This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer File: dNnAc7T3BpfiF1walV9sqMOmJGs.cer (raw, json) Hash identifier: oQHilPqmTMvrYFVdWGFRrU2xL+MKMSswgvWG/zp40gs= Subject key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A303726C108D5E7185432CDFBA90E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212190 IP: 45.90.239.0/24 IP: 213.232.217.0/24 IP: 2a14:7940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:03:72:6c:10:8d:5e:71:85:43:2c:df:ba:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:25:42:01:91:e4:e2:ac:4a:ad:bf:3a:a4: 43:9c:68:75:ef:82:f3:d8:5d:49:c1:8e:70:1a:39: c2:b3:1f:6c:7b:3b:55:b4:c1:ea:65:f2:cc:db:9d: c9:7b:f0:6d:49:55:09:66:01:0c:74:ef:1f:cc:9e: 3b:b8:09:6c:73:36:ff:8a:5b:0d:e7:5c:18:45:13: ed:0e:fe:5a:f1:5b:7b:dd:41:cc:18:d9:84:8c:7c: f9:c7:c0:e1:ab:42:b3:ad:d5:4d:3e:3d:d3:87:03: c3:ed:43:7c:f5:bd:12:d5:85:7a:9a:df:25:af:c4: 44:0f:3c:c2:6b:e9:0e:2c:cd:24:ca:98:d6:27:9d: 72:90:6a:c1:f7:20:09:c1:37:a5:1b:7c:c9:be:c5: 38:96:7a:43:ce:62:85:24:21:59:32:4d:7e:70:78: 2f:78:51:14:90:6c:52:98:40:c1:e0:69:34:02:66: 47:35:4b:61:cb:95:9f:d3:37:4f:08:e4:19:27:bb: f2:33:50:86:76:64:e4:b9:ad:2a:53:ae:9c:b0:cb: 24:59:3f:e2:f1:00:08:e9:77:25:4f:95:cb:c4:1d: f4:71:8c:65:b7:5a:a0:0f:fc:d8:6d:c9:d9:8d:f6: a5:e7:be:43:15:99:68:30:57:38:8d:a9:c3:4c:39: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.239.0/24 213.232.217.0/24 IPv6: 2a14:7940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212190 Signature Algorithm: sha256WithRSAEncryption 3f:d2:9d:12:fb:13:18:29:07:22:00:d4:87:c5:f4:a1:5f:d3: 5e:7d:7a:0c:81:d9:1e:48:81:19:15:13:a5:5d:00:35:b7:1d: e9:35:e2:c3:53:6e:5c:ef:3d:ec:5d:dc:56:16:88:b3:85:ea: 81:cd:2e:b6:22:64:89:14:4f:06:9b:63:80:6e:19:ad:00:55: cb:5d:a7:d8:21:b6:db:b9:c2:4a:b2:0a:27:54:ac:e0:9b:47: 08:4d:00:1a:08:98:68:c9:25:64:a3:fa:1f:f7:e2:c3:1e:34: 36:b7:b2:f9:e1:2a:6f:cb:07:90:36:60:bb:58:8e:6e:e1:e0: 84:32:a4:67:53:6a:1a:14:63:d9:32:1b:d1:0f:63:9f:2b:e0: 2e:75:04:e4:43:70:4b:36:59:c5:61:b3:87:74:8e:59:61:78: 2a:9c:3c:b2:2d:f8:d9:6b:67:c1:7d:d9:a1:ab:9a:03:a9:08: 2d:1d:db:3d:82:91:63:ce:41:00:63:f3:6b:c2:62:b8:dd:7c: f5:01:f1:14:0c:c2:d1:05:78:ca:d0:6f:62:ba:8c:bd:39:b6: 5d:6d:39:40:ed:17:14:c1:b8:07:7b:32:c3:10:fd:0f:5c:7b: cc:72:a2:03:6e:10:ba:33:1c:25:59:7f:21:39:04:1e:c3:00: 34:49:04:90 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4owNybBCNXnGFQyzfupDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQ5YzA3M2I0ZjcwNjk3ZTIxNzVjMWE5NTVmNmNhOGMzYTYyNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBMlQgGR5OKsSq2/OqRDnGh174Lz 2F1JwY5wGjnCsx9seztVtMHqZfLM253Je/BtSVUJZgEMdO8fzJ47uAlsczb/ilsN 51wYRRPtDv5a8Vt73UHMGNmEjHz5x8Dhq0KzrdVNPj3ThwPD7UN89b0S1YV6mt8l r8REDzzCa+kOLM0kypjWJ51ykGrB9yAJwTelG3zJvsU4lnpDzmKFJCFZMk1+cHgv eFEUkGxSmEDB4Gk0AmZHNUthy5Wf0zdPCOQZJ7vyM1CGdmTkua0qU66csMskWT/i 8QAI6XclT5XLxB30cYxlt1qgD/zYbcnZjfal575DFZloMFc4janDTDkb4QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHTZwHO09waX4hdcGpVfbKjDpiRrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzljZDFk Ny0zNGU3LTQ3YzEtODQ4NC1jMTkxNDEwZGM4ODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvOWNkMWQ3 LTM0ZTctNDdjMS04NDg0LWMxOTE0MTBkYzg4OS8xL2RObkFjN1QzQnBmaUYxd2Fs VjlzcU1PbUpHcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQALVrvAwQA1ejZMA0EAgACMAcDBQMqFHlAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM83jANBgkqhkiG9w0BAQsFAAOCAQEAP9Kd EvsTGCkHIgDUh8X0oV/TXn16DIHZHkiBGRUTpV0ANbcd6TXiw1NuXO897F3cVhaI s4Xqgc0utiJkiRRPBptjgG4ZrQBVy12n2CG227nCSrIKJ1Ss4JtHCE0AGgiYaMkl ZKP6H/fiwx40Nrey+eEqb8sHkDZgu1iObuHghDKkZ1NqGhRj2TIb0Q9jnyvgLnUE 5ENwSzZZxWGzh3SOWWF4Kpw8si342WtnwX3ZoauaA6kILR3bPYKRY85BAGPza8Ji uN189QHxFAzC0QV4ytBvYrqMvTm2XW05QO0XFMG4B3sywxD9D1x7zHKiA24QujMc JVl/ITkEHsMANEkEkA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:19 2026 by rpki-client