This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer File: dXFLWBraGW41UcCM52JDvgWLROs.cer (raw, json) Hash identifier: opbTrsHYZeWr25K6QvHiBJfux0Y4+34gic1uxZcy+ig= Subject key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35F452BEA136179C01A86AEF22FFD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48117 AS: 57699 IP: 46.151.248.0/21 IP: 91.209.24.0/24 IP: 193.106.24.0/22 IP: 194.146.136.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f4:52:be:a1:36:17:9c:01:a8:6a:ef:22:ff:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75714b581ada196e3551c08ce76243be058b44eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a7:7e:03:b5:e7:4e:8b:83:c7:b0:68:70:dd: 78:1c:d0:10:b3:0e:f5:cc:9a:3f:7b:b5:33:f0:26: d8:1b:35:cb:ad:59:78:5b:42:2c:b0:69:db:ba:4c: e3:a3:b3:c7:cb:8c:d3:9f:cf:46:2e:b2:e8:3d:6d: 76:9b:87:81:52:ff:5f:52:c9:52:ff:50:ac:37:23: 8f:bb:2e:4f:b4:0f:c2:b4:db:ff:a5:0d:ec:c3:dd: b1:ff:6d:23:39:3b:cd:1b:a8:ca:fc:a1:13:8a:4f: e1:29:1c:85:7b:af:34:dd:08:46:2e:44:ad:d9:74: b5:0d:01:4b:df:45:06:b1:84:65:4d:36:39:4b:f3: 8b:dd:23:f0:1c:2e:2d:38:82:a4:08:09:57:54:ae: 19:7a:32:8d:68:fe:61:14:6e:26:cd:fa:2d:29:0e: f7:1c:78:49:a4:64:be:11:68:01:fe:a1:56:4f:dd: a2:a0:93:63:07:f7:85:2e:96:12:17:87:ae:d1:77: d1:d9:8d:cd:5c:a1:19:0f:2e:e0:e9:ed:17:6d:a6: a1:ab:50:b9:e6:c4:de:e9:f8:b8:56:73:a2:10:72: d6:a1:13:e4:cc:03:db:37:45:ed:b1:0e:57:4d:b8: cf:60:a1:e7:9d:3a:10:0a:c7:59:1c:58:d0:6a:cf: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.248.0/21 91.209.24.0/24 193.106.24.0/22 194.146.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48117 57699 Signature Algorithm: sha256WithRSAEncryption 52:bd:c5:f4:5e:a9:3f:ee:5a:8a:a7:2b:0d:19:f5:55:95:a8: 7e:2c:e8:ff:6a:ce:1c:ee:31:59:07:04:d8:75:45:1d:e3:76: 43:70:0b:44:01:c3:38:00:18:7f:0b:2e:c0:72:2e:ef:b2:25: ab:7a:e1:dc:74:a0:aa:ab:43:cd:00:a6:2a:96:b6:21:a4:6a: 82:7a:a5:2d:dd:25:b8:09:ae:5c:23:5b:ca:7b:8d:d1:c9:56: 5d:02:31:49:54:7f:f6:9c:2b:d3:29:0f:20:49:1e:96:2b:00: 56:a0:ba:6a:b1:15:db:77:a3:17:b4:ec:aa:aa:2e:c1:47:98: 64:2c:ec:90:74:41:cd:20:2a:5c:6f:22:e2:a5:3c:39:9a:75: 56:20:2f:b5:8a:5e:a1:9c:db:09:a8:43:40:ef:94:cb:e8:d8: f9:b3:62:f9:f2:8f:b0:b6:46:f9:cc:22:8c:fe:1c:96:83:66: 7d:c5:52:f4:1a:72:34:aa:cc:ed:c4:3d:04:b7:11:5e:c2:12: 9d:69:f4:4a:3b:fa:e5:88:58:eb:42:31:82:68:8b:4d:0f:fb: ef:cf:50:7c:e2:dc:83:4f:85:cb:31:4b:d3:17:6f:73:8b:f4: e9:e5:bb:e6:70:24:8f:46:e2:41:e5:74:95:4b:48:33:f1:54: 73:06:87:df -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt7NfRSvqE2F5wBqGrvIv/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTcxNGI1ODFhZGExOTZlMzU1MWMwOGNlNzYyNDNiZTA1OGI0NGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Kd+A7XnTouDx7BocN14HNAQsw71 zJo/e7Uz8CbYGzXLrVl4W0IssGnbukzjo7PHy4zTn89GLrLoPW12m4eBUv9fUslS /1CsNyOPuy5PtA/CtNv/pQ3sw92x/20jOTvNG6jK/KETik/hKRyFe6803QhGLkSt 2XS1DQFL30UGsYRlTTY5S/OL3SPwHC4tOIKkCAlXVK4ZejKNaP5hFG4mzfotKQ73 HHhJpGS+EWgB/qFWT92ioJNjB/eFLpYSF4eu0XfR2Y3NXKEZDy7g6e0Xbaahq1C5 5sTe6fi4VnOiEHLWoRPkzAPbN0XtsQ5XTbjPYKHnnToQCsdZHFjQas/7jwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFHVxS1ga2hluNVHAjOdiQ74Fi0TrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzM5ZDIy Ni03MmJmLTQ5MGUtOWYxNi0wNzNmYmJlMTExZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvMzlkMjI2 LTcyYmYtNDkwZS05ZjE2LTA3M2ZiYmUxMTFlNS8xL2RYRkxXQnJhR1c0MVVjQ001 MkpEdmdXTFJPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQDLpf4AwQAW9EYAwQCwWoYAwQCwpKIMB8GCCsG AQUFBwEIAQH/BBAwDqAMMAoCAwC79QIDAOFjMA0GCSqGSIb3DQEBCwUAA4IBAQBS vcX0Xqk/7lqKpysNGfVVlah+LOj/as4c7jFZBwTYdUUd43ZDcAtEAcM4ABh/Cy7A ci7vsiWreuHcdKCqq0PNAKYqlrYhpGqCeqUt3SW4Ca5cI1vKe43RyVZdAjFJVH/2 nCvTKQ8gSR6WKwBWoLpqsRXbd6MXtOyqqi7BR5hkLOyQdEHNICpcbyLipTw5mnVW IC+1il6hnNsJqENA75TL6Nj5s2L58o+wtkb5zCKM/hyWg2Z9xVL0GnI0qsztxD0E txFewhKdafRKO/rliFjrQjGCaItND/vvz1B84tyDT4XLMUvTF29zi/Tp5bvmcCSP RuJB5XSVS0gz8VRzBoff -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:49 2026 by rpki-client