3CqpVOjhNM998uL+Ae60hL7JqMX1tsYxeGRTUL9iwOv4 XL/TV1nDCdhT855HNauFjlt6pW6DQ/iKKCMQxPOOmu5F4UycPPg/npGrpLK3dYzo SdouSKRCxK/M9p1eDOGVAESZQonXl7ny046Hdz8Fj+g+3imZC1Qaj8+AUpDtS/A1 aUlM1vVtgoO8ncQpEunm3zUEWel0IxqBqZNRAWgaQ4Ar1l8SQK1Chj83PVl6iS4S RZq6mPcbfG5wK/V8ZDup36S68UKi/O998WceCskqXY4fx9QoDiEJKOeQioUd+RLP dufbdmdatuoC8w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:26 2026 by rpki-client