This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer File: dkL9PzNs5u6Z5h-pdwSabGqSPko.cer (raw, json) Hash identifier: GCYHUquR0J+bOhF/IUbzYXePqJRHkz/VLcMDX+oEi20= Subject key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3257844BA0ABBD383568FA38B8841 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24881 IP: 46.162.0.0/18 IP: 91.197.236.0/22 IP: 193.43.252.0/22 IP: 193.111.156.0/22 IP: 195.214.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:25:78:44:ba:0a:bb:d3:83:56:8f:a3:8b:88:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:ef:56:77:a1:30:1a:d8:cc:4a:99:8c:22: b4:db:72:75:c6:f7:17:94:ec:4b:85:55:58:20:b3: 1f:44:c0:22:10:a7:d3:65:39:27:d8:97:a9:1e:e7: c0:22:9e:08:17:9e:85:70:ff:7c:76:88:78:3d:cf: 12:43:8f:df:c5:0f:2a:a4:67:cf:c3:c5:fb:88:98: d1:a5:97:6b:bb:19:88:3a:7d:ce:88:4f:ba:17:7c: 33:1d:ef:64:5e:1f:fe:73:ea:5b:22:6c:81:5a:55: 33:2d:94:23:e6:de:b8:6d:99:04:c6:8e:32:74:31: fd:a3:7a:ee:b4:2c:63:55:6f:ec:ca:be:36:78:2a: bb:2d:ad:0e:f9:cd:fe:bc:8e:f2:02:5f:3b:e9:52: a3:a1:02:7b:9f:01:cc:cf:74:5c:41:54:6e:5d:e3: 57:71:9f:9e:89:ef:df:83:c0:84:8d:13:64:c7:09: 9b:c9:11:d1:0e:ab:a7:df:29:0d:e6:ca:43:5f:ba: c8:4a:6a:38:30:9a:68:51:3d:54:2f:1a:e5:1a:00: 1c:23:a7:5c:57:73:01:65:dc:43:7c:0c:cd:72:bc: ac:88:ea:83:7a:ed:d4:8b:3d:33:aa:f1:47:0e:ad: 99:35:89:89:92:8c:a0:61:5f:c5:65:d3:37:58:11: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.162.0.0/18 91.197.236.0/22 193.43.252.0/22 193.111.156.0/22 195.214.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24881 Signature Algorithm: sha256WithRSAEncryption 72:aa:c8:89:99:5c:5d:bf:de:62:5c:d9:6f:cc:75:fd:5f:bd: 90:94:3d:51:73:08:8a:29:7b:e6:c3:01:de:57:af:d1:c9:40: 85:1b:33:a2:ed:8b:ca:df:d1:af:80:06:13:84:1d:fd:3e:a4: c9:d6:ad:83:0f:8b:ef:13:44:5d:78:5e:56:66:48:ec:90:ae: 1c:1c:7c:34:7c:a0:a5:6e:29:e8:95:f9:c2:18:aa:48:33:e1: 1f:ff:36:d2:1f:fc:6d:cb:2b:2e:45:8c:e2:46:29:5e:be:60: 34:b0:40:25:92:6b:ac:3d:6b:d3:7c:b0:4a:65:af:25:b9:ae: 92:36:b2:33:01:af:04:e7:53:a2:6e:ff:ef:eb:d3:80:e9:55: 41:b3:51:85:05:8f:11:5e:01:2e:f5:ba:7b:f2:d1:a2:39:29: e6:c4:81:da:44:f8:ef:db:a1:1a:4d:0e:64:30:72:03:01:f7: e5:67:e7:34:e8:72:90:2e:1d:ef:39:46:28:f2:80:8c:60:46: 16:8a:ce:e9:f1:db:fe:a3:57:85:a6:01:a8:7e:a3:cd:5f:1c: eb:18:2f:9e:3a:f4:bc:0c:8f:37:6f:61:72:2e:5f:e3:6e:7a: 29:14:7c:92:8e:8a:7d:4c:33:e6:c9:73:f7:e4:37:32:de:bf: 10:a8:b0:b4 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt7oyV4RLoKu9ODVo+ji4hBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjQyZmQzZjMzNmNlNmVlOTllNjFmYTk3NzA0OWE2YzZhOTIzZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2PvVnehMBrYzEqZjCK023J1xvcX lOxLhVVYILMfRMAiEKfTZTkn2JepHufAIp4IF56FcP98doh4Pc8SQ4/fxQ8qpGfP w8X7iJjRpZdruxmIOn3OiE+6F3wzHe9kXh/+c+pbImyBWlUzLZQj5t64bZkExo4y dDH9o3rutCxjVW/syr42eCq7La0O+c3+vI7yAl876VKjoQJ7nwHMz3RcQVRuXeNX cZ+eie/fg8CEjRNkxwmbyRHRDqun3ykN5spDX7rISmo4MJpoUT1ULxrlGgAcI6dc V3MBZdxDfAzNcrysiOqDeu3Uiz0zqvFHDq2ZNYmJkoygYV/FZdM3WBFpQQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFHZC/T8zbObumeYfqXcEmmxqkj5KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzkyNDU0 Ni1kOWM3LTRhMGQtYWUwMC02MmM0M2FjN2MwMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvOTI0NTQ2 LWQ5YzctNGEwZC1hZTAwLTYyYzQzYWM3YzAyZi8xL2RrTDlQek5zNXU2WjVoLXBk d1NhYkdxU1Brby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQGLqIAAwQCW8XsAwQCwSv8AwQCwW+cAwQCw9bs MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmExMA0GCSqGSIb3DQEBCwUAA4IBAQBy qsiJmVxdv95iXNlvzHX9X72QlD1RcwiKKXvmwwHeV6/RyUCFGzOi7YvK39GvgAYT hB39PqTJ1q2DD4vvE0RdeF5WZkjskK4cHHw0fKClbinolfnCGKpIM+Ef/zbSH/xt yysuRYziRilevmA0sEAlkmusPWvTfLBKZa8lua6SNrIzAa8E51Oibv/v69OA6VVB s1GFBY8RXgEu9bp78tGiOSnmxIHaRPjv26EaTQ5kMHIDAfflZ+c06HKQLh3vOUYo 8oCMYEYWis7p8dv+o1eFpgGofqPNXxzrGC+eOvS8DI83b2FyLl/jbnopFHySjop9 TDPmyXP35Dcy3r8QqLC0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:29 2026 by rpki-client