This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer File: dnh0JGjLAfClJrTpIib-O3TGfEE.cer (raw, json) Hash identifier: Oh/h4AttZ1GV7puljMRAk+dnFm5cHO9wCrH2Ea7kAvo= Subject key identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B07B02E45F2269DBEE3F7569D8F4AF70B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 09:55:45 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 193.200.155.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b0:2e:45:f2:26:9d:be:e3:f7:56:9d:8f:4a:f7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 09:55:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7678742468cb01f0a526b4e92226fe3b74c67c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:65:dd:02:e9:6e:96:db:1f:b4:3c:57:a6: 9e:3d:fb:96:84:f3:1a:d6:f0:f3:1c:b2:5c:3f:c7: ca:22:82:eb:bc:72:7a:d1:63:74:27:c1:15:8f:89: bd:fe:5f:1d:3c:b2:33:57:20:6c:12:76:de:88:b8: f7:32:98:62:ac:e6:1b:71:8c:7f:f8:ad:40:c7:bc: 1a:b6:38:03:c0:aa:5c:cd:6f:50:e6:4c:c6:b1:d8: 41:d1:2a:a6:f3:6b:fd:4c:fb:cd:27:17:8b:ca:05: 45:99:ec:6f:33:3e:75:ed:00:61:01:c3:a7:db:c3: 00:c6:f0:1d:0d:b2:b1:13:44:62:4f:8b:33:b8:c6: 55:65:5d:7e:49:53:44:ed:d6:29:48:34:da:d9:23: e2:c3:08:ff:0b:47:ed:c8:e9:bd:04:ac:61:11:cc: 4b:b3:e6:bd:8b:04:a0:5f:8b:a8:80:1c:a3:be:4f: 19:5c:e4:aa:d4:8a:25:e9:81:6f:b6:9f:ef:5a:fe: 09:f3:07:fb:88:e4:8c:ae:f0:b7:83:97:1f:44:31: 6e:1c:26:bd:d0:56:c3:8c:48:f8:b3:97:c7:fd:47: 51:89:13:8b:ce:ac:7e:40:f4:89:d6:70:6f:dd:bf: 0a:ee:d8:21:d3:a8:48:c2:c0:b3:0e:86:1a:d5:c7: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.155.0/24 Signature Algorithm: sha256WithRSAEncryption a0:3b:2e:ff:63:ab:16:79:b5:b9:4e:90:d0:9c:12:ec:1b:ea: 6b:cb:d4:25:49:52:d5:f8:d5:f6:05:49:94:4b:22:c3:83:eb: ef:44:54:65:39:d4:33:39:39:90:ca:26:60:22:4e:60:17:9d: 54:ad:06:87:11:41:26:ed:ec:a2:29:cd:28:95:65:cb:8c:1f: d2:5f:32:2d:bd:34:4e:b1:39:9e:1d:2a:e0:8a:19:af:09:49: 7e:ba:4e:04:13:af:5d:61:50:d8:55:6a:4a:51:37:97:15:77: 0a:7d:3f:b8:31:ce:b9:67:af:67:44:57:30:b6:6a:79:8d:21: 9e:e9:ee:da:b3:d5:a8:88:a1:a1:1d:92:a7:98:ad:2f:6e:ca: 73:4a:0e:e8:b9:08:fc:95:e8:e0:1a:01:68:77:5f:61:5a:a6: 03:3a:66:2d:3c:c7:05:3e:1f:a1:33:1d:83:27:ca:ee:85:23: c8:42:62:13:fa:23:7e:89:ee:80:a4:6b:a4:72:58:5a:a9:59: ce:18:72:88:92:37:19:1e:01:3d:fd:c1:48:0e:3f:1b:48:83: 44:b1:cc:09:50:e3:3d:d3:f5:4f:62:b7:7a:a6:ae:3a:65:13: d7:9f:a6:55:71:16:51:bc:96:cb:ad:49:04:49:66:d3:2e:5d: 4b:12:58:4f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZsHsC5F8iadvuP3Vp2PSvcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMDk1NTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njc4NzQyNDY4Y2IwMWYwYTUyNmI0ZTkyMjI2ZmUzYjc0YzY3YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVZl3QLpbpbbH7Q8V6aePfuWhPMa 1vDzHLJcP8fKIoLrvHJ60WN0J8EVj4m9/l8dPLIzVyBsEnbeiLj3MphirOYbcYx/ +K1Ax7watjgDwKpczW9Q5kzGsdhB0Sqm82v9TPvNJxeLygVFmexvMz517QBhAcOn 28MAxvAdDbKxE0RiT4szuMZVZV1+SVNE7dYpSDTa2SPiwwj/C0ftyOm9BKxhEcxL s+a9iwSgX4uogByjvk8ZXOSq1Iol6YFvtp/vWv4J8wf7iOSMrvC3g5cfRDFuHCa9 0FbDjEj4s5fH/UdRiROLzqx+QPSJ1nBv3b8K7tgh06hIwsCzDoYa1cfu5QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHZ4dCRoywHwpSa06SIm/jt0xnxBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2Y3MWZh Zi0zYTViLTQ1ZDgtOGYyNS1mYTQ0YzdhMDdkMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZjcxZmFm LTNhNWItNDVkOC04ZjI1LWZhNDRjN2EwN2QyNy8xL2RuaDBKR2pMQWZDbEpyVHBJ aWItTzNUR2ZFRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcibMA0GCSqGSIb3DQEBCwUAA4IBAQCgOy7/ Y6sWebW5TpDQnBLsG+pry9QlSVLV+NX2BUmUSyLDg+vvRFRlOdQzOTmQyiZgIk5g F51UrQaHEUEm7eyiKc0olWXLjB/SXzItvTROsTmeHSrgihmvCUl+uk4EE69dYVDY VWpKUTeXFXcKfT+4Mc65Z69nRFcwtmp5jSGe6e7as9WoiKGhHZKnmK0vbspzSg7o uQj8lejgGgFod19hWqYDOmYtPMcFPh+hMx2DJ8ruhSPIQmIT+iN+ie6ApGukclha qVnOGHKIkjcZHgE9/cFIDj8bSINEscwJUOM90/VPYrd6pq46ZRPXn6ZVcRZRvJbL rUkESWbTLl1LElhP -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:32 2025 by rpki-client