This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer File: dw0111Zu5yRuTSEzy95Ip3RCPHc.cer (raw, json) Hash identifier: GYBHKVo/Qz9U3pLqhI57RzDhH8dy6+0PatDn7WmCqS4= Subject key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35F5DA9931FA633D5CFDEB9F73E567 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44802 AS: 60579 AS: 61175 IP: 185.17.8.0/24 IP: 185.164.162.0/24 IP: 193.27.229.0/24 IP: 2a12:bbc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f5:da:99:31:fa:63:3d:5c:fd:eb:9f:73:e5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=770d35d7566ee7246e4d2133cbde48a774423c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:9f:54:31:3c:00:f9:e6:8f:35:ff:b0:b8: 88:87:cb:72:8f:65:f9:61:73:12:8d:1b:a2:cb:14: 51:0c:1b:b4:9e:41:65:c0:ee:30:d9:ad:d0:d3:68: 36:67:0e:b4:a4:b2:26:d2:da:c0:13:f2:08:77:6e: da:ba:65:26:10:c8:e5:c6:08:01:ac:21:83:9b:67: 92:4d:52:4d:42:8e:0e:39:3a:c3:3a:4c:c0:91:6b: 7b:ca:13:9f:43:30:33:7e:48:06:2d:c0:51:20:34: 28:b1:84:35:1b:03:1f:95:44:76:63:c5:60:c4:66: 81:5a:ab:56:c2:a7:1c:f6:a5:a6:ab:67:83:6b:4e: aa:63:50:eb:53:ff:02:37:63:06:26:41:9c:42:be: e3:8c:76:6f:bf:44:65:71:bd:43:70:58:42:93:f4: 21:b9:c6:c7:63:70:15:88:34:ef:00:9b:5d:17:ee: b3:cc:07:af:55:f5:ff:10:7f:e9:d2:ea:ae:32:2f: 5a:2b:63:12:37:df:32:23:4e:85:4b:c7:79:09:45: 45:be:b1:04:a2:d6:59:36:f7:9a:9c:4c:a5:b1:bb: aa:82:b8:c9:7b:bb:ec:9b:73:fc:1e:d3:8e:96:5a: 5f:a6:6d:bd:66:f9:0d:29:12:12:ca:2e:32:8d:ce: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.8.0/24 185.164.162.0/24 193.27.229.0/24 IPv6: 2a12:bbc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44802 60579 61175 Signature Algorithm: sha256WithRSAEncryption 6c:bf:ee:78:d9:d4:a6:0d:b4:b7:e0:f5:88:9b:63:d6:a5:8b: 3c:4a:1b:8e:e3:21:69:60:dd:bd:cd:82:2e:60:b6:02:ff:b1: fd:5b:03:84:5a:45:1c:fb:fd:04:05:0d:dc:40:f1:3d:f1:13: 1c:21:0b:87:7c:c4:9f:8a:10:a5:b5:5a:ac:dd:6c:a4:0c:96: 56:05:5a:01:6d:cf:4c:8c:42:00:3c:51:8b:5e:aa:67:bb:57: 66:cf:41:fc:1b:e4:20:34:bd:da:d5:f3:e6:12:74:24:e5:b0: 01:d3:c6:60:9b:fc:00:1f:94:68:00:72:db:eb:c7:00:cc:8e: 87:ef:a9:f8:7c:9f:eb:34:b5:04:c3:a8:1b:ce:9d:31:ef:84: f6:62:d8:b9:2d:74:a1:35:40:11:a0:fd:f5:dc:51:1f:dc:f4: fd:fa:1b:df:b9:6c:8d:4a:97:9f:96:43:3e:91:88:4b:f2:1e: c1:98:e3:87:a2:a2:45:52:bc:94:1e:86:21:35:47:26:78:06: a4:e7:b8:ed:ec:9d:dc:e0:a8:29:32:6a:95:8b:3b:88:e8:97: 08:b4:9b:c8:6b:8e:fa:9b:48:f3:e0:05:e7:3e:c0:cc:23:32: 13:b6:a9:03:5e:5b:8a:aa:b8:be:9c:e5:b5:2f:7e:03:9d:00: e4:d5:2d:c7 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt7NfXamTH6Yz1c/eufc+VnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzBkMzVkNzU2NmVlNzI0NmU0ZDIxMzNjYmRlNDhhNzc0NDIzYzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGufVDE8APnmjzX/sLiIh8tyj2X5 YXMSjRuiyxRRDBu0nkFlwO4w2a3Q02g2Zw60pLIm0trAE/IId27aumUmEMjlxggB rCGDm2eSTVJNQo4OOTrDOkzAkWt7yhOfQzAzfkgGLcBRIDQosYQ1GwMflUR2Y8Vg xGaBWqtWwqcc9qWmq2eDa06qY1DrU/8CN2MGJkGcQr7jjHZvv0Rlcb1DcFhCk/Qh ucbHY3AViDTvAJtdF+6zzAevVfX/EH/p0uquMi9aK2MSN98yI06FS8d5CUVFvrEE otZZNveanEylsbuqgrjJe7vsm3P8HtOOllpfpm29ZvkNKRISyi4yjc58fwIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFHcNNddWbuckbk0hM8veSKd0Qjx3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzM2ZTYw Yi0yNDExLTQ2M2ItODI1NC01NDc1ZGU2MDNjZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvMzZlNjBi LTI0MTEtNDYzYi04MjU0LTU0NzVkZTYwM2NkMy8xL2R3MDExMVp1NXlSdVRTRXp5 OTVJcDNSQ1BIYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAuREIAwQAuaSiAwQAwRvlMA0EAgACMAcDBQMq ErvAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCvAgIDAOyjAgMA7vcwDQYJKoZI hvcNAQELBQADggEBAGy/7njZ1KYNtLfg9YibY9alizxKG47jIWlg3b3Ngi5gtgL/ sf1bA4RaRRz7/QQFDdxA8T3xExwhC4d8xJ+KEKW1WqzdbKQMllYFWgFtz0yMQgA8 UYteqme7V2bPQfwb5CA0vdrV8+YSdCTlsAHTxmCb/AAflGgActvrxwDMjofvqfh8 n+s0tQTDqBvOnTHvhPZi2LktdKE1QBGg/fXcUR/c9P36G9+5bI1Kl5+WQz6RiEvy HsGY44eiokVSvJQehiE1RyZ4BqTnuO3sndzgqCkyapWLO4jolwi0m8hrjvqbSPPg Bec+wMwjMhO2qQNeW4qquL6c5bUvfgOdAOTVLcc= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:05 2026 by rpki-client