This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer File: du6ffY5dGMUIhPgzeK5Iui_NpuI.cer (raw, json) Hash identifier: KHa9VElAULAAliZLEKPjRreRshTwapRC8NtAW2Jnewg= Subject key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8483D95DFB067CA04C8CCCE82ACBDF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211566 IP: 193.3.33.0/24 IP: 2a10:c2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:83:d9:5d:fb:06:7c:a0:4c:8c:cc:e8:2a:cb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:93:63:3a:d3:24:08:4d:78:ef:bd:e5:42: 35:cd:60:99:21:2f:53:c3:41:be:47:7e:ec:f4:c8: 93:74:6b:aa:a3:8c:b6:2f:cc:1a:50:dc:45:05:6d: 68:4f:6f:2b:f0:22:12:d2:36:91:26:36:e0:ea:e1: 7c:d6:68:ab:f5:74:46:c3:59:83:75:dd:ae:b8:fa: 83:47:04:6c:fe:4c:f9:19:b1:cd:eb:32:8a:14:ce: 1c:5d:de:7c:0a:87:3a:82:8c:d9:5f:d7:92:49:8e: f7:1f:9d:15:d2:23:d2:22:25:b6:1b:3c:28:0d:71: f8:d1:be:a5:19:98:2a:a3:ae:f5:97:96:b2:e5:25: 58:c1:5b:05:14:b5:9c:1f:05:28:10:3d:08:0c:7c: 4e:3d:27:24:93:71:64:06:6b:72:8c:62:8e:16:33: 33:4f:10:e6:81:25:15:32:d6:af:08:60:5a:3c:e0: b6:b3:e9:4a:73:90:3b:67:0b:16:ec:ad:2f:2d:51: df:f0:d7:d0:c6:15:4b:93:14:57:bb:ac:bc:27:ab: bc:69:98:a1:57:f5:df:2f:18:fa:f0:95:8e:d3:42: 3f:db:70:42:ac:44:fa:74:43:15:0f:24:b8:ed:22: c9:3e:e5:fe:31:4d:cc:57:b5:a8:d3:8f:d9:3a:3e: 08:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.33.0/24 IPv6: 2a10:c2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211566 Signature Algorithm: sha256WithRSAEncryption 96:59:86:e1:8c:dd:4d:70:74:57:ec:cd:7b:93:fd:14:3e:38: a6:ce:6c:ee:6a:85:6e:56:24:bf:6c:20:39:64:79:db:62:04: 53:0b:8f:3d:59:b4:b1:a7:b2:90:10:c9:1f:20:31:3a:45:0d: 7d:05:5f:fc:9b:0b:db:7d:2a:ad:ff:46:7e:73:61:ee:4e:57: 41:a8:4f:39:f1:32:87:13:4e:15:37:90:5c:a9:82:fa:62:b5: 4a:ad:97:c7:ad:a6:28:53:87:eb:fb:e6:69:e6:9f:25:92:e5: 3a:11:5f:e0:23:4a:b9:dd:c1:37:b4:77:0a:53:3f:2a:39:0a: 95:c4:5b:32:68:70:dd:ad:1c:0a:9f:36:6c:c0:b6:f8:27:1b: 8b:04:da:f6:d8:53:6f:33:84:a9:4f:4d:8e:0c:fe:bd:b2:90: a1:6c:7b:45:91:8b:30:b3:66:c6:b0:51:e5:2c:04:4e:03:75: 1e:b6:9a:89:0f:67:28:86:e4:ff:75:15:e3:e7:74:e7:4a:f2: c5:0f:8d:b2:32:50:51:5e:7e:52:f1:87:15:e7:e7:ba:7a:c5: 6d:1b:3f:c2:c5:b6:33:81:17:33:0e:c6:1e:0e:c2:ea:e4:ee: bb:1d:93:35:3a:f9:89:35:9f:90:af:da:32:c0:7a:30:e7:5b: a9:bb:93:1e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hIPZXfsGfKBMjMzoKsvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmVlOWY3ZDhlNWQxOGM1MDg4NGY4MzM3OGFlNDhiYTJmY2RhNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTuTYzrTJAhNeO+95UI1zWCZIS9T w0G+R37s9MiTdGuqo4y2L8waUNxFBW1oT28r8CIS0jaRJjbg6uF81mir9XRGw1mD dd2uuPqDRwRs/kz5GbHN6zKKFM4cXd58Coc6gozZX9eSSY73H50V0iPSIiW2Gzwo DXH40b6lGZgqo671l5ay5SVYwVsFFLWcHwUoED0IDHxOPSckk3FkBmtyjGKOFjMz TxDmgSUVMtavCGBaPOC2s+lKc5A7ZwsW7K0vLVHf8NfQxhVLkxRXu6y8J6u8aZih V/XfLxj68JWO00I/23BCrET6dEMVDyS47SLJPuX+MU3MV7Wo04/ZOj4IewIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHbun32OXRjFCIT4M3iuSLovzabiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2FhM2I0 Mi1iNjAxLTQwYjQtYjI5OS1iZjhlOTYwZmUwYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvYWEzYjQy LWI2MDEtNDBiNC1iMjk5LWJmOGU5NjBmZTBhZC8xL2R1NmZmWTVkR01VSWhQZ3pl SzVJdWlfTnB1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwQMhMA0EAgACMAcDBQMqEMLAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6bjANBgkqhkiG9w0BAQsFAAOCAQEAllmG4YzdTXB0 V+zNe5P9FD44ps5s7mqFblYkv2wgOWR522IEUwuPPVm0saeykBDJHyAxOkUNfQVf /JsL230qrf9GfnNh7k5XQahPOfEyhxNOFTeQXKmC+mK1Sq2Xx62mKFOH6/vmaeaf JZLlOhFf4CNKud3BN7R3ClM/KjkKlcRbMmhw3a0cCp82bMC2+CcbiwTa9thTbzOE qU9Njgz+vbKQoWx7RZGLMLNmxrBR5SwETgN1HraaiQ9nKIbk/3UV4+d050ryxQ+N sjJQUV5+UvGHFefnunrFbRs/wsW2M4EXMw7GHg7C6uTuux2TNTr5iTWfkK/aMsB6 MOdbqbuTHg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:52 2026 by rpki-client