This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer File: dlOpinSeVpdEoe3iyUDy5DPEQIo.cer (raw, json) Hash identifier: puBirrJopixlxI53bDO/Ms7rGM13xZ1H5M9GXqT/VWw= Subject key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8359A8B195537D1D501A0881AC98DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50751 IP: 91.242.52.0/22 IP: 178.216.0.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:59:a8:b1:95:53:7d:1d:50:1a:08:81:ac:98:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7653a98a749e569744a1ede2c940f2e433c4408a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:a5:1c:37:7b:cd:53:b3:94:b6:61:ad:5e: 80:94:0c:f2:e7:7b:96:8e:82:b3:3a:b9:c6:9e:c4: 5f:0c:20:69:0d:f0:ae:f2:85:d4:6e:d0:30:ee:ae: e3:0d:05:a6:33:98:6a:37:eb:53:64:20:e2:5e:c1: ac:a2:01:1d:b0:6a:45:c5:01:dc:98:2d:c3:c6:b7: 49:8d:fd:de:bd:b2:af:b7:3e:6d:2b:e7:31:4c:87: e0:80:70:69:04:ce:13:de:a7:d0:a9:7c:77:36:b4: c3:24:e9:2f:23:b7:36:8e:d3:27:87:ef:cf:52:0b: 9a:1f:9a:87:81:8c:c6:bd:88:6e:41:20:33:0f:01: f8:cc:39:bf:d8:70:c9:1f:59:96:af:5c:e3:c3:3b: 43:fc:93:b7:0c:50:45:c3:4f:aa:e5:e3:f3:5d:3e: 1b:19:06:b9:a3:6b:29:26:d6:0e:09:ad:90:0c:69: b9:9c:da:b2:b4:88:b2:c4:1e:a8:7a:f6:e8:94:ac: 9c:06:c5:34:32:7d:4b:b6:f3:a2:e7:65:6b:2e:f1: cf:ed:72:f3:a1:bf:bf:c8:03:c8:a2:5f:72:ec:81: 96:fd:4c:4f:b0:aa:f3:f6:2e:0d:a9:02:34:6b:36: 49:e5:3d:8f:de:f1:ca:24:c3:2a:bf:10:da:e5:02: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.52.0/22 178.216.0.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50751 Signature Algorithm: sha256WithRSAEncryption b1:76:43:2a:d1:7e:2b:fe:e0:89:2e:07:3d:e3:2e:76:50:bf: 81:fb:ed:6d:d6:1b:1f:b0:18:cd:6c:e3:7d:d3:f6:1b:73:9d: 75:f8:ce:2e:a7:af:61:41:30:03:f7:12:a4:97:16:d8:ff:cd: 49:1f:f8:75:75:5a:cc:67:0f:66:10:9e:9f:70:66:a6:e4:50: 30:24:67:f5:f4:b4:1a:32:b1:66:6f:db:47:30:44:99:08:fd: 35:77:3c:76:d0:12:95:22:18:c7:84:f6:25:a3:5d:ea:e1:49: e4:0f:b2:e4:a7:d6:35:5f:84:f6:14:bf:72:d9:4f:3d:fa:dd: 08:e2:37:28:fc:70:cb:2a:07:10:01:63:2b:57:78:7b:64:82: 03:c2:c3:fe:4f:0f:b7:27:47:84:d5:4e:16:e9:04:e9:ad:c2: 09:ec:c7:f6:be:c5:df:ca:bc:51:ac:cc:b5:c9:a7:4f:01:69: ea:2a:ec:97:57:cc:2e:78:14:d2:32:cf:fe:68:41:a8:80:53: 22:54:5a:3b:1b:1c:07:8f:68:9a:c1:48:3b:c0:59:ab:11:03: 11:17:23:57:ea:b8:7a:ff:40:12:fa:f7:2a:12:6d:e6:0c:31: 61:23:cb:ad:13:c1:bc:97:a7:89:3a:f3:d0:e9:4c:15:62:fe: 5a:0a:12:d2 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/g1mosZVTfR1QGgiBrJjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjUzYTk4YTc0OWU1Njk3NDRhMWVkZTJjOTQwZjJlNDMzYzQ0MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ClHDd7zVOzlLZhrV6AlAzy53uW joKzOrnGnsRfDCBpDfCu8oXUbtAw7q7jDQWmM5hqN+tTZCDiXsGsogEdsGpFxQHc mC3DxrdJjf3evbKvtz5tK+cxTIfggHBpBM4T3qfQqXx3NrTDJOkvI7c2jtMnh+/P UguaH5qHgYzGvYhuQSAzDwH4zDm/2HDJH1mWr1zjwztD/JO3DFBFw0+q5ePzXT4b GQa5o2spJtYOCa2QDGm5nNqytIiyxB6oevbolKycBsU0Mn1LtvOi52VrLvHP7XLz ob+/yAPIol9y7IGW/UxPsKrz9i4NqQI0azZJ5T2P3vHKJMMqvxDa5QIncQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFHZTqYp0nlaXRKHt4slA8uQzxECKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzg2MTU5 Mi1iMWMyLTQ5NWYtYjVhMS1iOWRjMmYyYjAwMmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvODYxNTky LWIxYzItNDk1Zi1iNWExLWI5ZGMyZjJiMDAyYy8xL2RsT3BpblNlVnBkRW9lM2l5 VUR5NURQRVFJby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW/I0AwQDstgAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDGPzANBgkqhkiG9w0BAQsFAAOCAQEAsXZDKtF+K/7giS4HPeMudlC/ gfvtbdYbH7AYzWzjfdP2G3OddfjOLqevYUEwA/cSpJcW2P/NSR/4dXVazGcPZhCe n3BmpuRQMCRn9fS0GjKxZm/bRzBEmQj9NXc8dtASlSIYx4T2JaNd6uFJ5A+y5KfW NV+E9hS/ctlPPfrdCOI3KPxwyyoHEAFjK1d4e2SCA8LD/k8PtydHhNVOFukE6a3C CezH9r7F38q8UazMtcmnTwFp6irsl1fMLngU0jLP/mhBqIBTIlRaOxscB49omsFI O8BZqxEDERcjV+q4ev9AEvr3KhJt5gwxYSPLrRPBvJeniTrz0OlMFWL+WgoS0g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:59 2026 by rpki-client