This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer File: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer (raw, json) Hash identifier: Ac8hJzjIXmibJyja66D49KdIeuQJfTXskQIkuzezn84= Subject key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD4346BAA44BC2B383D327921E53D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212130 IP: 193.163.149.0/24 IP: 2a10:af80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d4:34:6b:aa:44:bc:2b:38:3d:32:79:21:e5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac328756dece8f29f97f41b81a087db524e159b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:77:6d:55:f9:d1:70:6e:4f:b9:f7:68:c9: bf:7c:df:17:80:81:d3:6e:f2:07:cc:f8:50:7c:fb: de:63:e8:64:a7:67:79:fa:a8:ac:2c:48:a1:a1:9d: 40:eb:9e:cb:79:f8:dc:45:9a:54:ba:ff:f9:1d:64: 58:6d:a6:61:b0:4a:e6:cc:58:34:75:53:95:62:94: 0c:1b:73:b0:2d:eb:c1:51:0b:17:bb:54:fd:b7:08: f0:e4:19:b5:c5:90:4e:cf:5f:fa:c8:5e:7d:08:de: dc:28:b6:bd:74:3f:1f:c8:e1:62:03:71:4a:e6:e6: f7:d0:c6:c6:0e:43:c5:2e:b0:03:80:94:45:63:06: 75:69:94:33:f1:a4:12:67:3c:43:a2:cf:28:09:6b: 45:8f:81:69:09:a5:25:c5:e6:0e:32:33:c4:d1:59: 7c:83:99:f7:fb:17:17:f0:3d:7e:63:e4:90:8c:9c: 68:a2:ed:6f:db:d0:8f:a2:e6:14:90:31:a4:3c:26: 1f:d8:99:79:05:80:fa:26:df:65:cd:8f:8d:ed:99: ae:c7:b9:1f:8e:0e:3c:95:9b:85:b1:3e:25:d1:15: c7:5e:e0:a1:86:0e:15:9c:23:59:e9:90:cd:df:66: ae:01:7a:a4:07:1c:5f:a8:49:9d:26:8c:e5:40:9a: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.149.0/24 IPv6: 2a10:af80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212130 Signature Algorithm: sha256WithRSAEncryption 55:1d:0b:57:ba:9e:f2:f9:03:c1:cf:ee:c2:d4:f2:00:02:9a: 10:b5:bb:bb:44:12:ff:fd:7f:63:13:06:31:02:7c:d5:fa:8d: 39:3e:0f:01:a7:c4:fa:b5:0f:fe:6d:e8:9c:72:15:d7:8d:ca: c6:d6:d5:89:8e:66:a7:ae:de:b8:ca:e7:6d:3e:7b:1f:7c:1f: 43:25:b1:b3:48:1f:05:52:24:76:30:f2:9c:62:22:a8:89:b3: 3b:e3:d6:50:e3:cf:ad:d3:1d:92:d0:94:47:6c:55:76:81:6d: 23:59:c4:3d:26:59:2e:1c:4b:89:d7:b9:2e:fc:0c:96:06:d2: 8b:ff:a3:48:f1:95:96:f9:98:6d:d4:c0:3a:6a:fe:50:d0:83: b2:ad:71:fd:5e:90:52:34:dc:3e:2e:c6:4a:e1:68:69:ed:e9: 05:78:28:ac:50:b7:d2:ec:45:f0:80:a4:6e:ea:0d:46:53:3f: 60:dd:01:72:1f:d8:00:7f:6a:93:67:20:5a:c9:fd:7b:85:94: 65:72:10:b2:85:e3:be:97:42:00:74:4a:1b:39:fa:4d:43:1c: ed:f2:3d:6d:be:37:bd:ae:b9:4a:49:55:ce:c1:5e:14:06:86: 76:26:34:1b:bf:6d:13:d6:ed:a0:f5:2b:05:1d:a3:40:7f:01: dd:9b:1e:9c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WtQ0a6pEvCs4PTJ5IeU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzMyODc1NmRlY2U4ZjI5Zjk3ZjQxYjgxYTA4N2RiNTI0ZTE1OWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7R3bVX50XBuT7n3aMm/fN8XgIHT bvIHzPhQfPveY+hkp2d5+qisLEihoZ1A657LefjcRZpUuv/5HWRYbaZhsErmzFg0 dVOVYpQMG3OwLevBUQsXu1T9twjw5Bm1xZBOz1/6yF59CN7cKLa9dD8fyOFiA3FK 5ub30MbGDkPFLrADgJRFYwZ1aZQz8aQSZzxDos8oCWtFj4FpCaUlxeYOMjPE0Vl8 g5n3+xcX8D1+Y+SQjJxoou1v29CPouYUkDGkPCYf2Jl5BYD6Jt9lzY+N7Zmux7kf jg48lZuFsT4l0RXHXuChhg4VnCNZ6ZDN32auAXqkBxxfqEmdJozlQJrYgwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKwyh1bezo8p+X9BuBoIfbUk4Vm3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2ZiNzhh ZC05MThlLTQ0YzItOTUwMS0wMjRhZDRmYjM3MDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZmI3OGFk LTkxOGUtNDRjMi05NTAxLTAyNGFkNGZiMzcwOC8xL3JES0hWdDdPanluNWYwRzRH Z2g5dFNUaFdiYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaOVMA0EAgACMAcDBQMqEK+AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8ojANBgkqhkiG9w0BAQsFAAOCAQEAVR0LV7qe8vkD wc/uwtTyAAKaELW7u0QS//1/YxMGMQJ81fqNOT4PAafE+rUP/m3onHIV143KxtbV iY5mp67euMrnbT57H3wfQyWxs0gfBVIkdjDynGIiqImzO+PWUOPPrdMdktCUR2xV doFtI1nEPSZZLhxLide5LvwMlgbSi/+jSPGVlvmYbdTAOmr+UNCDsq1x/V6QUjTc Pi7GSuFoae3pBXgorFC30uxF8ICkbuoNRlM/YN0Bch/YAH9qk2cgWsn9e4WUZXIQ soXjvpdCAHRKGzn6TUMc7fI9bb43va65SklVzsFeFAaGdiY0G79tE9btoPUrBR2j QH8B3ZsenA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:23 2026 by rpki-client