This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer File: g60oliGDPa6G_dpi5LmwningeKA.cer (raw, json) Hash identifier: TL1QkVpvf0UrgnLuQktbUzOlW7wF9KgV0FMW3OyTYEI= Subject key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B368CCD06A227397DAF202379687FD4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.227.88.0/21 IP: 185.98.56.0/22 IP: 185.144.204.0/22 IP: 185.146.196.0/22 IP: 193.34.116.0/22 IP: 2a0d:9100::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8c:cd:06:a2:27:39:7d:af:20:23:79:68:7f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83ad289621833dae86fdda62e4b9b09e29e078a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:f7:6f:5a:f6:2b:08:0d:de:a2:c4:2a:21: 7b:4e:29:82:73:44:6c:f8:69:3e:87:94:ce:69:b3: e0:e4:72:9e:43:21:bc:45:6c:33:d7:e3:d1:74:f6: 93:e5:cc:e6:dc:9d:bc:fd:84:cf:ee:e8:61:0a:57: ae:0d:25:b7:69:9b:cf:be:14:20:0f:97:60:5e:73: 6e:99:e5:34:09:ca:70:66:1f:f3:eb:df:14:0a:f5: 40:13:59:8a:36:5a:bb:8c:cb:21:1c:ab:e4:01:97: 95:dc:4b:f4:9f:f9:31:fb:13:17:86:42:d1:76:f9: 63:b1:d0:64:6e:aa:4e:e2:5b:d9:1c:0e:86:52:01: 85:a9:56:a0:18:2a:e3:8f:4b:8e:28:6c:2f:98:76: 35:56:36:69:bd:af:ba:3f:f1:eb:f5:f9:0e:af:1f: 0f:0b:64:2f:e7:5c:0d:9d:25:cd:13:9d:2a:19:ff: 56:90:10:d8:58:88:bc:36:33:63:f4:25:40:f4:3a: 2f:23:00:b8:89:7f:9d:1b:ae:ec:db:c4:a8:d3:e8: 48:56:77:92:bf:e5:ab:1f:ca:bd:2e:1e:4d:00:58: 69:d2:94:c5:c4:0d:16:c3:4a:66:71:fb:d5:7e:5a: ea:70:fc:08:f1:39:7c:2e:e1:17:d2:d7:ed:e3:e0: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.88.0/21 185.98.56.0/22 185.144.204.0/22 185.146.196.0/22 193.34.116.0/22 IPv6: 2a0d:9100::/32 Signature Algorithm: sha256WithRSAEncryption 32:36:76:fd:09:d0:81:93:85:d9:6b:9a:40:e7:91:1d:82:8f: fc:6e:44:d4:8e:62:8c:e7:25:7e:7c:d8:d4:79:2f:ec:3e:17: a7:84:11:f5:5a:a2:dd:ad:dc:22:d9:72:71:9b:a4:a1:da:4b: a4:2c:2c:82:3b:6b:a5:bc:dc:03:e6:ba:fd:a5:ab:24:05:ab: ae:33:fd:66:dc:f6:5b:b3:aa:df:55:3e:b1:14:0c:75:18:3a: f3:87:0f:f7:22:d6:f5:cb:8d:fa:54:c5:5a:20:19:97:4f:7c: 31:af:b1:f2:eb:b5:78:8b:12:35:af:44:08:24:c0:07:25:16: 84:e3:a3:ea:e7:04:08:5e:4c:5e:f1:c8:1a:6b:24:7a:28:42: f6:f2:d0:aa:a7:8b:8a:31:3e:2f:1c:ef:48:6c:d2:4d:91:cc: 64:1d:ca:56:99:d5:38:ca:80:4c:fe:49:3a:6b:f8:4f:7c:6b: a2:75:07:3c:e1:68:1b:96:28:f2:3a:3a:7c:e3:a7:52:df:22: 18:f6:c5:09:a6:4e:24:4e:d2:d0:1a:d4:00:8d:fc:16:55:f6: f9:d3:1e:bf:8d:18:45:d6:65:19:d7:21:95:2a:a1:a7:1d:24: 3c:a3:41:cc:69:ae:b2:b9:aa:17:20:00:69:0c:5c:d5:f6:ef: b7:0f:f9:61 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt7NozNBqInOX2vICN5aH/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2FkMjg5NjIxODMzZGFlODZmZGRhNjJlNGI5YjA5ZTI5ZTA3OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/L3b1r2KwgN3qLEKiF7TimCc0Rs +Gk+h5TOabPg5HKeQyG8RWwz1+PRdPaT5czm3J28/YTP7uhhCleuDSW3aZvPvhQg D5dgXnNumeU0CcpwZh/z698UCvVAE1mKNlq7jMshHKvkAZeV3Ev0n/kx+xMXhkLR dvljsdBkbqpO4lvZHA6GUgGFqVagGCrjj0uOKGwvmHY1VjZpva+6P/Hr9fkOrx8P C2Qv51wNnSXNE50qGf9WkBDYWIi8NjNj9CVA9DovIwC4iX+dG67s28So0+hIVneS v+WrH8q9Lh5NAFhp0pTFxA0Ww0pmcfvVflrqcPwI8Tl8LuEX0tft4+C99wIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFIOtKJYhgz2uhv3aYuS5sJ4p4HigMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2UxODcw Zi05Y2I2LTQzMzktYWEzOC0wYWY0MjMxZGE3OWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvZTE4NzBm LTljYjYtNDMzOS1hYTM4LTBhZjQyMzFkYTc5YS8xL2c2MG9saUdEUGE2R19kcGk1 TG13bmluZ2VLQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDLuNYAwQCuWI4AwQCuZDMAwQCuZLEAwQCwSJ0 MA0EAgACMAcDBQAqDZEAMA0GCSqGSIb3DQEBCwUAA4IBAQAyNnb9CdCBk4XZa5pA 55Edgo/8bkTUjmKM5yV+fNjUeS/sPhenhBH1WqLdrdwi2XJxm6Sh2kukLCyCO2ul vNwD5rr9paskBauuM/1m3PZbs6rfVT6xFAx1GDrzhw/3Itb1y436VMVaIBmXT3wx r7Hy67V4ixI1r0QIJMAHJRaE46Pq5wQIXkxe8cgaayR6KEL28tCqp4uKMT4vHO9I bNJNkcxkHcpWmdU4yoBM/kk6a/hPfGuidQc84WgblijyOjp846dS3yIY9sUJpk4k TtLQGtQAjfwWVfb50x6/jRhF1mUZ1yGVKqGnHSQ8o0HMaa6yuaoXIABpDFzV9u+3 D/lh -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:37 2026 by rpki-client