This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer (raw, json) Hash identifier: BaLcUilvIYWcCdG2O193d1JgVnHkfKy+5qpFgxNBKV0= Subject key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA696082BA5DBFB62BA1346A57B0CDC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.191.166.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:96:08:2b:a5:db:fb:62:ba:13:46:a5:7b:0c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:35:83:5f:e6:2e:03:98:82:c7:9e:c4:67: 10:2c:a3:03:9b:ff:04:89:19:5e:96:46:e5:b1:02: 0e:1f:07:1b:b4:bd:9d:df:8a:a3:3a:97:e7:04:92: 90:d2:4c:3f:41:ba:92:e5:b0:3e:4c:54:e9:19:1c: 94:13:f5:42:8f:d5:26:db:e9:29:86:7a:05:69:22: cd:74:d1:2d:67:ce:1a:7b:a4:3d:57:5c:e6:5e:50: 22:6b:cb:ef:c7:0f:33:5b:c1:b1:81:0a:fb:de:14: fd:11:83:e2:ca:35:a0:90:2b:17:2f:49:fa:6c:1f: 53:33:4e:6c:d3:be:74:dc:b4:e8:19:0a:a8:83:75: 08:58:6c:84:62:2e:74:bc:35:23:d7:3d:49:4e:7a: 34:56:b8:ce:25:e2:77:13:e3:9b:28:e6:4f:44:57: 5c:5b:13:08:e4:01:0e:fc:f9:ea:88:c6:85:00:ee: 5a:0a:80:b2:29:75:bb:4a:82:c5:f4:bc:d6:44:63: 53:03:db:97:3f:48:42:8a:2b:72:b0:38:71:9e:46: ea:f0:80:6f:24:d7:5b:f1:f8:6d:86:b3:07:3e:b0: 37:cb:3b:3f:ab:f3:9a:68:45:aa:b5:a4:87:49:39: c6:ed:0d:19:20:7e:77:99:bf:c9:12:f9:57:86:ae: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.166.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:0d:fd:a1:14:48:60:4a:24:a7:3e:db:d6:23:a1:2f:00:21: 09:29:7d:52:8a:de:df:7c:1f:cf:61:58:24:a6:68:2c:7d:8d: fb:27:df:dd:3c:63:fd:73:ea:1a:ea:01:6f:59:5b:93:f8:d2: 51:66:06:e6:93:b1:07:a1:85:13:ca:82:29:b0:2a:34:a0:c5: 85:01:70:ab:63:28:92:21:43:53:9a:c0:1a:51:af:a5:6f:d9: 3a:10:d6:ab:60:2d:d2:d7:3b:ca:2b:0a:f9:14:38:2c:8e:1e: aa:e1:3b:ff:22:33:02:e3:79:1c:49:e1:cb:6e:5a:b2:79:75: ba:10:f7:08:f0:5a:6c:01:b4:9d:33:e1:1a:a0:aa:5d:15:2a: 60:30:2b:b8:f6:9f:53:68:ae:1c:a7:7b:9b:e0:f9:09:90:0a: a0:70:bd:8b:e9:64:0f:b8:47:64:77:ce:28:2a:d2:6d:7f:dc: 59:f9:c5:6d:ec:47:eb:30:be:7a:7c:7f:09:57:57:c9:c7:d6: 03:6e:54:88:8c:ee:a8:60:39:26:9a:4f:71:fb:0d:fb:92:8d: b3:32:b6:5e:73:f3:1a:c8:e4:9d:5d:9a:a7:85:a1:4b:8a:18: e5:61:c4:a5:b3:2c:41:00:99:14:46:fb:98:c9:1e:a5:65:89: 57:fd:0c:50 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+ppYIK6Xb+2K6E0alewzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTcyNTVkZGM5MGE0ZDBmODJmYjI2NzQ0NjkzZWQ3Yzk4NmQ4YThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsts1g1/mLgOYgseexGcQLKMDm/8E iRlelkblsQIOHwcbtL2d34qjOpfnBJKQ0kw/QbqS5bA+TFTpGRyUE/VCj9Um2+kp hnoFaSLNdNEtZ84ae6Q9V1zmXlAia8vvxw8zW8GxgQr73hT9EYPiyjWgkCsXL0n6 bB9TM05s07503LToGQqog3UIWGyEYi50vDUj1z1JTno0VrjOJeJ3E+ObKOZPRFdc WxMI5AEO/PnqiMaFAO5aCoCyKXW7SoLF9LzWRGNTA9uXP0hCiitysDhxnkbq8IBv JNdb8fhthrMHPrA3yzs/q/OaaEWqtaSHSTnG7Q0ZIH53mb/JEvlXhq737QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHVyVd3JCk0PgvsmdEaT7XyYbYqLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzEwMWRi YS02NGViLTQyNjctYjA3NS1jMDJmNzc1ZmJmM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMTAxZGJh LTY0ZWItNDI2Ny1iMDc1LWMwMmY3NzVmYmYzZi8xL2RYSlYzY2tLVFEtQy15WjBS cFB0ZkpodGlvcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw7+mMA0GCSqGSIb3DQEBCwUAA4IBAQCfDf2h FEhgSiSnPtvWI6EvACEJKX1Sit7ffB/PYVgkpmgsfY37J9/dPGP9c+oa6gFvWVuT +NJRZgbmk7EHoYUTyoIpsCo0oMWFAXCrYyiSIUNTmsAaUa+lb9k6ENarYC3S1zvK Kwr5FDgsjh6q4Tv/IjMC43kcSeHLblqyeXW6EPcI8FpsAbSdM+EaoKpdFSpgMCu4 9p9TaK4cp3ub4PkJkAqgcL2L6WQPuEdkd84oKtJtf9xZ+cVt7EfrML56fH8JV1fJ x9YDblSIjO6oYDkmmk9x+w37ko2zMrZec/MayOSdXZqnhaFLihjlYcSlsyxBAJkU RvuYyR6lZYlX/QxQ -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:02 2026 by rpki-client