This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer File: dnh0JGjLAfClJrTpIib-O3TGfEE.cer (raw, json) Hash identifier: AsdeJOTAq3qjjcJ/fCNsSIF8qON8x4SuAarpLY9hapk= Subject key identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED6C8CEA59DAF2988D097AD71D8A7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.200.155.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6c:8c:ea:59:da:f2:98:8d:09:7a:d7:1d:8a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7678742468cb01f0a526b4e92226fe3b74c67c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:65:dd:02:e9:6e:96:db:1f:b4:3c:57:a6: 9e:3d:fb:96:84:f3:1a:d6:f0:f3:1c:b2:5c:3f:c7: ca:22:82:eb:bc:72:7a:d1:63:74:27:c1:15:8f:89: bd:fe:5f:1d:3c:b2:33:57:20:6c:12:76:de:88:b8: f7:32:98:62:ac:e6:1b:71:8c:7f:f8:ad:40:c7:bc: 1a:b6:38:03:c0:aa:5c:cd:6f:50:e6:4c:c6:b1:d8: 41:d1:2a:a6:f3:6b:fd:4c:fb:cd:27:17:8b:ca:05: 45:99:ec:6f:33:3e:75:ed:00:61:01:c3:a7:db:c3: 00:c6:f0:1d:0d:b2:b1:13:44:62:4f:8b:33:b8:c6: 55:65:5d:7e:49:53:44:ed:d6:29:48:34:da:d9:23: e2:c3:08:ff:0b:47:ed:c8:e9:bd:04:ac:61:11:cc: 4b:b3:e6:bd:8b:04:a0:5f:8b:a8:80:1c:a3:be:4f: 19:5c:e4:aa:d4:8a:25:e9:81:6f:b6:9f:ef:5a:fe: 09:f3:07:fb:88:e4:8c:ae:f0:b7:83:97:1f:44:31: 6e:1c:26:bd:d0:56:c3:8c:48:f8:b3:97:c7:fd:47: 51:89:13:8b:ce:ac:7e:40:f4:89:d6:70:6f:dd:bf: 0a:ee:d8:21:d3:a8:48:c2:c0:b3:0e:86:1a:d5:c7: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.155.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:70:cb:4e:88:89:4f:59:c9:10:6d:8b:47:11:de:de:12:61: a7:25:a9:87:9d:5e:65:14:58:8e:0f:e5:55:d9:65:54:63:79: 4b:15:c0:f3:ca:ed:25:a9:b3:5b:ea:59:9b:a8:47:3c:8f:91: 5d:6a:5b:da:75:09:c5:9b:cf:3e:f7:80:3b:40:04:02:df:29: 45:14:1e:fa:35:98:8b:91:d2:2e:b1:f0:73:3d:1a:8d:63:3b: 89:38:00:4b:ac:64:ce:e0:51:d0:b8:6a:9e:35:f1:7b:4c:a5: f8:1f:bd:d1:21:9a:56:d7:db:f0:b8:8b:7e:b1:04:b4:48:07: e7:62:8e:33:7f:85:50:14:19:cc:60:b9:ce:72:9d:74:c9:d6: 3f:aa:f6:90:a2:5c:b3:ed:65:b4:7b:ee:c3:a2:9b:bd:71:a8: dc:65:9a:3f:0e:6b:27:85:e8:12:3b:43:f8:79:80:05:81:67: 99:fe:ca:88:ee:0a:19:4f:65:5c:d7:9a:0f:ef:de:2e:9e:58: b5:09:ae:61:8e:4b:53:4f:ab:c8:41:60:18:94:ed:7b:1c:33: 51:86:b4:0c:d0:cd:fd:31:42:72:6e:50:ce:19:a4:83:ec:2c: 79:29:78:1e:3c:2a:f7:b7:eb:49:b4:07:f3:1e:e7:63:b1:11: f8:bc:00:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87WyM6lna8piNCXrXHYp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njc4NzQyNDY4Y2IwMWYwYTUyNmI0ZTkyMjI2ZmUzYjc0YzY3YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVZl3QLpbpbbH7Q8V6aePfuWhPMa 1vDzHLJcP8fKIoLrvHJ60WN0J8EVj4m9/l8dPLIzVyBsEnbeiLj3MphirOYbcYx/ +K1Ax7watjgDwKpczW9Q5kzGsdhB0Sqm82v9TPvNJxeLygVFmexvMz517QBhAcOn 28MAxvAdDbKxE0RiT4szuMZVZV1+SVNE7dYpSDTa2SPiwwj/C0ftyOm9BKxhEcxL s+a9iwSgX4uogByjvk8ZXOSq1Iol6YFvtp/vWv4J8wf7iOSMrvC3g5cfRDFuHCa9 0FbDjEj4s5fH/UdRiROLzqx+QPSJ1nBv3b8K7tgh06hIwsCzDoYa1cfu5QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHZ4dCRoywHwpSa06SIm/jt0xnxBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2Y3MWZh Zi0zYTViLTQ1ZDgtOGYyNS1mYTQ0YzdhMDdkMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvZjcxZmFm LTNhNWItNDVkOC04ZjI1LWZhNDRjN2EwN2QyNy8xL2RuaDBKR2pMQWZDbEpyVHBJ aWItTzNUR2ZFRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcibMA0GCSqGSIb3DQEBCwUAA4IBAQB+cMtO iIlPWckQbYtHEd7eEmGnJamHnV5lFFiOD+VV2WVUY3lLFcDzyu0lqbNb6lmbqEc8 j5FdalvadQnFm88+94A7QAQC3ylFFB76NZiLkdIusfBzPRqNYzuJOABLrGTO4FHQ uGqeNfF7TKX4H73RIZpW19vwuIt+sQS0SAfnYo4zf4VQFBnMYLnOcp10ydY/qvaQ olyz7WW0e+7Dopu9cajcZZo/DmsnhegSO0P4eYAFgWeZ/sqI7goZT2Vc15oP794u nli1Ca5hjktTT6vIQWAYlO17HDNRhrQM0M39MUJyblDOGaSD7Cx5KXgePCr3t+tJ tAfzHudjsRH4vAAo -----END CERTIFICATE-----Generated at Tue Feb 10 04:18:12 2026 by rpki-client