This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer (raw, json) Hash identifier: oXQnSsJZ8hLva3tGRRuQoeDJWkrhaHHtR+I9n5Yn4D4= Subject key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA70A63803BB1FB884F9E94D1345D04 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.244.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0a:63:80:3b:b1:fb:88:4f:9e:94:d1:34:5d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:4f:8d:10:20:a6:c4:95:89:26:e4:cf:2a: a5:00:8d:77:31:46:97:8b:3c:a3:8c:8b:7d:36:d6: b6:8f:b5:9d:c2:3f:fe:8a:8c:1b:d4:8e:36:ba:ba: 59:5a:58:7a:f2:ad:f0:25:42:9c:48:23:17:03:de: a5:de:40:f9:4c:63:f7:a6:e4:8d:58:63:a4:38:f3: e0:08:d2:80:fb:b3:54:21:7f:ce:f8:e6:ce:33:ef: 4a:d5:c4:c0:b4:d1:cb:ba:f3:65:93:be:ad:f4:fc: b3:46:94:e5:d0:47:91:35:e6:81:ad:d4:d7:b8:08: 2a:c9:76:83:51:c6:bf:57:43:de:5f:df:4a:36:6d: a1:1c:36:2e:27:57:23:be:b4:a5:7c:84:5a:13:3a: d9:8f:39:74:7d:62:ea:7d:af:85:e7:ba:1f:ce:52: b7:84:b6:56:3a:da:08:c7:d4:5a:b7:f4:34:f7:90: 72:ed:a4:a8:23:f9:c7:f2:f4:05:07:14:0c:41:5a: 97:f1:5e:f8:86:9b:cf:6a:95:07:b8:d5:19:61:05: eb:b7:c8:b3:81:5e:ae:ee:9e:3c:30:d3:ed:11:ba: 9a:de:3a:a5:4c:d2:e2:09:00:55:13:e1:ad:cd:81: 52:33:70:26:40:ed:ad:dc:70:8d:ca:9e:b5:d0:0f: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.252.0/22 Signature Algorithm: sha256WithRSAEncryption 56:9f:7f:ab:97:1f:cc:56:f7:7b:c2:82:ca:a1:14:12:6c:80: de:af:6f:c8:4f:a3:81:67:5a:49:f1:a2:8f:74:b9:e2:9a:34: c4:40:be:0e:74:8e:37:04:ef:6f:9a:3d:76:7c:57:5c:ce:f2: 4c:69:17:e8:5d:f3:7e:58:56:06:1f:d2:9a:4e:93:7a:47:a5: 42:76:92:49:ba:e6:b2:33:b1:56:9f:d8:36:51:d3:3f:54:0e: c9:1a:86:4b:c0:c7:bf:ef:c6:f4:2b:46:91:d9:d0:71:16:2a: a6:e6:88:09:8d:03:37:c6:8e:40:d1:f0:c9:31:46:fe:72:a8: d3:0f:7d:87:60:00:5d:47:10:42:93:55:5c:d3:db:a7:72:90: 54:bc:d8:72:c7:7b:cb:9f:3a:32:ea:8a:4a:2e:e1:fc:30:25: 7c:d5:f8:18:4d:8e:d8:6d:7e:75:47:bd:06:24:5e:15:cc:aa: 2f:92:a6:eb:21:d6:35:e9:25:24:4c:86:7b:c3:03:44:0d:95: 7e:8c:38:92:34:66:a9:bd:20:15:98:0a:4d:71:eb:47:29:5c: d4:3c:ad:e0:5e:5e:ac:9a:f0:1b:95:a0:10:91:9f:fa:1d:27: 80:09:a9:cf:ac:30:9d:aa:42:d7:80:46:a0:29:48:a3:aa:fc: d5:b8:4d:fa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pwpjgDux+4hPnpTRNF0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWI1YWJiMzVmY2EzMDcwZDQ4MTIyYTMzOWVjNWNiZWZmMGJlOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvhPjRAgpsSViSbkzyqlAI13MUaX izyjjIt9Nta2j7Wdwj/+iowb1I42urpZWlh68q3wJUKcSCMXA96l3kD5TGP3puSN WGOkOPPgCNKA+7NUIX/O+ObOM+9K1cTAtNHLuvNlk76t9PyzRpTl0EeRNeaBrdTX uAgqyXaDUca/V0PeX99KNm2hHDYuJ1cjvrSlfIRaEzrZjzl0fWLqfa+F57ofzlK3 hLZWOtoIx9Rat/Q095By7aSoI/nH8vQFBxQMQVqX8V74hpvPapUHuNUZYQXrt8iz gV6u7p48MNPtEbqa3jqlTNLiCQBVE+GtzYFSM3AmQO2t3HCNyp610A8/SwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHW1q7NfyjBw1IEioznsXL7/C+l6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzVkODQy Zi02MzI0LTQxMjItYjg1MC0yYzZhMmM2OTIxMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvNWQ4NDJm LTYzMjQtNDEyMi1iODUwLTJjNmEyYzY5MjEyYi8xL2RiV3JzMV9LTUhEVWdTS2pP ZXhjdnY4TDZYby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCufT8MA0GCSqGSIb3DQEBCwUAA4IBAQBWn3+r lx/MVvd7woLKoRQSbIDer2/IT6OBZ1pJ8aKPdLnimjTEQL4OdI43BO9vmj12fFdc zvJMaRfoXfN+WFYGH9KaTpN6R6VCdpJJuuayM7FWn9g2UdM/VA7JGoZLwMe/78b0 K0aR2dBxFiqm5ogJjQM3xo5A0fDJMUb+cqjTD32HYABdRxBCk1Vc09uncpBUvNhy x3vLnzoy6opKLuH8MCV81fgYTY7YbX51R70GJF4VzKovkqbrIdY16SUkTIZ7wwNE DZV+jDiSNGapvSAVmApNcetHKVzUPK3gXl6smvAblaAQkZ/6HSeACanPrDCdqkLX gEagKUijqvzVuE36 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:32 2026 by rpki-client