This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer File: dgynIUsW9YyV1i3vAFkVhtvSPKo.cer (raw, json) Hash identifier: 2r9NYzC8XARCkaq7nFZprIWyK/nahsuvmeRWn/DCbXM= Subject key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59D55D277A9B769F227BF161685F13 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 147.78.200.0/22 IP: 2a09:2840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:d5:5d:27:7a:9b:76:9f:22:7b:f1:61:68:5f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=760ca7214b16f58c95d62def00591586dbd23caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:81:2b:e6:fd:3a:18:4a:ae:ad:a7:8d:61: c6:82:ab:e7:b0:31:3f:a2:d7:4f:72:13:19:37:b5: 49:c6:07:e9:1d:2a:c6:53:77:4a:a0:84:0c:33:b5: f4:32:ac:f4:31:8a:de:46:6e:14:7a:df:34:d2:75: b7:02:5d:96:56:b3:67:07:98:40:0a:3e:c8:6e:ad: 93:49:04:d2:6b:01:0f:32:74:35:8d:ec:2a:34:15: 2d:7e:cf:59:43:09:1e:50:24:54:9e:9d:0d:27:8c: 9b:3c:09:6d:be:67:ff:9e:9f:2b:f4:e6:d6:5d:1e: 95:4a:26:0d:d8:dd:b0:53:a6:b8:40:d1:a3:7f:7b: 04:78:6e:c1:1f:02:34:25:4a:2a:9b:b7:2b:bf:9e: 04:8c:3c:02:c3:08:ee:5b:8e:00:ac:01:11:b6:b5: 44:32:28:65:bf:16:e0:59:bc:8f:01:90:21:43:b5: a6:44:45:b6:55:92:cd:1a:e4:19:33:17:3d:c0:fc: 57:3e:88:34:c6:ab:f3:80:82:ef:f7:57:d7:2d:34: 9e:b4:22:cc:11:cf:fd:4f:bc:f4:55:78:f5:a4:43: b6:eb:79:49:63:52:f3:37:a6:ae:49:90:46:c5:b3: ee:b9:94:08:74:0a:6c:3d:d0:35:f7:d9:2b:f5:a1: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.200.0/22 IPv6: 2a09:2840::/29 Signature Algorithm: sha256WithRSAEncryption 39:04:e6:75:ab:d2:93:fc:21:f8:6c:48:67:eb:ae:e9:d1:68: f8:e1:f8:67:5f:26:51:a2:66:53:51:72:2b:c6:78:40:42:7b: f2:30:9e:61:76:cc:65:9b:58:81:eb:b4:67:66:83:dc:2a:d9: 6c:46:29:fb:a0:1c:ab:33:ca:41:55:82:b1:6d:69:86:17:34: 67:7c:aa:84:c5:f7:68:78:4d:36:d0:ca:b5:f7:64:7e:e3:11: e8:2b:38:0f:68:ef:e5:56:88:13:fd:63:70:37:c2:71:13:73: 2b:95:5e:1f:f6:09:95:c3:8d:ac:a7:68:da:ca:7c:64:ef:9e: 8d:d2:6e:aa:52:f1:d5:e2:6a:ae:9a:a3:32:9d:71:5d:6f:94: 0a:01:7b:97:d8:b9:05:58:6f:08:5b:61:51:23:bc:e3:b7:70: 08:f8:95:32:ca:96:25:89:7b:02:93:86:d8:99:b3:16:65:98: ce:a5:3f:d4:79:2b:d0:7a:1e:76:09:39:83:04:8b:1a:4d:b4: b9:93:c0:d4:f2:ac:dc:73:74:c3:02:51:3a:4e:34:e4:15:1a: 2f:5e:e1:47:75:1d:a4:05:08:2b:38:c6:fd:0d:56:0f:23:da: 2d:41:cd:20:ce:c2:3f:a1:92:ed:d2:da:0a:18:7f:70:b1:28: 4a:6c:f4:8a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WdVdJ3qbdp8ie/FhaF8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjBjYTcyMTRiMTZmNThjOTVkNjJkZWYwMDU5MTU4NmRiZDIzY2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhCBK+b9OhhKrq2njWHGgqvnsDE/ otdPchMZN7VJxgfpHSrGU3dKoIQMM7X0Mqz0MYreRm4Uet800nW3Al2WVrNnB5hA Cj7Ibq2TSQTSawEPMnQ1jewqNBUtfs9ZQwkeUCRUnp0NJ4ybPAltvmf/np8r9ObW XR6VSiYN2N2wU6a4QNGjf3sEeG7BHwI0JUoqm7crv54EjDwCwwjuW44ArAERtrVE MihlvxbgWbyPAZAhQ7WmREW2VZLNGuQZMxc9wPxXPog0xqvzgILv91fXLTSetCLM Ec/9T7z0VXj1pEO263lJY1LzN6auSZBGxbPuuZQIdApsPdA199kr9aGY+QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHYMpyFLFvWMldYt7wBZFYbb0jyqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzM2NDQx My1hNmRkLTRhMzctODg5Yy04YWViMzg3NTFmMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvMzY0NDEz LWE2ZGQtNGEzNy04ODljLThhZWIzODc1MWYxMi8xL2RneW5JVXNXOVl5VjFpM3ZB RmtWaHR2U1BLby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCk07IMA0EAgACMAcDBQMqCShAMA0GCSqGSIb3 DQEBCwUAA4IBAQA5BOZ1q9KT/CH4bEhn667p0Wj44fhnXyZRomZTUXIrxnhAQnvy MJ5hdsxlm1iB67RnZoPcKtlsRin7oByrM8pBVYKxbWmGFzRnfKqExfdoeE020Mq1 92R+4xHoKzgPaO/lVogT/WNwN8JxE3MrlV4f9gmVw42sp2jaynxk756N0m6qUvHV 4mqumqMynXFdb5QKAXuX2LkFWG8IW2FRI7zjt3AI+JUyypYliXsCk4bYmbMWZZjO pT/UeSvQeh52CTmDBIsaTbS5k8DU8qzcc3TDAlE6TjTkFRovXuFHdR2kBQgrOMb9 DVYPI9otQc0gzsI/oZLt0toKGH9wsShKbPSK -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:05 2026 by rpki-client