This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer File: dxLiD1ELIrghfN8NIRSWsbnB7bg.cer (raw, json) Hash identifier: zG73vjkJlBv9WoddQjuirlAqMy/uIoDSe+F/iz31FEg= Subject key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8055CBC1E06B354B0BF73BD0EC3EC1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59919 IP: 2.59.140.0/22 IP: 5.178.88.0/21 IP: 45.152.144.0/22 IP: 185.60.188.0/22 IP: 185.136.136.0/22 IP: 185.187.172.0/22 IP: 185.204.220.0/22 IP: 185.248.240.0/22 IP: 2a01:9ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:55:cb:c1:e0:6b:35:4b:0b:f7:3b:d0:ec:3e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:b8:99:a7:44:55:0a:f9:77:dd:57:ff:4b: e3:2f:c7:28:94:fd:36:65:d9:20:80:dc:bc:03:ef: f9:f7:30:17:0e:f8:b2:5f:62:57:24:22:61:69:88: 86:7a:6a:9c:ef:19:62:9f:e3:bf:bd:ca:e4:71:8b: c5:e3:fc:08:71:56:23:a4:5b:9c:45:0e:35:f0:db: c0:f7:83:1a:d6:97:75:f2:b9:a1:28:0c:a1:89:86: e2:59:96:3b:09:6a:7e:fe:55:f4:44:fb:13:5e:c5: 08:48:7b:fc:65:e5:e3:70:91:bf:8d:1c:dd:6b:17: 4a:73:17:19:23:86:9d:bd:8e:9e:fe:43:d4:da:5d: f5:06:bc:80:68:79:ab:e1:e1:d8:50:34:47:82:b3: eb:ce:14:ae:0a:3e:2c:54:7d:f5:40:f4:4d:4c:44: 09:08:f4:c5:0e:1c:c8:8c:73:65:ec:dc:5f:ec:52: f9:12:8e:cd:b3:c7:9d:1b:d0:53:11:ea:7d:af:e8: 9f:d7:a3:bd:38:62:6a:b9:bf:f0:d1:0b:a1:14:ab: fe:cc:40:54:30:c0:d1:6b:61:4b:8e:75:f6:04:79: f7:43:ef:c3:ee:87:c6:1e:8e:86:33:0b:63:5f:34: 4c:8d:05:23:db:2b:3c:46:ae:b0:ae:6d:c9:f7:58: 44:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.140.0/22 5.178.88.0/21 45.152.144.0/22 185.60.188.0/22 185.136.136.0/22 185.187.172.0/22 185.204.220.0/22 185.248.240.0/22 IPv6: 2a01:9ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59919 Signature Algorithm: sha256WithRSAEncryption 2c:43:ce:52:ce:3b:92:c9:5c:ec:5b:df:fb:e3:d5:25:f8:94: f6:4d:b5:d3:c0:0e:68:e3:9f:be:ba:ff:89:b0:80:20:56:9a: 21:1c:9d:96:3b:59:a6:d1:ea:ee:60:c9:b2:43:c9:3c:10:4d: 2a:ef:26:18:42:69:0a:29:3f:b8:21:3e:d2:82:d6:4e:11:49: 14:12:11:8f:cc:cb:69:6e:f3:ed:e6:59:36:52:28:1a:20:0a: a9:54:68:cd:e6:b8:b3:93:65:fe:d1:87:4e:b0:c8:ba:1d:a5: 3e:2b:79:31:70:4d:a0:8f:a5:10:1b:16:30:5a:3a:e2:fc:8b: 16:79:f2:28:dd:19:5a:76:25:7a:46:63:bb:b3:74:e7:1a:30: f6:c9:70:2d:95:17:df:41:66:6c:9c:61:a4:40:58:5f:4d:94: d0:6d:5f:b9:86:b9:ee:d5:05:d3:e4:e8:20:b2:d9:a3:2d:0a: bf:02:b0:1f:9c:ad:f9:f6:2f:dc:ba:76:b2:33:59:f6:7e:f5: 87:31:3a:64:d9:ae:b3:c4:cd:7a:a4:f9:1e:08:1a:16:92:a9: c3:60:e8:b9:4a:7a:ee:d8:b0:af:60:8b:09:30:95:e3:1b:9d: 54:0d:03:e7:48:c4:4d:a8:45:70:ac:60:6a:15:c9:e6:e9:df: 22:83:bd:c2 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt8gFXLweBrNUsL9zvQ7D7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzEyZTIwZjUxMGIyMmI4MjE3Y2RmMGQyMTE0OTZiMWI5YzFlZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ24madEVQr5d91X/0vjL8colP02 ZdkggNy8A+/59zAXDviyX2JXJCJhaYiGemqc7xlin+O/vcrkcYvF4/wIcVYjpFuc RQ418NvA94Ma1pd18rmhKAyhiYbiWZY7CWp+/lX0RPsTXsUISHv8ZeXjcJG/jRzd axdKcxcZI4advY6e/kPU2l31BryAaHmr4eHYUDRHgrPrzhSuCj4sVH31QPRNTEQJ CPTFDhzIjHNl7Nxf7FL5Eo7Ns8edG9BTEep9r+if16O9OGJqub/w0QuhFKv+zEBU MMDRa2FLjnX2BHn3Q+/D7ofGHo6GMwtjXzRMjQUj2ys8Rq6wrm3J91hEAwIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFHcS4g9RCyK4IXzfDSEUlrG5we24MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzZjYjcx NC1jNzE0LTQyODEtOGFkYS00M2NlOTQ5NjYzZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNmNiNzE0 LWM3MTQtNDI4MS04YWRhLTQzY2U5NDk2NjNkOS8xL2R4TGlEMUVMSXJnaGZOOE5J UlNXc2JuQjdiZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQCAjuMAwQDBbJYAwQCLZiQAwQCuTy8AwQCuYiI AwQCubusAwQCuczcAwQCufjwMA0EAgACMAcDBQAqAZrAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwDqDzANBgkqhkiG9w0BAQsFAAOCAQEALEPOUs47kslc7Fvf++PV JfiU9k2108AOaOOfvrr/ibCAIFaaIRydljtZptHq7mDJskPJPBBNKu8mGEJpCik/ uCE+0oLWThFJFBIRj8zLaW7z7eZZNlIoGiAKqVRozea4s5Nl/tGHTrDIuh2lPit5 MXBNoI+lEBsWMFo64vyLFnnyKN0ZWnYlekZju7N05xow9slwLZUX30FmbJxhpEBY X02U0G1fuYa57tUF0+ToILLZoy0KvwKwH5yt+fYv3Lp2sjNZ9n71hzE6ZNmus8TN eqT5HggaFpKpw2DouUp67tiwr2CLCTCV4xudVA0D50jETahFcKxgahXJ5unfIoO9 wg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:33 2026 by rpki-client