This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer File: dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer (raw, json) Hash identifier: 5yxH6j7c6kGYjCSAhpCqW7cM4YNzeEvfp7oPI5W3/nM= Subject key identifier: 76:3E:5F:06:A0:DF:B6:16:22:0F:B5:61:EC:01:4F:14:F9:6A:A8:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE18592F2748162DE0F0C8BF3CBB8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201514 IP: 94.158.224.0/20 IP: 95.130.4.0/22 IP: 193.19.140.0/22 IP: 2a06:ed80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:18:59:2f:27:48:16:2d:e0:f0:c8:bf:3c:bb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=763e5f06a0dfb616220fb561ec014f14f96aa8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:d4:e5:c2:eb:24:cc:2e:66:e5:64:19:0d: 41:a2:6b:f5:f8:5b:b9:84:11:28:0f:08:8f:19:2b: 3a:40:85:a3:fd:32:58:87:29:ba:f8:75:46:b1:25: 3f:94:fc:bd:51:c0:01:2c:f8:8a:a8:2e:23:ea:c5: fd:80:6d:0f:1b:32:9f:81:49:a3:b5:00:67:42:1b: a5:0c:66:12:ff:73:4a:c6:31:c0:f7:5c:15:17:a2: 53:52:f0:b8:99:1e:c3:10:f4:4f:e9:01:82:07:67: ff:00:18:10:b0:8d:80:ec:a8:37:54:20:51:7b:6c: 4b:1c:89:76:3a:34:13:46:99:1e:ea:97:3b:4f:95: bc:63:7d:01:3b:d8:8e:29:d0:c1:63:69:60:4e:70: 91:8d:60:c6:2f:85:d8:3f:28:e7:0c:fa:0a:b2:de: d8:f1:f2:74:4f:a1:6c:b2:ff:18:16:aa:1b:49:aa: 56:2e:a1:f0:92:3b:5d:a6:c3:fd:fc:79:67:fe:c5: 4f:c5:73:0f:3e:04:83:a5:98:6d:e3:29:65:9c:7f: f3:14:0e:86:d2:6b:c4:83:0a:92:a5:df:6f:cc:d0: 45:14:8f:20:14:83:46:dc:30:9a:92:37:fb:70:66: 87:1f:99:08:28:52:69:f7:2d:be:fe:39:d3:f4:d6: c7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3E:5F:06:A0:DF:B6:16:22:0F:B5:61:EC:01:4F:14:F9:6A:A8:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.158.224.0/20 95.130.4.0/22 193.19.140.0/22 IPv6: 2a06:ed80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201514 Signature Algorithm: sha256WithRSAEncryption 66:55:90:5f:86:79:f2:33:21:2d:0a:a4:ba:65:35:11:ef:0b: af:bc:e3:60:9c:f4:58:35:32:da:98:a9:52:c9:78:06:81:84: 47:02:79:85:55:e3:f9:f9:d5:f2:ff:99:9f:4d:6c:09:e4:52: 72:3d:6d:71:cd:b4:19:e9:c6:7d:75:8d:4e:20:55:84:cf:ab: 40:0f:a4:48:2a:54:55:cc:0c:74:a3:42:8a:34:ba:98:9d:8e: 58:14:f1:0e:da:90:24:1c:5c:76:56:ff:fc:cf:15:a6:22:35: 41:74:15:06:8f:0e:44:69:ee:d1:5d:6c:7d:f8:bf:e4:5e:4b: 79:30:56:60:4c:fb:4c:5f:ed:08:d6:a9:c6:c3:b0:7b:ce:f6: 2a:3e:77:a6:37:fb:57:5d:73:f4:48:b8:c6:67:85:c5:76:93: 73:34:3a:4b:ba:42:62:eb:34:20:00:1c:92:5d:88:55:2f:92: 01:9f:f1:6d:2d:d7:c6:51:73:9d:55:fc:e8:50:0c:28:48:6e: e0:72:76:3e:e7:69:9a:da:76:30:58:a7:15:c5:e6:6f:79:bd: b9:86:ac:e7:80:ac:f7:4c:62:ad:a8:a8:d0:07:39:e1:73:f1: 81:25:f5:11:ca:eb:58:61:10:b5:d8:19:68:4e:cd:40:70:28: 3f:d6:13:9c -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt87hhZLydIFi3g8Mi/PLuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjNlNWYwNmEwZGZiNjE2MjIwZmI1NjFlYzAxNGYxNGY5NmFhOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/HU5cLrJMwuZuVkGQ1Bomv1+Fu5 hBEoDwiPGSs6QIWj/TJYhym6+HVGsSU/lPy9UcABLPiKqC4j6sX9gG0PGzKfgUmj tQBnQhulDGYS/3NKxjHA91wVF6JTUvC4mR7DEPRP6QGCB2f/ABgQsI2A7Kg3VCBR e2xLHIl2OjQTRpke6pc7T5W8Y30BO9iOKdDBY2lgTnCRjWDGL4XYPyjnDPoKst7Y 8fJ0T6Fssv8YFqobSapWLqHwkjtdpsP9/Hln/sVPxXMPPgSDpZht4yllnH/zFA6G 0mvEgwqSpd9vzNBFFI8gFING3DCakjf7cGaHH5kIKFJp9y2+/jnT9NbHewIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHY+Xwag37YWIg+1YewBTxT5aqjaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzVjYTA3 OS1mNTM1LTQ5MDctODgyYy0xMzgyYzAxYWNjNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvNWNhMDc5 LWY1MzUtNDkwNy04ODJjLTEzODJjMDFhY2M0OC8xL2RqNWZCcURmdGhZaUQ3Vmg3 QUZQRlBscXFOby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEXp7gAwQCX4IEAwQCwROMMA0EAgACMAcDBQMq Bu2AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMTKjANBgkqhkiG9w0BAQsFAAOC AQEAZlWQX4Z58jMhLQqkumU1Ee8Lr7zjYJz0WDUy2pipUsl4BoGERwJ5hVXj+fnV 8v+Zn01sCeRScj1tcc20GenGfXWNTiBVhM+rQA+kSCpUVcwMdKNCijS6mJ2OWBTx DtqQJBxcdlb//M8VpiI1QXQVBo8ORGnu0V1sffi/5F5LeTBWYEz7TF/tCNapxsOw e872Kj53pjf7V11z9Ei4xmeFxXaTczQ6S7pCYus0IAAckl2IVS+SAZ/xbS3XxlFz nVX86FAMKEhu4HJ2Pudpmtp2MFinFcXmb3m9uYas54Cs90xiraio0Ac54XPxgSX1 EcrrWGEQtdgZaE7NQHAoP9YTnA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:51 2026 by rpki-client