This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer File: dzrmY60KGjBy29hnmSt9jfJaRJo.cer (raw, json) Hash identifier: BMonNzeLKF1TLNJTQdaVIKPOBiiM57ANd+KXmxFg2g4= Subject key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791026C2790E37DC40DFAF284DA5A75C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49711 AS: 50438 IP: 91.215.176.0/22 IP: 91.220.250.0/24 IP: 176.118.152.0/21 IP: 193.58.255.0/24 IP: 2001:67c:57c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:26:c2:79:0e:37:dc:40:df:af:28:4d:a5:a7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:30:88:eb:d3:01:f5:c0:d0:f5:6c:21:6f: 5e:a2:7b:d5:1b:98:36:c6:da:97:30:4e:c2:e8:90: c0:6e:89:3e:fa:62:8d:91:b6:57:bd:14:64:a6:81: 56:cf:4d:2a:42:2d:e8:41:2c:12:0b:11:78:ef:35: 93:18:1c:37:9a:a3:a0:25:3a:27:a2:6f:69:c3:6c: 85:37:94:43:b2:93:c9:75:67:00:f0:ea:a9:be:83: 33:24:bb:12:70:dd:46:ab:a9:06:29:5e:53:34:5a: 7b:da:01:bc:ee:81:8f:18:59:ed:8c:a6:72:b5:db: 53:b8:14:c1:c9:b7:b0:dc:3b:78:90:98:55:ed:11: 37:7c:8e:fe:23:ad:bd:c1:91:45:c9:18:fd:03:8b: fc:11:c9:2e:96:29:2b:48:93:c1:c6:f2:44:0a:02: dd:02:a2:a4:92:75:20:de:7f:f6:00:92:b4:94:ee: be:80:f7:93:64:7f:68:9b:06:6e:29:9f:66:36:d2: d5:89:d3:07:39:97:1d:da:2b:69:b4:3d:ca:e1:34: 34:84:63:97:c5:f2:07:30:7e:57:a8:28:a1:11:da: 97:93:7d:b4:de:43:5d:ba:2f:fd:e4:15:33:3a:fa: ea:79:42:75:bc:06:23:0a:4a:5f:43:1c:3c:02:92: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.176.0/22 91.220.250.0/24 176.118.152.0/21 193.58.255.0/24 IPv6: 2001:67c:57c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49711 50438 Signature Algorithm: sha256WithRSAEncryption 75:60:fa:99:3c:2f:be:d9:a0:bd:dd:07:c8:c7:8b:76:c9:b7: df:d1:c3:69:76:bf:f8:ba:be:39:51:39:3d:83:51:b8:b5:98: ed:8a:34:c5:c7:26:b5:83:42:48:d1:59:6c:33:29:de:55:02: 32:b5:e3:37:96:be:df:69:b1:f6:ca:62:cb:a2:62:48:ad:45: e4:64:08:45:db:50:03:b2:95:02:90:f6:31:e4:a1:ee:b7:84: 8f:63:c6:da:7b:bb:48:ff:be:cd:3a:35:fc:a1:75:6b:ff:2d: 1e:6a:35:0a:04:35:74:73:b4:05:61:c5:ae:b1:ff:46:3c:3f: 56:79:b2:ee:a0:32:bc:16:c2:e0:2d:5a:99:24:cf:ae:8f:ba: 24:54:03:83:58:82:49:3c:4b:ec:34:f3:8c:db:11:e7:fd:cd: a7:cf:a7:cc:42:5e:23:c7:7d:e2:c2:ab:48:4d:e1:f1:26:75: e3:1b:c9:81:2a:9f:6c:9b:c9:98:93:db:49:39:0a:35:1e:55: 6d:05:4d:a2:42:74:18:a6:93:d4:ba:a8:e3:c8:a7:c3:40:8d: 19:19:dc:a9:89:1a:9a:5f:e1:ed:f9:1b:5e:58:d1:91:cd:c3: 07:b6:3c:9e:a1:9b:8f:16:33:34:09:da:44:3a:ae:6e:6d:4b: 9b:5a:a7:56 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt5ECbCeQ433EDfryhNpadcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzNhZTY2M2FkMGExYTMwNzJkYmQ4Njc5OTJiN2Q4ZGYyNWE0NDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0MwiOvTAfXA0PVsIW9eonvVG5g2 xtqXME7C6JDAbok++mKNkbZXvRRkpoFWz00qQi3oQSwSCxF47zWTGBw3mqOgJTon om9pw2yFN5RDspPJdWcA8OqpvoMzJLsScN1Gq6kGKV5TNFp72gG87oGPGFntjKZy tdtTuBTBybew3Dt4kJhV7RE3fI7+I629wZFFyRj9A4v8EckulikrSJPBxvJECgLd AqKkknUg3n/2AJK0lO6+gPeTZH9omwZuKZ9mNtLVidMHOZcd2itptD3K4TQ0hGOX xfIHMH5XqCihEdqXk3203kNdui/95BUzOvrqeUJ1vAYjCkpfQxw8ApIeNwIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFHc65mOtChowctvYZ5krfY3yWkSaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzA5MmZk Yy1jMzAwLTQxYTUtOTAxNS02NjJlYzgxOGQyM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMDkyZmRj LWMzMDAtNDFhNS05MDE1LTY2MmVjODE4ZDIzZC8xL2R6cm1ZNjBLR2pCeTI5aG5t U3Q5amZKYVJKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAeBAIAATAYAwQCW9ewAwQAW9z6AwQDsHaYAwQAwTr/MA8EAgAC MAkDBwAgAQZ8BXwwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMIvAgMAxQYwDQYJ KoZIhvcNAQELBQADggEBAHVg+pk8L77ZoL3dB8jHi3bJt9/Rw2l2v/i6vjlROT2D Ubi1mO2KNMXHJrWDQkjRWWwzKd5VAjK14zeWvt9psfbKYsuiYkitReRkCEXbUAOy lQKQ9jHkoe63hI9jxtp7u0j/vs06NfyhdWv/LR5qNQoENXRztAVhxa6x/0Y8P1Z5 su6gMrwWwuAtWpkkz66PuiRUA4NYgkk8S+w084zbEef9zafPp8xCXiPHfeLCq0hN 4fEmdeMbyYEqn2ybyZiT20k5CjUeVW0FTaJCdBimk9S6qOPIp8NAjRkZ3KmJGppf 4e35G15Y0ZHNwwe2PJ6hm48WMzQJ2kQ6rm5tS5tap1Y= -----END CERTIFICATE-----Generated at Mon Jan 26 14:47:40 2026 by rpki-client