This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer File: dim08aCQrAe-F2LewzjmoP412X4.cer (raw, json) Hash identifier: jHJ34qMuzH8IcL+U0mz58a1TvSWgNaH3yYUnGGIqNhY= Subject key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ECAEF49AAA22D178991B7C6B090E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.37.37.0/24 IP: 2a14:7e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ca:ef:49:aa:a2:2d:17:89:91:b7:c6:b0:90:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:f7:3c:30:28:14:d7:a2:2b:07:b1:d3:95: 3c:89:33:66:eb:67:54:ce:2a:02:be:49:c0:57:89: b5:01:03:71:f9:0a:42:ed:90:6e:18:7b:ba:1d:22: 85:52:39:dc:2f:ee:64:e8:9f:56:36:1b:a1:c0:f1: 67:63:0d:9a:f9:9e:c3:98:bb:d6:30:10:5a:32:9c: 8f:33:6e:50:82:20:75:63:5b:4b:5b:04:9d:4c:09: d9:18:85:e9:35:6e:ef:60:ba:d4:8d:c1:80:48:0d: 07:d2:47:3c:89:22:9a:65:b2:c4:f6:6b:54:66:89: 78:85:f3:ec:35:bb:d8:7e:0b:5e:0a:7e:25:27:d9: 9c:69:d6:b7:56:3e:63:84:cb:1e:08:71:5e:59:91: e5:8d:19:15:36:a0:b9:83:0e:b8:c7:ae:46:8e:6d: bb:80:f7:dd:a6:82:a1:e6:45:21:91:1d:37:d0:a3: 82:83:ec:ac:ef:ac:cf:32:5e:be:34:93:c6:62:78: 38:75:06:75:19:a8:cc:81:29:3a:64:87:6a:0b:7b: 08:92:dc:d5:e5:32:6e:47:24:de:66:1a:cf:1c:9d: 1e:ca:da:31:c2:c2:15:9e:2b:25:91:78:c2:67:ab: 2a:97:49:43:c7:b6:d5:b5:f6:5f:de:e8:b4:f1:73: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.37.0/24 IPv6: 2a14:7e80::/29 Signature Algorithm: sha256WithRSAEncryption 73:68:5e:1f:4b:d8:e6:21:cb:c5:05:c3:21:6c:f3:60:07:c3: 40:f3:cd:f4:85:d2:93:29:df:56:81:f1:cb:0a:02:29:a8:7c: 33:b6:16:ce:ce:08:48:29:25:8b:25:c1:8e:51:33:0a:5d:f4: 51:c3:61:ba:b5:88:72:8d:30:13:d4:8a:a1:39:d1:a4:56:df: c5:c6:51:ae:2b:00:2b:b3:c9:0e:31:67:39:12:a5:83:1b:5c: da:10:d2:78:e3:31:9a:e2:5f:2b:97:ba:87:d1:a6:3e:05:63: 48:d2:cf:53:6a:26:d2:3e:47:eb:e8:df:74:ad:31:2f:83:42: 31:e4:8f:39:d0:e1:70:24:aa:3d:4e:49:c7:eb:d5:4f:fc:a7: 7f:bb:ba:fc:6d:4d:86:2d:30:f0:2b:35:d7:9e:09:56:f9:49: c7:e7:e7:5b:1d:c5:56:b9:cb:3b:b4:ed:56:4e:3a:08:6a:13: 42:ff:61:eb:65:8b:90:0a:a6:c6:61:4c:b8:dd:ae:65:f9:ec: be:3e:4d:19:51:d9:f1:2f:04:94:59:7c:94:ae:eb:b1:87:12: bf:d6:28:18:d4:99:0a:0b:bb:14:36:37:b2:38:fe:9f:d4:19: 67:5f:ea:89:a6:4a:f5:d4:06:5d:85:ab:08:bc:81:49:7a:d7: 4f:0a:de:1c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fsrvSaqiLReJkbfGsJDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjI5YjRmMWEwOTBhYzA3YmUxNzYyZGVjMzM4ZTZhMGZlMzVkOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQL3PDAoFNeiKwex05U8iTNm62dU zioCvknAV4m1AQNx+QpC7ZBuGHu6HSKFUjncL+5k6J9WNhuhwPFnYw2a+Z7DmLvW MBBaMpyPM25QgiB1Y1tLWwSdTAnZGIXpNW7vYLrUjcGASA0H0kc8iSKaZbLE9mtU Zol4hfPsNbvYfgteCn4lJ9mcada3Vj5jhMseCHFeWZHljRkVNqC5gw64x65Gjm27 gPfdpoKh5kUhkR030KOCg+ys76zPMl6+NJPGYng4dQZ1GajMgSk6ZIdqC3sIktzV 5TJuRyTeZhrPHJ0eytoxwsIVnislkXjCZ6sql0lDx7bVtfZf3ui08XP5mwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHYptPGgkKwHvhdi3sM45qD+Ndl+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2ExZWY2 My0xNmE3LTRhOTQtYjExNC01ZjE3NWI1YWUwMzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYTFlZjYz LTE2YTctNGE5NC1iMTE0LTVmMTc1YjVhZTAzOC8xL2RpbTA4YUNRckFlLUYyTGV3 emptb1A0MTJYNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSUlMA0EAgACMAcDBQMqFH6AMA0GCSqGSIb3 DQEBCwUAA4IBAQBzaF4fS9jmIcvFBcMhbPNgB8NA8830hdKTKd9WgfHLCgIpqHwz thbOzghIKSWLJcGOUTMKXfRRw2G6tYhyjTAT1IqhOdGkVt/FxlGuKwArs8kOMWc5 EqWDG1zaENJ44zGa4l8rl7qH0aY+BWNI0s9TaibSPkfr6N90rTEvg0Ix5I850OFw JKo9TknH69VP/Kd/u7r8bU2GLTDwKzXXnglW+UnH5+dbHcVWucs7tO1WTjoIahNC /2HrZYuQCqbGYUy43a5l+ey+Pk0ZUdnxLwSUWXyUruuxhxK/1igY1JkKC7sUNjey OP6f1BlnX+qJpkr11AZdhasIvIFJetdPCt4c -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:12 2026 by rpki-client