This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer File: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer (raw, json) Hash identifier: fmYp8rcIKCD8fmu6IUpMqp5g2djD6KLdZ4F4StG4edM= Subject key identifier: 76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3F0EBD205AA890D4B7DEA5FB5587C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203692 IP: 2001:67c:2f0c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f0:eb:d2:05:aa:89:0d:4b:7d:ea:5f:b5:58:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7668fe49ae9747257150015be43e29628c6316c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:56:a2:0b:7a:bd:14:ae:10:e6:18:bd:85: b9:64:bc:2a:f5:0f:6a:cc:6e:66:d1:92:bf:d7:40: 91:be:8d:a0:58:51:22:ab:08:e9:64:01:f2:f6:61: d4:d7:0f:63:47:57:07:9c:18:d0:36:7a:ed:9a:a3: 6c:11:f9:d8:4c:00:32:80:d3:f9:19:42:d8:f4:e8: 7c:7c:78:c3:06:77:7e:d8:86:cd:0f:db:1d:17:50: 37:6c:95:c9:b8:ae:d4:de:e5:97:9c:79:70:d6:9a: 37:45:bb:a8:87:38:7a:31:a2:3a:28:0f:52:70:2d: a8:c7:bf:15:1f:3c:5d:75:76:50:68:99:13:96:5e: 21:ff:bf:0a:30:c7:63:74:4c:fb:6f:78:76:4a:a9: 23:54:24:19:8e:b4:6c:a3:00:ea:a7:fe:10:2f:39: 16:4d:c6:42:24:d4:9d:1c:73:41:29:03:a5:7c:15: c8:a1:35:cc:dc:36:53:a0:b1:bf:66:36:c7:a3:61: c7:11:fd:ae:b5:ff:34:c9:c0:27:3f:30:64:69:6b: 02:87:7b:0c:36:20:52:3b:a4:9a:77:dc:d3:35:17: c1:e4:dc:41:93:f2:4e:83:7b:55:1e:bb:80:b1:5b: 45:de:1c:3e:95:68:e0:7f:90:2d:84:b8:1f:55:17: 04:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2f0c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203692 Signature Algorithm: sha256WithRSAEncryption 37:1f:8a:5f:b2:87:f6:b0:cf:1f:2f:9c:cc:9e:c0:cc:ba:1f: c8:ba:55:f2:86:f8:bf:bc:fc:2b:8f:a9:5c:30:cc:cd:9e:7b: 5f:0d:3c:27:b8:33:a0:5d:c6:e8:32:f0:29:97:08:3e:af:81: d8:b5:f3:25:4f:25:ff:21:eb:0e:7a:fc:b3:44:13:b8:01:ea: 56:00:87:c2:34:f2:6f:8d:42:96:86:ec:aa:b9:f1:1c:d9:21: 03:53:e3:10:9e:2d:57:cc:e3:97:51:99:64:08:45:7a:b5:90: e2:96:8a:20:7b:bd:2a:45:d6:47:cf:80:b5:ee:0b:75:22:7a: 82:65:ce:99:0f:98:bb:83:6f:09:12:16:42:82:50:53:2c:76: db:93:8f:d9:e9:22:e1:87:14:e0:b7:c6:4b:2d:65:ae:f2:3f: 7e:0d:9f:bc:52:8e:37:31:fd:58:82:e0:fc:9f:38:93:62:d1: ec:b9:15:d0:d4:0c:1b:36:01:7c:d7:69:64:93:eb:bc:c0:67: 4e:d9:8a:6a:27:46:bc:de:43:c7:93:f2:b3:b7:66:62:60:1c: 14:70:bd:a9:86:e9:95:9d:55:65:1e:38:15:54:98:f3:e1:28: 68:0f:ca:7e:0f:c1:64:3c:4b:ff:20:e6:32:5d:24:78:64:bc: 47:25:36:02 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7o/Dr0gWqiQ1LfepftVh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjY4ZmU0OWFlOTc0NzI1NzE1MDAxNWJlNDNlMjk2MjhjNjMxNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ZWogt6vRSuEOYYvYW5ZLwq9Q9q zG5m0ZK/10CRvo2gWFEiqwjpZAHy9mHU1w9jR1cHnBjQNnrtmqNsEfnYTAAygNP5 GULY9Oh8fHjDBnd+2IbND9sdF1A3bJXJuK7U3uWXnHlw1po3Rbuohzh6MaI6KA9S cC2ox78VHzxddXZQaJkTll4h/78KMMdjdEz7b3h2SqkjVCQZjrRsowDqp/4QLzkW TcZCJNSdHHNBKQOlfBXIoTXM3DZToLG/ZjbHo2HHEf2utf80ycAnPzBkaWsCh3sM NiBSO6Sad9zTNRfB5NxBk/JOg3tVHruAsVtF3hw+lWjgf5AthLgfVRcEXQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFHZo/kmul0clcVABW+Q+KWKMYxbEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzE2MDFl Ni1jNWI5LTQzMjItODlmOS00YmQxNGU3YTg1Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMTYwMWU2 LWM1YjktNDMyMi04OWY5LTRiZDE0ZTdhODVjZi8xL2Rtai1TYTZYUnlWeFVBRmI1 RDRwWW94akZzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC8MMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMbrDANBgkqhkiG9w0BAQsFAAOCAQEANx+KX7KH9rDPHy+czJ7AzLofyLpV 8ob4v7z8K4+pXDDMzZ57Xw08J7gzoF3G6DLwKZcIPq+B2LXzJU8l/yHrDnr8s0QT uAHqVgCHwjTyb41ClobsqrnxHNkhA1PjEJ4tV8zjl1GZZAhFerWQ4paKIHu9KkXW R8+Ate4LdSJ6gmXOmQ+Yu4NvCRIWQoJQUyx225OP2eki4YcU4LfGSy1lrvI/fg2f vFKONzH9WILg/J84k2LR7LkV0NQMGzYBfNdpZJPrvMBnTtmKaidGvN5Dx5Pys7dm YmAcFHC9qYbplZ1VZR44FVSY8+EoaA/Kfg/BZDxL/yDmMl0keGS8RyU2Ag== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:03 2026 by rpki-client