This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer File: dODVhfGshfVEks_JXh3OD8L3lw8.cer (raw, json) Hash identifier: YuQ32/2VAfqjL1br6HMPg/yLIY+NOAEFsUSyyChGTK4= Subject key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC57366C1C5F801D86282D86A28205 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209080 IP: 185.239.112.0/22 IP: 2a0c:5680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:57:36:6c:1c:5f:80:1d:86:28:2d:86:a2:82:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:c3:5c:ad:a0:f3:7b:ea:7f:b0:14:8c:2d: 33:42:f6:d9:30:30:3f:3c:ac:b5:2d:a3:7f:93:9b: 19:5c:e7:eb:72:b9:f0:06:db:0c:a2:c3:2f:3d:ed: b5:df:31:a1:26:bb:ea:0d:2c:7b:f8:20:a8:5b:8f: 56:e3:80:3e:89:24:28:69:f4:92:3c:79:59:ed:bf: 89:91:01:e2:2f:43:67:89:ca:11:13:27:8c:67:e7: fc:f9:18:6e:76:61:bc:5d:f6:20:16:4a:af:4e:52: 3f:63:c1:0b:0e:e1:5f:36:36:20:c8:52:10:1f:05: 98:74:cd:72:e2:bb:cf:6a:69:26:7c:9c:9e:97:2d: 6a:54:5e:38:89:17:ea:ea:65:bc:fd:dd:e4:dc:4d: e9:d5:e2:c9:ad:29:c5:e8:4f:35:51:21:67:43:21: 6c:20:c7:22:76:1e:e3:e3:e9:3e:58:a2:29:7d:17: 5a:7b:82:f5:01:ad:92:b9:32:e8:cb:89:a5:da:47: 1a:e6:ab:a2:da:60:95:2c:1c:e1:a3:46:da:18:cb: f6:31:d7:81:69:49:5c:65:db:87:d4:1b:80:47:ae: 90:a3:83:c6:72:e7:d0:af:06:fd:ab:f8:6d:39:34: 9b:67:08:6d:45:81:50:e3:9c:6f:2d:1c:80:fc:72: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.112.0/22 IPv6: 2a0c:5680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209080 Signature Algorithm: sha256WithRSAEncryption 7a:b9:ad:60:0b:fc:99:08:43:79:f2:59:54:7c:ac:73:b7:85: 1a:59:e3:8c:f3:71:87:23:f9:df:9c:fd:88:bd:a2:a7:29:59: fc:05:fb:d4:8e:92:21:93:d1:76:5c:14:0d:64:f3:3e:c7:fd: 80:9f:93:42:91:4d:dd:85:23:79:90:b1:ae:b7:e7:10:ce:45: 1f:81:f2:84:ba:d2:33:df:a7:95:26:11:c5:98:97:7e:16:a5: 7b:ac:c7:23:d1:78:c5:a5:2c:dc:59:e8:63:8b:fc:9a:83:70: 20:3c:e5:3f:47:aa:06:47:1b:bd:0d:0c:a8:7f:c7:6c:d3:30: cc:a9:d7:85:dc:91:55:36:8b:39:20:34:26:c3:d2:54:9a:6b: 98:26:2e:e4:5b:ed:28:b8:55:9e:0a:f6:ed:e3:7e:af:5d:1d: 68:d7:80:cc:e4:c3:39:c0:10:33:f9:75:e1:19:e1:09:51:49: 87:e3:a3:76:0e:57:fa:27:31:aa:11:06:bd:2c:3d:0d:31:c2: eb:b9:2c:6f:ec:53:25:09:ea:7a:6a:7f:ed:83:3f:24:d3:b6: 29:d3:5b:39:ef:bf:c7:25:3d:a1:27:33:87:6c:47:d8:87:26: dd:4d:a4:27:ea:2b:89:8c:6d:7b:17:2e:de:8f:93:ff:bc:e9: b8:09:d9:29 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57Fc2bBxfgB2GKC2GooIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGUwZDU4NWYxYWM4NWY1NDQ5MmNmYzk1ZTFkY2UwZmMyZjc5NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kjDXK2g83vqf7AUjC0zQvbZMDA/ PKy1LaN/k5sZXOfrcrnwBtsMosMvPe213zGhJrvqDSx7+CCoW49W44A+iSQoafSS PHlZ7b+JkQHiL0NnicoREyeMZ+f8+RhudmG8XfYgFkqvTlI/Y8ELDuFfNjYgyFIQ HwWYdM1y4rvPamkmfJyely1qVF44iRfq6mW8/d3k3E3p1eLJrSnF6E81USFnQyFs IMcidh7j4+k+WKIpfRdae4L1Aa2SuTLoy4ml2kca5qui2mCVLBzho0baGMv2MdeB aUlcZduH1BuAR66Qo4PGcufQrwb9q/htOTSbZwhtRYFQ45xvLRyA/HJv3wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHTg1YXxrIX1RJLPyV4dzg/C95cPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2ZlMGJm Mi1mODM4LTQwOGItOTg0My02NTk4OTEwMjAyYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvZmUwYmYy LWY4MzgtNDA4Yi05ODQzLTY1OTg5MTAyMDJhMi8xL2RPRFZoZkdzaGZWRWtzX0pY aDNPRDhMM2x3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCue9wMA0EAgACMAcDBQMqDFaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwuDANBgkqhkiG9w0BAQsFAAOCAQEAermtYAv8mQhD efJZVHysc7eFGlnjjPNxhyP535z9iL2ipylZ/AX71I6SIZPRdlwUDWTzPsf9gJ+T QpFN3YUjeZCxrrfnEM5FH4HyhLrSM9+nlSYRxZiXfhale6zHI9F4xaUs3FnoY4v8 moNwIDzlP0eqBkcbvQ0MqH/HbNMwzKnXhdyRVTaLOSA0JsPSVJprmCYu5FvtKLhV ngr27eN+r10daNeAzOTDOcAQM/l14RnhCVFJh+Ojdg5X+icxqhEGvSw9DTHC67ks b+xTJQnqemp/7YM/JNO2KdNbOe+/xyU9oSczh2xH2Icm3U2kJ+oriYxtexcu3o+T /7zpuAnZKQ== -----END CERTIFICATE-----Generated at Mon Jan 12 16:39:34 2026 by rpki-client