This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer File: dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer (raw, json) Hash identifier: 1d9pZWdyjLdzhuP5JQx0o/rKx5AepOOV48os5QIMIvY= Subject key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E379AB44EB6897CA9D9B6BA008BEDDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214646 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9a:b4:4e:b6:89:7c:a9:d9:b6:ba:00:8b:ed:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:e4:cd:3c:34:75:7c:61:9d:22:4c:af:d9: 70:ee:c8:48:1e:26:fd:4b:f3:39:de:26:bf:7e:f7: 2b:60:f9:71:26:e7:0f:5a:11:ad:22:76:7f:61:d4: bb:d8:e6:70:de:dd:89:2b:6e:c7:6f:fb:76:46:a5: ae:ce:22:1e:11:51:c3:77:fe:37:fa:66:c7:f5:82: fc:ac:79:38:83:02:d6:39:97:7a:93:8c:9a:d6:f6: 69:43:1d:3d:15:ef:f2:62:2d:c3:b4:d7:46:29:68: f2:6e:37:0a:3f:8e:a5:4b:02:73:75:cf:af:59:ef: 57:f0:13:d3:4a:a8:7f:68:c3:f5:66:b3:71:44:cb: 56:b9:39:86:10:58:58:a4:11:4c:6a:44:0f:3d:9f: 08:85:2e:00:c8:c6:fe:f3:e1:a8:3a:e7:71:92:99: a3:51:bc:28:62:ce:b8:c0:8e:16:e5:62:92:50:3c: 3f:38:c5:1f:3b:4f:af:93:5d:17:3a:34:b7:ba:0a: c3:4b:9e:54:a7:56:1d:ad:89:fc:dc:9d:ea:91:10: 9e:d4:a0:81:b0:df:0d:89:6d:fc:d7:45:00:07:95: a1:cc:69:a5:6e:ae:dc:a0:b7:f3:66:67:c7:6e:53: 7d:18:f8:0b:2c:35:89:a9:c3:be:36:01:9f:a2:be: f2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214646 Signature Algorithm: sha256WithRSAEncryption af:e9:2a:d5:f0:d9:a0:dc:0e:1e:8c:ea:49:3c:72:84:ab:47: a7:34:10:18:98:9e:12:2a:72:8b:61:59:45:ce:6b:3b:87:85: 28:4c:9d:f3:d9:54:bc:00:1f:0d:3c:58:8c:43:d0:68:47:4b: a0:82:52:86:f2:42:07:21:7a:d2:f8:4d:c8:8f:f4:c7:32:97: 29:e2:bd:4b:87:96:15:9f:b3:fc:2a:0b:e4:18:49:b6:fe:9d: f0:9b:a7:6f:87:f6:78:2f:9d:b5:c7:9b:93:6d:51:3f:f3:aa: 5a:1d:6f:56:e9:2d:81:00:4b:7a:e0:39:99:8c:7b:13:3a:e8: ff:4b:65:48:d9:64:60:65:6b:fb:e7:e5:cf:a5:20:9b:2c:e8: 1a:23:c9:c5:ea:09:cc:59:b9:3c:ca:46:af:cf:15:d5:f0:cb: 94:0b:58:6c:6d:d5:9f:39:d9:fd:fd:7c:a2:38:d3:0a:58:62: fa:71:43:d3:f0:9b:8b:82:c3:37:e8:69:88:a6:e4:b9:51:88: 64:52:ee:04:40:4a:c0:50:71:dc:17:95:c8:fc:38:23:8f:3b: 87:b4:b5:27:f7:60:18:8f:34:77:db:5b:66:3a:77:65:5a:b2: 8e:71:f2:c8:c0:d5:51:44:10:77:cc:e2:49:36:4d:c1:f9:48: 15:69:f9:71 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+N5q0TraJfKnZtroAi+3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjA3ZjY5ZGVlNDNhYzAxZDdkZmVhY2E5Yjc2YTI0MGVhNmVmMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmrkzTw0dXxhnSJMr9lw7shIHib9 S/M53ia/fvcrYPlxJucPWhGtInZ/YdS72OZw3t2JK27Hb/t2RqWuziIeEVHDd/43 +mbH9YL8rHk4gwLWOZd6k4ya1vZpQx09Fe/yYi3DtNdGKWjybjcKP46lSwJzdc+v We9X8BPTSqh/aMP1ZrNxRMtWuTmGEFhYpBFMakQPPZ8IhS4AyMb+8+GoOudxkpmj UbwoYs64wI4W5WKSUDw/OMUfO0+vk10XOjS3ugrDS55Up1YdrYn83J3qkRCe1KCB sN8NiW3810UAB5WhzGmlbq7coLfzZmfHblN9GPgLLDWJqcO+NgGfor7y6wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHYH9p3uQ6wB19/qypt2okDqbvNmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzJjZGIz ZC1hYjQzLTQ1MjYtODM1Ny1jMDI0M2EzYmRhZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMmNkYjNk LWFiNDMtNDUyNi04MzU3LWMwMjQzYTNiZGFmYi8xL2RnZjJuZTVEckFIWDMtcktt M2FpUU9wdTgyWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNGdjANBgkqhkiG9w0BAQsFAAOCAQEAr+kq1fDZoNwO HozqSTxyhKtHpzQQGJieEipyi2FZRc5rO4eFKEyd89lUvAAfDTxYjEPQaEdLoIJS hvJCByF60vhNyI/0xzKXKeK9S4eWFZ+z/CoL5BhJtv6d8Junb4f2eC+dtcebk21R P/OqWh1vVuktgQBLeuA5mYx7Ezro/0tlSNlkYGVr++flz6UgmyzoGiPJxeoJzFm5 PMpGr88V1fDLlAtYbG3VnznZ/f18ojjTClhi+nFD0/Cbi4LDN+hpiKbkuVGIZFLu BEBKwFBx3BeVyPw4I487h7S1J/dgGI80d9tbZjp3ZVqyjnHyyMDVUUQQd8ziSTZN wflIFWn5cQ== -----END CERTIFICATE-----Generated at Mon Jan 12 01:46:57 2026 by rpki-client