This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer File: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer (raw, json) Hash identifier: 3OCgfb1FJg3IYsPg/CfUu/VT1RFmrS0zrmV48VCKqFc= Subject key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758DED73581A25856D6380C7A046360 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42834 IP: 213.109.75.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:de:d7:35:81:a2:58:56:d6:38:0c:7a:04:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=763d7a5535a5249e97a75064669399a93c46cc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:ab:4d:3a:05:be:bc:99:16:41:20:32:a1: 23:26:a7:3f:2c:6b:37:70:f8:c9:aa:9f:9e:3a:4e: 31:57:e1:a0:84:1b:06:89:3e:0e:ee:b8:9c:e3:45: 2f:88:7d:a6:af:1d:6f:73:c8:42:68:91:73:9a:61: 71:8c:83:02:c0:59:3a:28:63:0a:b8:da:15:86:12: a4:27:ce:a9:a9:72:e3:e0:7e:63:54:bc:28:0f:55: d7:4f:3a:64:36:c7:49:e7:2f:07:04:2a:80:2f:72: 2c:66:3c:75:a7:36:9e:6b:5e:7e:a9:7e:dc:5f:53: 65:cf:0c:c0:d8:95:a4:1c:b4:c6:92:0d:9b:b5:63: 70:6d:68:ee:f6:20:94:00:3f:2c:9b:40:11:60:ad: cd:ff:3f:d6:6e:f0:60:f3:7b:73:b5:d2:14:15:c2: 41:35:80:64:f2:4a:b3:83:cb:61:03:f6:6b:0b:e9: 32:97:00:ba:86:26:cf:61:dc:d8:70:4d:87:2b:80: d4:6d:0b:4d:3e:c8:3b:57:aa:7b:ae:21:10:cb:75: b6:d6:04:73:5b:ac:47:e4:7d:3b:af:b3:66:5a:b1: cb:45:01:95:0a:ab:59:cd:9e:b4:38:1f:48:f2:71: 40:5b:14:0d:94:0a:f8:cc:8b:33:88:6f:4a:5c:c4: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.75.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42834 Signature Algorithm: sha256WithRSAEncryption 14:d1:69:1b:bb:2d:88:b6:b0:59:d6:38:ea:cc:fa:ba:16:86: 95:6e:ff:f7:7c:7e:da:12:82:1f:23:ca:09:b8:98:07:fb:0a: c1:6b:ea:b6:1c:3a:7c:4a:2f:10:db:05:01:d9:c1:33:d1:42: 46:f6:b6:09:46:7d:b3:ee:66:42:97:e9:a2:56:89:41:06:ec: a6:0d:3f:20:e4:bd:3b:a5:ec:4d:b2:3a:23:90:de:26:ed:fa: 26:e6:ad:9a:0f:56:4e:98:58:5b:3e:fd:57:d2:e3:d8:ed:08: bd:d9:50:c3:58:29:f1:77:58:8a:b6:a0:a7:d7:19:00:ce:07: e3:14:18:65:42:61:13:87:5b:58:60:20:44:09:82:77:60:7c: 08:5c:79:e2:72:b7:7d:12:98:51:67:85:e8:5b:0e:14:84:04: 0a:f3:71:00:3e:12:44:7f:70:d7:39:d2:8f:be:8c:a8:6a:e1: 61:ad:cc:8a:9d:61:d6:cd:c7:b7:7f:02:c7:34:bd:85:9d:c6: 4f:39:63:a4:f2:fb:4f:62:7a:0d:ec:0a:64:d5:a1:9a:cc:86: 7c:3b:b7:fb:41:87:60:00:4b:59:c4:dd:7e:24:82:5c:99:37: 7d:83:2d:16:5c:d0:fd:ad:16:59:6e:fd:99:1b:33:38:a2:4f: 6f:de:b2:8f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WN7XNYGiWFbWOAx6BGNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjNkN2E1NTM1YTUyNDllOTdhNzUwNjQ2NjkzOTlhOTNjNDZjYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB6rTToFvryZFkEgMqEjJqc/LGs3 cPjJqp+eOk4xV+GghBsGiT4O7ric40UviH2mrx1vc8hCaJFzmmFxjIMCwFk6KGMK uNoVhhKkJ86pqXLj4H5jVLwoD1XXTzpkNsdJ5y8HBCqAL3IsZjx1pzaea15+qX7c X1NlzwzA2JWkHLTGkg2btWNwbWju9iCUAD8sm0ARYK3N/z/WbvBg83tztdIUFcJB NYBk8kqzg8thA/ZrC+kylwC6hibPYdzYcE2HK4DUbQtNPsg7V6p7riEQy3W21gRz W6xH5H07r7NmWrHLRQGVCqtZzZ60OB9I8nFAWxQNlAr4zIsziG9KXMR0SQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHY9elU1pSSel6dQZGaTmak8RsyOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzg1MGIw Yi1iMzA2LTRkN2YtYjE5OC04ODIyYmQzODY4NDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvODUwYjBi LWIzMDYtNGQ3Zi1iMTk4LTg4MjJiZDM4Njg0MC8xL2RqMTZWVFdsSko2WHAxQmta cE9acVR4R3pJNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA1W1LMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCnUjANBgkqhkiG9w0BAQsFAAOCAQEAFNFpG7stiLawWdY46sz6uhaGlW7/93x+ 2hKCHyPKCbiYB/sKwWvqthw6fEovENsFAdnBM9FCRva2CUZ9s+5mQpfpolaJQQbs pg0/IOS9O6XsTbI6I5DeJu36Juatmg9WTphYWz79V9Lj2O0IvdlQw1gp8XdYirag p9cZAM4H4xQYZUJhE4dbWGAgRAmCd2B8CFx54nK3fRKYUWeF6FsOFIQECvNxAD4S RH9w1znSj76MqGrhYa3Mip1h1s3Ht38CxzS9hZ3GTzljpPL7T2J6DewKZNWhmsyG fDu3+0GHYABLWcTdfiSCXJk3fYMtFlzQ/a0WWW79mRszOKJPb96yjw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:51 2026 by rpki-client