This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer File: dNYxjajSNXnE9zi26OVcxf8n5bE.cer (raw, json) Hash identifier: pO+VjY9UmUXETHXuV7zaE3KYvO8jnO+qwog3awp9xvM= Subject key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED4AC7FA7CE5DDB095299FD148AAAB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50119 IP: 176.126.124.0/24 IP: 2a12:380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4a:c7:fa:7c:e5:dd:b0:95:29:9f:d1:48:aa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:8c:56:06:a0:0d:1f:b1:2d:73:32:2f:4c: 7b:46:39:86:11:dc:a9:86:cc:13:c7:7b:4e:b0:54: 76:a9:c6:47:18:a3:29:1c:05:3b:40:0c:f1:0b:d9: 46:e1:5d:e4:46:b9:c0:75:33:d7:ef:62:fe:d8:c4: 2b:2d:9c:59:0c:03:4d:3c:5c:b9:8f:f6:42:65:9b: 27:2b:e8:33:b0:8b:3e:b2:19:3e:9c:66:82:c3:2c: b6:43:af:9d:80:37:fc:9c:2a:c5:06:ed:7f:0d:a3: 69:60:39:29:49:b1:f1:17:95:ac:be:56:f1:45:99: 3b:67:70:4d:ca:ae:e8:4d:40:ab:bc:6d:e1:42:5c: 18:34:96:61:ec:ac:00:bf:d2:1b:69:83:e2:70:5f: 2b:6a:ce:e7:a0:41:5a:99:f1:7e:f8:df:e1:4f:32: 7f:82:c5:3c:33:20:1c:7b:a8:7a:66:cd:96:fa:56: 7f:1b:7e:20:72:03:cf:48:d0:08:fd:00:0e:20:94: 8b:f4:96:44:a1:8d:a7:79:26:0f:63:4f:3a:5e:19: e4:fc:47:65:7f:94:1d:4c:73:19:87:0f:b2:69:6d: 1f:29:33:45:75:8b:f1:ce:8f:2a:62:d3:d5:91:83: 6f:41:fb:2d:23:1d:30:57:d9:d6:d6:47:f8:99:59: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.124.0/24 IPv6: 2a12:380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50119 Signature Algorithm: sha256WithRSAEncryption 9f:4e:92:3e:d8:93:62:e8:8f:c8:3f:41:ee:9c:da:e9:44:12: 8b:72:a3:d0:d8:50:b6:fd:0c:5d:8b:f2:31:9b:5f:06:db:4d: 14:61:de:a9:3f:6d:1b:d2:d8:6b:99:68:26:2b:64:20:ee:2c: f2:97:5f:cb:24:f8:25:fd:b9:6c:32:fe:64:41:51:ee:9d:eb: 4c:b7:9e:93:25:a7:5f:aa:47:20:d9:f6:1e:51:1d:d4:48:3f: cf:75:e3:f0:b7:1b:da:00:72:ff:88:cf:ba:9a:d6:55:17:ba: 02:a3:fc:dd:5f:47:66:05:3d:fb:ec:65:2c:d6:30:76:5e:2f: 97:d5:dd:f8:cc:53:8b:38:1d:8d:03:73:30:40:c4:46:02:66: ce:f9:7a:70:04:6c:11:0f:61:e5:60:0c:55:5f:5f:c5:a5:75: bd:05:67:2c:ee:f4:9e:7b:48:a2:d6:4a:f4:5b:ea:8b:10:2e: bb:2e:de:c5:4c:11:29:6e:9f:70:31:0b:77:00:4c:50:ab:76: c2:1a:ce:5b:c4:7d:e1:2d:79:2d:82:49:5f:76:93:bf:f3:4f: fc:81:93:90:0c:e2:26:e5:b8:66:1d:10:04:b9:b6:2c:ba:86: fb:24:51:71:5d:fb:bb:91:89:37:01:5b:b2:9c:37:a8:0b:c3: 5b:e8:3a:cb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57UrH+nzl3bCVKZ/RSKqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQ2MzE4ZGE4ZDIzNTc5YzRmNzM4YjZlOGU1NWNjNWZmMjdlNWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hKMVgagDR+xLXMyL0x7RjmGEdyp hswTx3tOsFR2qcZHGKMpHAU7QAzxC9lG4V3kRrnAdTPX72L+2MQrLZxZDANNPFy5 j/ZCZZsnK+gzsIs+shk+nGaCwyy2Q6+dgDf8nCrFBu1/DaNpYDkpSbHxF5Wsvlbx RZk7Z3BNyq7oTUCrvG3hQlwYNJZh7KwAv9IbaYPicF8ras7noEFamfF++N/hTzJ/ gsU8MyAce6h6Zs2W+lZ/G34gcgPPSNAI/QAOIJSL9JZEoY2neSYPY086Xhnk/Edl f5QdTHMZhw+yaW0fKTNFdYvxzo8qYtPVkYNvQfstIx0wV9nW1kf4mVmC7wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHTWMY2o0jV5xPc4tujlXMX/J+WxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2VmNTRk Yi1hNTY1LTQzNTQtODk5YS0wODNhYTE4YTc2MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZWY1NGRi LWE1NjUtNDM1NC04OTlhLTA4M2FhMThhNzYyOS8xL2ROWXhqYWpTTlhuRTl6aTI2 T1ZjeGY4bjViRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAsH58MA0EAgACMAcDBQMqEgOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDDxzANBgkqhkiG9w0BAQsFAAOCAQEAn06SPtiTYuiP yD9B7pza6UQSi3Kj0NhQtv0MXYvyMZtfBttNFGHeqT9tG9LYa5loJitkIO4s8pdf yyT4Jf25bDL+ZEFR7p3rTLeekyWnX6pHINn2HlEd1Eg/z3Xj8Lcb2gBy/4jPuprW VRe6AqP83V9HZgU9++xlLNYwdl4vl9Xd+MxTizgdjQNzMEDERgJmzvl6cARsEQ9h 5WAMVV9fxaV1vQVnLO70nntIotZK9FvqixAuuy7exUwRKW6fcDELdwBMUKt2whrO W8R94S15LYJJX3aTv/NP/IGTkAziJuW4Zh0QBLm2LLqG+yRRcV37u5GJNwFbspw3 qAvDW+g6yw== -----END CERTIFICATE-----Generated at Tue Jan 13 03:38:03 2026 by rpki-client