This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer File: dEXd7t-9ctMT6e6MzuroQDzDQUY.cer (raw, json) Hash identifier: w2uuhp8Ghp8P8zX9plgFnoAbYUs8mCe/7uKbkYuEnH8= Subject key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF485B95A4C20944A9AA21CFAA68A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 83.151.192.0/22 IP: 88.202.208.0/22 IP: 88.212.156.0/22 IP: 185.8.132.0/22 IP: 2a03:3640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f4:85:b9:5a:4c:20:94:4a:9a:a2:1c:fa:a6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:33:bb:67:81:0d:0a:cc:18:e2:0c:d2:1e: c8:ef:fb:84:f5:9c:d2:6f:a6:82:57:50:3f:b4:69: 26:6e:0b:6b:b2:4f:ae:af:16:6b:a7:25:72:e6:31: 69:2c:db:f5:7c:60:c6:2b:3f:be:02:0c:99:65:cb: da:16:d8:04:f0:07:fa:72:2c:de:0c:0f:08:e5:c2: 06:de:db:39:f8:23:c3:86:5d:b6:a3:a6:42:08:92: 3e:49:b8:b5:9c:69:0f:8d:16:af:40:40:19:96:17: 4a:0c:54:89:1e:6d:cd:eb:db:aa:2c:5b:1e:3a:67: 87:7f:0f:7f:ea:74:c7:b1:c2:92:04:72:fb:24:07: 7f:7d:84:8a:6e:c6:5c:5d:cd:59:75:9f:3c:38:66: 70:80:5a:dd:95:d6:be:97:24:35:87:bb:77:37:f1: 00:03:da:04:e5:3a:e0:19:ef:bc:4c:c2:1d:d1:ad: 92:8f:5d:f0:c1:fd:30:15:d5:7f:e3:d4:1c:25:f7: 35:66:59:62:74:c9:c5:2c:25:7b:65:bc:c8:cf:1f: aa:9b:73:96:b1:24:7d:1c:0f:a7:c1:71:31:ad:2b: 99:31:8a:c0:e6:09:f4:c0:e4:ff:40:9d:13:93:66: 85:a7:ca:3d:b7:7e:5f:13:07:4c:c0:d4:8f:ef:d2: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.151.192.0/22 88.202.208.0/22 88.212.156.0/22 185.8.132.0/22 IPv6: 2a03:3640::/32 Signature Algorithm: sha256WithRSAEncryption 47:d9:aa:33:e3:a8:6c:ff:69:a5:56:a1:e9:30:ff:2e:42:5d: 0f:98:8e:a8:ff:d0:df:36:6c:0c:05:0a:5e:7b:42:57:92:13: b4:91:63:66:fc:c2:e1:90:af:8c:b8:42:50:df:ca:ab:95:1e: 10:17:96:8c:c2:17:c0:ba:dc:e3:9a:03:61:3a:d7:14:50:08: c2:b2:0d:b4:7d:38:24:93:01:52:77:cd:24:0e:71:09:cd:44: 87:18:56:0f:0f:42:fd:16:81:58:a7:29:e2:33:f9:e7:ce:63: 38:e7:72:de:ee:0b:9b:df:44:3a:ec:64:56:e1:7e:a3:ef:3b: e9:d9:95:09:21:d1:c0:ce:17:7e:9e:34:c9:f7:d5:23:e3:8a: 96:2e:87:ae:c5:66:1c:9c:08:bc:e8:ed:1b:7c:d0:53:89:1c: 44:b4:5d:53:48:bf:fc:c0:e1:25:f2:56:9b:ea:4d:b5:52:5e: df:ae:75:aa:02:af:71:6c:05:53:ff:61:57:74:b3:ee:bd:c5: 53:53:9f:37:dd:0c:16:4d:3d:8b:64:78:ed:76:f6:8d:8f:06: 08:eb:b4:6a:72:ea:43:79:aa:da:7c:64:1e:b5:67:06:0f:80: 3d:8c:d5:e6:e3:30:4a:10:74:cb:0d:41:c6:ba:15:97:2f:8a: 51:78:7f:84 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt26vSFuVpMIJRKmqIc+qaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQ1ZGRlZWRmYmQ3MmQzMTNlOWVlOGNjZWVhZTg0MDNjYzM0MTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHIzu2eBDQrMGOIM0h7I7/uE9ZzS b6aCV1A/tGkmbgtrsk+urxZrpyVy5jFpLNv1fGDGKz++AgyZZcvaFtgE8Af6cize DA8I5cIG3ts5+CPDhl22o6ZCCJI+Sbi1nGkPjRavQEAZlhdKDFSJHm3N69uqLFse OmeHfw9/6nTHscKSBHL7JAd/fYSKbsZcXc1ZdZ88OGZwgFrdlda+lyQ1h7t3N/EA A9oE5TrgGe+8TMId0a2Sj13wwf0wFdV/49QcJfc1ZllidMnFLCV7ZbzIzx+qm3OW sSR9HA+nwXExrSuZMYrA5gn0wOT/QJ0Tk2aFp8o9t35fEwdMwNSP79JpeQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFHRF3e7fvXLTE+nujM7q6EA8w0FGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2MxNzY1 Yi1lM2E1LTQxMGMtOWNkMy02Y2EzNDBmYTc0OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYzE3NjVi LWUzYTUtNDEwYy05Y2QzLTZjYTM0MGZhNzQ5My8xL2RFWGQ3dC05Y3RNVDZlNk16 dXJvUUR6RFFVWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCU5fAAwQCWMrQAwQCWNScAwQCuQiEMA0EAgAC MAcDBQAqAzZAMA0GCSqGSIb3DQEBCwUAA4IBAQBH2aoz46hs/2mlVqHpMP8uQl0P mI6o/9DfNmwMBQpee0JXkhO0kWNm/MLhkK+MuEJQ38qrlR4QF5aMwhfAutzjmgNh OtcUUAjCsg20fTgkkwFSd80kDnEJzUSHGFYPD0L9FoFYpyniM/nnzmM453Le7gub 30Q67GRW4X6j7zvp2ZUJIdHAzhd+njTJ99Uj44qWLoeuxWYcnAi86O0bfNBTiRxE tF1TSL/8wOEl8lab6k21Ul7frnWqAq9xbAVT/2FXdLPuvcVTU5833QwWTT2LZHjt dvaNjwYI67RqcupDearafGQetWcGD4A9jNXm4zBKEHTLDUHGuhWXL4pReH+E -----END CERTIFICATE-----Generated at Thu Jan 1 05:44:44 2026 by rpki-client