This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer File: dpjJmefwST7jZjTokrN8nzv5QH0.cer (raw, json) Hash identifier: 4/ZCq+SuZZvp+Ze/a6DA8sgZwwTckclKJqUYP7VfkDQ= Subject key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C65FB35ADB617623A0E4F618AC6414 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35627 IP: 195.160.166.0/23 IP: 2001:67c:5c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:5f:b3:5a:db:61:76:23:a0:e4:f6:18:ac:64:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a2:8f:9b:65:2f:cf:eb:08:f8:69:7c:bd:e4: fa:62:e9:29:ec:1c:30:e7:22:2d:54:5a:23:90:6a: 6f:46:51:41:96:95:4b:f2:a8:7a:04:dc:2d:59:4c: 51:36:87:ca:05:80:41:0b:c0:f4:fc:36:b4:83:e4: 32:f5:f7:e8:ec:09:bf:00:2a:d6:a2:d7:c9:96:d7: 09:70:d5:de:1d:0b:0b:a0:90:5f:77:7f:63:15:71: 42:5c:d7:7b:90:51:0e:00:94:9f:41:6a:ee:08:4f: ab:3e:a0:a8:dc:97:41:bb:a7:a2:a4:99:a7:49:8b: cd:b8:82:51:a7:75:c8:ee:34:b2:44:3b:07:11:35: 46:af:a5:23:b8:d3:4f:5c:e3:60:57:f4:3e:1d:88: b8:6e:11:7e:ea:e0:11:e5:3b:8b:1e:9e:ca:ea:39: 0f:d0:75:f2:43:f1:89:29:a5:08:18:f5:ef:ee:1f: b9:50:38:b3:e9:52:32:9f:40:51:a4:68:e6:f0:6f: 6e:47:2b:d6:ba:94:c3:12:31:73:1f:e3:4b:0e:c7: 51:8e:0d:20:72:6e:83:7d:3d:48:57:3c:c1:58:11: 93:a5:31:1f:ae:32:e6:b4:b3:19:5b:7e:62:12:aa: 6e:84:55:e0:ad:ab:86:1f:dd:4e:92:1b:f0:ef:bc: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.166.0/23 IPv6: 2001:67c:5c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35627 Signature Algorithm: sha256WithRSAEncryption 2c:81:30:60:f0:18:fc:d0:b9:a7:fd:72:a6:c1:97:45:49:ba: f1:8c:d5:5d:0a:67:84:08:72:15:88:af:52:56:dc:31:96:3d: cd:08:f6:7c:03:30:d6:67:c9:01:7b:a8:34:cb:b5:1b:bd:47: 39:a0:6c:5b:e1:3f:2d:db:5e:be:96:ce:e0:00:15:ec:23:58: 74:dc:3e:3c:35:42:f4:64:0a:52:41:8a:d0:ba:ed:37:e9:5a: f1:b5:57:78:65:28:94:b5:2c:76:71:19:7f:78:24:6a:78:1f: b3:27:67:92:29:10:e2:9f:bb:b7:48:a1:17:03:68:34:b6:ed: 4f:1b:fe:82:c9:5c:c9:de:0f:39:e3:a7:d2:16:9b:c0:e8:fd: b5:35:52:c6:7d:37:d8:f2:91:20:1c:38:b0:78:8b:fe:e9:3c: 73:0a:52:d9:2c:ce:5c:21:f7:27:93:10:e1:9b:86:20:64:a6: 2c:2e:b4:ca:46:2a:cc:1a:72:4f:33:bc:6b:85:59:4d:e0:30: b8:a9:5a:75:e6:e0:75:89:51:d7:0b:50:fb:3b:bf:03:7e:5e: 56:56:a0:ec:68:f7:21:3b:6b:c4:be:f7:6f:3c:02:a3:fd:3e: 60:53:bb:f0:f2:37:ce:85:c4:92:11:4e:73:f0:d7:7f:13:07: 12:b8:c8:6f -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt3xl+zWtthdiOg5PYYrGQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njk4Yzk5OWU3ZjA0OTNlZTM2NjM0ZTg5MmIzN2M5ZjNiZjk0MDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qKPm2Uvz+sI+Gl8veT6Yukp7Bww 5yItVFojkGpvRlFBlpVL8qh6BNwtWUxRNofKBYBBC8D0/Da0g+Qy9ffo7Am/ACrW otfJltcJcNXeHQsLoJBfd39jFXFCXNd7kFEOAJSfQWruCE+rPqCo3JdBu6eipJmn SYvNuIJRp3XI7jSyRDsHETVGr6UjuNNPXONgV/Q+HYi4bhF+6uAR5TuLHp7K6jkP 0HXyQ/GJKaUIGPXv7h+5UDiz6VIyn0BRpGjm8G9uRyvWupTDEjFzH+NLDsdRjg0g cm6DfT1IVzzBWBGTpTEfrjLmtLMZW35iEqpuhFXgrauGH91Okhvw77zv5wIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFHaYyZnn8Ek+42Y06JKzfJ87+UB9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzkxMGJk NC03ZmRhLTQ5MzQtYTQwMy1iMTM2ZmU0MGRmNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvOTEwYmQ0 LTdmZGEtNDkzNC1hNDAzLWIxMzZmZTQwZGY0ZC8xL2RwakptZWZ3U1Q3alpqVG9r ck44bnp2NVFIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw6CmMA8EAgACMAkDBwAgAQZ8AFwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAIsrMA0GCSqGSIb3DQEBCwUAA4IBAQAsgTBg8Bj8 0Lmn/XKmwZdFSbrxjNVdCmeECHIViK9SVtwxlj3NCPZ8AzDWZ8kBe6g0y7UbvUc5 oGxb4T8t216+ls7gABXsI1h03D48NUL0ZApSQYrQuu036VrxtVd4ZSiUtSx2cRl/ eCRqeB+zJ2eSKRDin7u3SKEXA2g0tu1PG/6CyVzJ3g8546fSFpvA6P21NVLGfTfY 8pEgHDiweIv+6TxzClLZLM5cIfcnkxDhm4YgZKYsLrTKRirMGnJPM7xrhVlN4DC4 qVp15uB1iVHXC1D7O78Dfl5WVqDsaPchO2vEvvdvPAKj/T5gU7vw8jfOhcSSEU5z 8Nd/EwcSuMhv -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:03 2026 by rpki-client