This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer (raw, json) Hash identifier: 3zgIePPU2OLXlf/doLk1OvQoaTvLV8MEdN9AkzRmDTE= Subject key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA465B029AC722AE7CF41FF977EF1AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44761 IP: 195.28.18.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:65:b0:29:ac:72:2a:e7:cf:41:ff:97:7e:f1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:68:70:aa:0a:ab:bf:10:cc:d3:bc:6d:72: 91:01:55:f9:15:44:1b:4b:6f:22:70:85:9b:f1:96: 64:17:fa:0c:d0:3e:2b:ef:83:89:b3:17:0c:4b:e6: c7:b1:38:be:1f:56:18:09:5b:9f:29:e4:3f:c3:b8: fd:8f:23:49:64:54:70:a1:e8:07:98:ca:77:5d:44: f8:b5:4e:65:23:b9:04:22:1c:72:21:7d:b7:dc:07: 2c:2b:19:f7:2c:5d:6c:75:c3:fe:b8:98:e0:b9:f9: 95:7e:b9:28:1c:2a:b1:6f:62:3a:3b:18:be:d2:44: f7:ec:9d:91:63:57:9b:48:04:f4:8a:6b:93:90:c5: ef:9b:38:e5:bd:2a:d3:d0:7f:7c:bb:92:7a:92:7f: 86:58:62:6c:65:94:a7:05:02:e0:e0:06:24:a2:b0: ac:fc:91:25:8c:5a:e0:52:35:d8:ca:5f:e9:f5:57: 16:88:59:d5:7a:74:d2:df:11:b0:1b:0a:21:f1:b3: 78:81:2c:84:1d:2c:bd:74:f3:54:e1:e2:1a:be:e3: 35:11:94:95:03:2d:53:f5:29:6c:b1:69:33:14:64: a0:d4:01:1f:36:3e:38:de:cd:91:7f:24:9f:88:cd: a2:7f:f8:9c:ea:8f:6b:49:e6:54:1b:13:44:9c:f8: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.28.18.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44761 Signature Algorithm: sha256WithRSAEncryption 55:14:ee:86:28:71:d3:81:25:7b:65:c5:1d:ea:57:68:8a:bb: be:da:cd:63:6a:c6:2b:8e:46:52:cc:58:58:55:ff:20:25:33: 32:c6:79:1e:2b:a1:d2:94:6f:f8:41:e6:e5:77:a5:9e:8d:e9: 5b:f9:d5:7e:fc:80:de:8c:8c:ff:ee:b8:76:6f:40:fe:6b:ca: c0:a1:4e:0f:af:82:6e:d9:3d:97:c7:f0:32:58:a7:c4:98:ed: 87:ba:dc:a8:d0:e7:a4:48:5d:ac:54:98:20:0f:d9:20:78:de: 09:1e:84:36:d8:b2:27:bb:f1:44:b2:20:ce:f7:95:29:ee:77: 20:bb:0a:06:b9:83:83:1e:aa:55:a7:06:18:6a:4a:e6:72:23: 33:d4:b7:e9:1a:7d:c4:3f:82:9c:38:4f:e0:49:a7:05:68:45: 89:40:1c:b4:b5:44:6f:1c:7c:8d:c8:01:d9:9a:36:63:cf:d6: a5:e7:50:9c:a1:1c:9f:dc:ab:4b:99:9b:2f:89:e4:c8:83:73: 0b:f9:fb:01:ba:c1:16:83:e3:d1:c8:bb:35:dc:3e:25:ef:b4: ff:4a:e2:b3:0c:41:d4:51:50:88:cb:f0:d3:43:79:11:2a:89: d0:01:fe:6c:f9:31:80:88:a1:60:41:e8:f3:ab:ff:8a:d6:90: d8:00:68:9a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pGWwKaxyKufPQf+XfvGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmUyYWU0ZmUwYzBkNmNiMDc0OWI4NzdhZTE1NWE2MjlmZTJhZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtftocKoKq78QzNO8bXKRAVX5FUQb S28icIWb8ZZkF/oM0D4r74OJsxcMS+bHsTi+H1YYCVufKeQ/w7j9jyNJZFRwoegH mMp3XUT4tU5lI7kEIhxyIX233AcsKxn3LF1sdcP+uJjgufmVfrkoHCqxb2I6Oxi+ 0kT37J2RY1ebSAT0imuTkMXvmzjlvSrT0H98u5J6kn+GWGJsZZSnBQLg4AYkorCs /JEljFrgUjXYyl/p9VcWiFnVenTS3xGwGwoh8bN4gSyEHSy9dPNU4eIavuM1EZSV Ay1T9SlssWkzFGSg1AEfNj443s2RfySfiM2if/ic6o9rSeZUGxNEnPhicQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHbirk/gwNbLB0m4d64VWmKf4q/WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzlhNTJm ZC0wMzY0LTQxNTAtYWFjYS00MTYwMmZkYzlmZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvOWE1MmZk LTAzNjQtNDE1MC1hYWNhLTQxNjAyZmRjOWZkZS8xL2R1S3VULURBMXNzSFNiaDNy aFZhWXBfaXI5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwxwSMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCu2TANBgkqhkiG9w0BAQsFAAOCAQEAVRTuhihx04Ele2XFHepXaIq7vtrNY2rG K45GUsxYWFX/ICUzMsZ5Hiuh0pRv+EHm5Xelno3pW/nVfvyA3oyM/+64dm9A/mvK wKFOD6+Cbtk9l8fwMlinxJjth7rcqNDnpEhdrFSYIA/ZIHjeCR6ENtiyJ7vxRLIg zveVKe53ILsKBrmDgx6qVacGGGpK5nIjM9S36Rp9xD+CnDhP4EmnBWhFiUActLVE bxx8jcgB2Zo2Y8/WpedQnKEcn9yrS5mbL4nkyINzC/n7AbrBFoPj0ci7Ndw+Je+0 /0riswxB1FFQiMvw00N5ESqJ0AH+bPkxgIihYEHo86v/itaQ2ABomg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:50 2026 by rpki-client