This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer (raw, json) Hash identifier: TITq6j0yvhVkWtQ0fk4dPgtoPndOLM0gEHbGlv0yzFc= Subject key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E48C45ED3917E95A550EA07A8F1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49717 AS: 51002 AS: 203877 IP: 178.217.8.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e4:8c:45:ed:39:17:e9:5a:55:0e:a0:7a:8f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:49:7e:df:58:32:c5:aa:5a:a5:af:fd:56: 41:87:27:c4:15:a3:80:c6:fb:56:ba:fd:52:57:c3: 1e:07:18:94:c2:3a:31:c1:09:8a:85:47:2c:75:cb: 10:e7:6a:4a:78:4b:97:6e:0c:fe:fc:7b:ab:ce:ab: be:7c:4e:a1:9d:43:41:7e:3b:5f:d5:60:4a:78:dd: 35:e4:f0:17:b3:d3:6b:74:a2:59:68:41:77:4b:64: c6:8e:5d:32:d3:15:fd:d3:ef:9f:e9:ff:c0:0d:38: ea:b3:d3:f3:69:89:a8:33:79:12:23:af:a5:2f:70: 63:7c:d2:eb:a6:ff:b6:6c:98:d2:39:11:4f:34:f0: f8:6b:50:ce:74:24:e2:aa:ec:5a:2b:d9:d8:e0:1e: ef:ff:cc:e7:4e:bc:65:87:0c:df:11:04:64:b7:40: c3:5c:bb:13:f3:a7:92:a2:d1:dc:a6:4b:98:94:4d: 76:7b:65:f0:3b:db:b8:56:4b:73:44:05:01:fb:72: 80:6e:89:03:95:1c:cf:ae:47:94:ae:20:0a:ae:73: a7:74:4b:16:69:ea:5b:62:0c:84:eb:cc:30:47:2d: b4:ab:ed:d9:ff:8a:28:c6:71:03:62:c1:02:7f:95: 40:1b:6f:7d:e9:28:53:18:7a:c1:4b:23:f7:14:f0: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.217.8.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49717 51002 203877 Signature Algorithm: sha256WithRSAEncryption 11:e5:b4:47:30:e4:34:56:5b:76:7a:bf:5c:f5:1b:7b:12:5b: b7:d4:11:9b:12:35:09:25:45:a1:ee:3e:79:e8:74:4f:77:01: 64:c0:72:9b:c0:59:f6:2a:9c:fd:d9:83:09:88:dd:e1:37:00: 28:5a:27:2b:2d:0b:36:27:02:75:a4:b0:68:7a:3e:65:c0:de: 17:05:fc:d2:3e:f6:40:b7:6f:c0:93:ec:06:69:45:13:09:39: 1d:47:39:92:4f:05:58:6a:ae:30:bc:a6:a3:37:2b:8d:c9:90: 80:a0:cd:43:69:09:10:b7:c9:dd:ce:c9:4e:3d:20:e8:1d:03: a8:27:aa:ab:ce:1b:78:28:59:9f:d7:c2:ee:e4:24:45:e4:fa: ce:ad:ca:ce:32:f7:19:15:57:a8:3a:8a:07:0a:67:3f:99:94: d2:38:36:83:05:24:b1:06:b1:77:9a:bb:85:27:f1:a1:30:16: 98:f1:6b:26:2f:be:47:56:b2:da:36:55:bc:89:43:04:78:a3: 4a:5a:40:24:ac:64:49:a3:94:bc:cc:f5:89:8a:84:4a:ee:87: 50:b3:9a:5c:ab:b0:92:c0:f9:c1:ab:06:b7:f1:e0:80:b4:05: f7:42:21:40:cc:54:6f:7e:1d:29:72:7c:f9:97:13:fd:5b:d1: a2:c4:97:e6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt7NeSMRe05F+laVQ6geo8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGQ5MjA3OTk0YmE5YzdkOTFlYTdlNDc5ZmVmZDFiODA5OWY2MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T5Jft9YMsWqWqWv/VZBhyfEFaOA xvtWuv1SV8MeBxiUwjoxwQmKhUcsdcsQ52pKeEuXbgz+/Hurzqu+fE6hnUNBfjtf 1WBKeN015PAXs9NrdKJZaEF3S2TGjl0y0xX90++f6f/ADTjqs9PzaYmoM3kSI6+l L3BjfNLrpv+2bJjSORFPNPD4a1DOdCTiquxaK9nY4B7v/8znTrxlhwzfEQRkt0DD XLsT86eSotHcpkuYlE12e2XwO9u4VktzRAUB+3KAbokDlRzPrkeUriAKrnOndEsW aepbYgyE68wwRy20q+3Z/4ooxnEDYsECf5VAG2996ShTGHrBSyP3FPCiLwIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFK3ZIHmUupx9kep+R5/v0bgJn2LOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzQ3YTlj OS1kNDU3LTQ1NzktYjJiMC1lNTIxMjU3NGY5ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNDdhOWM5 LWQ0NTctNDU3OS1iMmIwLWU1MjEyNTc0ZjllYy8xL3Jka2dlWlM2bkgyUjZuNUhu LV9SdUFtZllzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDstkIMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8C AwDCNQIDAMc6AgMDHGUwDQYJKoZIhvcNAQELBQADggEBABHltEcw5DRWW3Z6v1z1 G3sSW7fUEZsSNQklRaHuPnnodE93AWTAcpvAWfYqnP3ZgwmI3eE3AChaJystCzYn AnWksGh6PmXA3hcF/NI+9kC3b8CT7AZpRRMJOR1HOZJPBVhqrjC8pqM3K43JkICg zUNpCRC3yd3OyU49IOgdA6gnqqvOG3goWZ/Xwu7kJEXk+s6tys4y9xkVV6g6igcK Zz+ZlNI4NoMFJLEGsXeau4Un8aEwFpjxayYvvkdWsto2VbyJQwR4o0paQCSsZEmj lLzM9YmKhEruh1CzmlyrsJLA+cGrBrfx4IC0BfdCIUDMVG9+HSlyfPmXE/1b0aLE l+Y= -----END CERTIFICATE-----Generated at Tue Feb 10 05:54:31 2026 by rpki-client