This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer File: dggs9uV3xDJnGZEkoogbNzLO9AQ.cer (raw, json) Hash identifier: c8G20AXI/tsosGy2+/ocl14rUHHFajM/kXzE3PL6O18= Subject key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910382CE490F44F992330F3634C5113 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60559 IP: 185.29.160.0/22 IP: 2a00:a720::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:38:2c:e4:90:f4:4f:99:23:30:f3:63:4c:51:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76082cf6e577c43267199124a2881b3732cef404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:09:75:78:dd:b3:c5:f9:bc:24:14:6c:8b: 2a:2f:a7:4b:3a:a5:81:52:6d:d1:02:03:e8:80:9d: 49:29:b7:40:22:6f:23:8d:1c:e2:7e:35:9f:0d:7e: 08:06:52:9e:cb:9d:66:1b:3c:24:2f:43:e0:98:67: df:81:3a:eb:85:28:ce:22:04:94:16:7b:e2:37:60: 21:ac:88:ad:58:6d:c8:3d:a1:62:9e:16:4f:ee:84: 40:23:7b:60:b8:15:46:b3:65:bc:97:cc:52:62:50: 31:8c:db:08:90:c5:ea:a0:e0:b3:77:8f:42:14:5a: 7e:ca:49:10:ef:d1:60:d8:f8:89:58:15:4c:03:a9: 74:81:57:e0:24:21:e5:cb:9c:9e:e0:68:2f:99:a7: d5:0c:a4:64:a2:3f:9c:4e:40:97:82:c1:9a:95:e7: 6d:87:71:6a:00:9e:a3:da:c7:16:d1:82:f0:30:4e: 09:66:08:92:9f:d9:bb:67:4c:d0:ab:80:8f:70:31: 63:33:34:50:ec:87:a1:8b:05:12:ed:b1:42:57:e8: 38:a8:6d:c7:88:71:c9:c7:ad:8a:41:84:7c:6d:f2: d7:8a:54:98:f5:fb:f7:8f:8a:c2:58:16:62:14:bd: 98:9b:5b:10:95:e0:8a:6f:dc:ea:8a:75:8e:dd:c2: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.160.0/22 IPv6: 2a00:a720::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60559 Signature Algorithm: sha256WithRSAEncryption 4e:d9:a9:da:86:75:b8:8d:1f:3c:a7:44:7e:06:1f:ed:e5:df: a8:47:74:5b:8b:e9:7b:27:9f:1c:e8:7f:ca:35:e6:17:04:55: 9a:ee:a1:27:ea:5d:28:ae:9b:18:5d:e4:9f:06:c3:fa:b4:44: 38:6e:59:a5:41:e6:14:56:34:56:b6:ab:8c:7d:f8:3f:7e:47: 5e:71:39:92:8c:69:14:d6:2d:c5:e6:0b:5c:51:98:92:52:61: 78:2b:c8:c2:f8:97:7f:31:e8:b0:33:aa:dc:26:d8:8b:1b:20: 10:05:a1:b8:50:b3:a3:56:cb:63:4a:44:02:c4:0f:c4:9a:77: db:5e:4b:92:04:87:a3:59:29:bc:8f:34:d1:2d:9a:80:ab:7c: e1:df:d1:32:97:1c:e7:4c:76:64:23:2b:59:34:b9:03:94:16: da:a3:64:fa:4c:0b:2f:bb:4b:10:98:35:c2:6a:49:a6:41:31: 06:09:31:36:29:57:ae:cc:9a:57:a3:eb:e4:fb:f5:60:e8:82: 82:d2:4f:62:24:f5:28:cc:fe:e0:8b:b8:9f:bb:a2:db:a1:bd: fa:54:c4:0b:1e:a5:dd:17:4b:cf:38:50:c0:a3:ea:cd:c7:28: 20:a0:a0:e6:8d:84:2a:f0:d7:d3:2e:a0:98:40:e9:70:7c:88: 75:0d:09:76 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EDgs5JD0T5kjMPNjTFETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjA4MmNmNmU1NzdjNDMyNjcxOTkxMjRhMjg4MWIzNzMyY2VmNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRcJdXjds8X5vCQUbIsqL6dLOqWB Um3RAgPogJ1JKbdAIm8jjRzifjWfDX4IBlKey51mGzwkL0PgmGffgTrrhSjOIgSU FnviN2AhrIitWG3IPaFinhZP7oRAI3tguBVGs2W8l8xSYlAxjNsIkMXqoOCzd49C FFp+ykkQ79Fg2PiJWBVMA6l0gVfgJCHly5ye4GgvmafVDKRkoj+cTkCXgsGaledt h3FqAJ6j2scW0YLwME4JZgiSn9m7Z0zQq4CPcDFjMzRQ7IehiwUS7bFCV+g4qG3H iHHJx62KQYR8bfLXilSY9fv3j4rCWBZiFL2Ym1sQleCKb9zqinWO3cKw6QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHYILPbld8QyZxmRJKKIGzcyzvQEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzdmN2Uz ZS1jMDIyLTQ3MzktYjkzOS1kNWQ0ZjA3MjA1ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvN2Y3ZTNl LWMwMjItNDczOS1iOTM5LWQ1ZDRmMDcyMDVmOC8xL2RnZ3M5dVYzeERKbkdaRWtv b2diTnpMTzlBUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuR2gMA0EAgACMAcDBQAqAKcgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsjzANBgkqhkiG9w0BAQsFAAOCAQEATtmp2oZ1uI0f PKdEfgYf7eXfqEd0W4vpeyefHOh/yjXmFwRVmu6hJ+pdKK6bGF3knwbD+rREOG5Z pUHmFFY0VrarjH34P35HXnE5koxpFNYtxeYLXFGYklJheCvIwviXfzHosDOq3CbY ixsgEAWhuFCzo1bLY0pEAsQPxJp3215LkgSHo1kpvI800S2agKt84d/RMpcc50x2 ZCMrWTS5A5QW2qNk+kwLL7tLEJg1wmpJpkExBgkxNilXrsyaV6Pr5Pv1YOiCgtJP YiT1KMz+4Iu4n7ui26G9+lTECx6l3RdLzzhQwKPqzccoIKCg5o2EKvDX0y6gmEDp cHyIdQ0Jdg== -----END CERTIFICATE-----Generated at Mon Jan 12 14:26:12 2026 by rpki-client