This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer File: dkyOsD7yMmpiDfEAVI0fBth0VRo.cer (raw, json) Hash identifier: dKDZiacAWKvWXuN9GotP4ZNoHdB8n+BvuCuzam1XfQ4= Subject key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7B770F731D139C878F4F8E852359D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210432 IP: 146.19.239.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b7:70:f7:31:d1:39:c8:78:f4:f8:e8:52:35:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=764c8eb03ef2326a620df100548d1f06d874551a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:02:71:51:f5:d9:96:86:79:ab:30:09:f4: 1e:bc:23:85:56:ec:2d:33:47:44:bb:e9:3c:a4:64: d2:fe:05:5d:63:b4:8e:8e:1d:bb:44:f8:fc:f4:ef: 47:9e:83:d5:84:45:eb:58:ff:2a:b9:6e:1a:08:7a: 94:7a:c7:22:5f:e0:e5:19:a0:2b:ab:81:cf:ec:0d: 73:f6:82:b2:68:27:62:8b:f5:54:4d:d2:22:4c:3d: 69:54:d1:80:ba:de:62:e0:1a:5e:69:9d:78:20:9c: 5a:7b:0b:0d:36:46:7b:7b:bb:37:8a:c8:ea:c3:bc: 06:24:64:46:8b:66:3c:56:64:67:89:8a:e4:bd:a8: 48:b9:4c:cf:dc:a6:8f:c8:96:b6:cc:f9:d7:68:cc: ab:54:b7:a5:1e:f6:e5:ad:37:a0:06:cd:dd:c5:37: 67:0b:86:ac:46:5b:dc:8d:1d:a9:a8:f6:ea:1b:d1: 33:dd:c7:35:a3:f1:8c:12:e6:6e:04:8f:df:cc:d3: 03:1f:e1:57:27:fa:01:0d:19:f5:57:e7:e2:b8:af: 70:78:e0:85:9a:44:94:d6:92:39:12:db:da:76:11: e9:cb:47:eb:b1:d4:0e:ee:a5:2c:1b:96:4d:8f:be: e9:09:ce:88:99:63:23:57:fa:45:f0:7e:e3:af:1d: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.239.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210432 Signature Algorithm: sha256WithRSAEncryption 04:8f:ea:f9:a7:73:7d:53:b2:7b:0c:68:16:c1:a5:b3:57:6a: 7f:bf:2a:ff:17:f4:1b:c6:be:a8:bc:8b:c5:e0:ac:90:45:79: f4:a7:99:eb:60:88:fb:81:9b:dd:69:e7:e2:65:00:66:52:2a: 24:57:54:cd:e2:b6:a9:98:46:44:7a:93:8e:81:65:1e:57:d4: 28:30:9d:22:b8:84:f1:e9:68:f7:80:0b:52:b6:01:9f:a3:cd: 36:34:d6:d7:f3:da:95:65:b2:2b:76:65:4e:3c:e2:6b:5a:5a: f0:f7:52:49:b9:8c:02:46:49:02:38:a3:35:10:eb:81:47:a3: ad:a1:d7:77:41:24:53:5c:33:03:ae:9d:bf:6c:fa:b2:ad:96: eb:44:7f:16:fe:66:9f:58:27:c8:ab:77:d1:45:b1:60:ce:bf: 00:14:bf:76:75:34:9e:67:c3:d4:bf:8b:68:1b:3b:e2:c7:09: 94:fa:14:83:99:32:a7:99:d7:be:62:04:c3:de:4c:73:5d:15: a3:3f:ec:89:32:9f:30:52:6c:89:7b:90:39:0f:25:bc:bc:35: 76:1a:15:99:52:32:19:b4:bd:fe:f7:20:e4:1b:1f:ea:b3:55: 49:96:6c:41:95:87:52:f8:0a:0d:d1:a2:87:9e:af:3d:0a:3b: d4:32:70:06 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6x7dw9zHROch49PjoUjWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjRjOGViMDNlZjIzMjZhNjIwZGYxMDA1NDhkMWYwNmQ4NzQ1NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto4CcVH12ZaGeaswCfQevCOFVuwt M0dEu+k8pGTS/gVdY7SOjh27RPj89O9HnoPVhEXrWP8quW4aCHqUesciX+DlGaAr q4HP7A1z9oKyaCdii/VUTdIiTD1pVNGAut5i4BpeaZ14IJxaewsNNkZ7e7s3isjq w7wGJGRGi2Y8VmRniYrkvahIuUzP3KaPyJa2zPnXaMyrVLelHvblrTegBs3dxTdn C4asRlvcjR2pqPbqG9Ez3cc1o/GMEuZuBI/fzNMDH+FXJ/oBDRn1V+fiuK9weOCF mkSU1pI5EtvadhHpy0frsdQO7qUsG5ZNj77pCc6ImWMjV/pF8H7jrx3DCQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHZMjrA+8jJqYg3xAFSNHwbYdFUaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzcxMjY1 Zi0wYTUzLTQxMDYtYjIwYS1mM2I1MGM2NWY4MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvNzEyNjVm LTBhNTMtNDEwNi1iMjBhLWYzYjUwYzY1ZjgyMC8xL2RreU9zRDd5TW1waURmRUFW STBmQnRoMFZSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAkhPvMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM2ADANBgkqhkiG9w0BAQsFAAOCAQEABI/q+adzfVOyewxoFsGls1dqf78q/xf0 G8a+qLyLxeCskEV59KeZ62CI+4Gb3Wnn4mUAZlIqJFdUzeK2qZhGRHqTjoFlHlfU KDCdIriE8elo94ALUrYBn6PNNjTW1/PalWWyK3ZlTjzia1pa8PdSSbmMAkZJAjij NRDrgUejraHXd0EkU1wzA66dv2z6sq2W60R/Fv5mn1gnyKt30UWxYM6/ABS/dnU0 nmfD1L+LaBs74scJlPoUg5kyp5nXvmIEw95Mc10Voz/siTKfMFJsiXuQOQ8lvLw1 dhoVmVIyGbS9/vcg5Bsf6rNVSZZsQZWHUvgKDdGih56vPQo71DJwBg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:53 2026 by rpki-client