This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer File: dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer (raw, json) Hash identifier: Fazi8MxvYtj5u833zgEieeHwNuQ+Tqj54BPnRtic79E= Subject key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9B17596E2534C4B53D8473CA34F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202112 IP: 92.249.27.0/24 IP: 193.57.35.0/24 IP: 2a13:ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9b:17:59:6e:25:34:c4:b5:3d:84:73:ca:34:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:0e:7b:e4:31:ea:34:9d:19:56:38:85:a8: 1b:34:53:5d:77:ec:10:aa:8a:b0:43:a3:5d:99:f9: 8d:df:9b:8c:83:81:1b:df:42:42:7e:2c:57:a3:4e: 59:15:e0:e7:5f:ab:0f:0a:62:ab:e4:91:88:e0:84: 4f:ee:a1:37:0e:21:ef:21:15:a6:e4:37:57:74:33: 3e:2e:f4:dc:e7:ae:88:91:02:0f:2d:af:7a:13:c9: f7:7d:53:93:cf:8e:03:27:da:f6:3b:10:1c:f5:ac: bb:5b:3e:73:55:ba:33:5e:1a:37:dc:11:dd:36:a9: 78:be:b1:44:9c:c5:63:8b:8d:cf:ce:9b:0f:35:58: 82:de:da:cf:d5:81:e7:84:8e:e8:6c:27:9a:c7:42: 00:04:25:49:6c:45:4e:c0:1b:7a:b7:a9:62:8b:ea: b1:f6:7c:a3:50:6f:a2:79:f5:f3:23:37:27:b9:6b: 44:f0:5b:a5:6a:b7:8d:f6:60:26:0d:c2:55:12:49: a0:fe:1c:f1:c4:3c:cd:1f:5c:bb:e7:ac:1d:15:28: c8:39:61:ac:b8:2c:d1:63:4d:87:c2:09:1e:31:92: d9:ac:44:ed:63:3d:bf:9d:8c:ec:54:61:4e:cc:f8: 2d:02:87:b4:fc:98:75:4c:4f:d2:5c:53:77:af:eb: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.27.0/24 193.57.35.0/24 IPv6: 2a13:ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202112 Signature Algorithm: sha256WithRSAEncryption 54:4c:de:ea:00:f8:83:1b:7b:08:83:26:33:5e:5e:c7:b5:92: 68:f7:7a:2a:e6:9f:af:f8:0d:9b:1e:21:55:9d:a5:5b:96:fe: be:17:f1:e3:26:59:b5:a1:55:d6:63:54:99:4e:8e:b7:34:45: a8:ba:ff:11:08:ce:df:1f:32:5e:c5:10:12:98:e3:ce:6f:cf: 75:44:0d:23:11:a2:01:6c:63:ea:03:f7:54:fe:cf:28:a0:1a: 46:19:92:5a:4a:e7:5a:10:28:12:9f:33:8b:cb:c9:e1:29:3f: ed:4b:fe:ab:e4:04:ad:6b:3a:ee:65:44:80:3b:ce:e4:55:b9: d4:37:43:8a:33:dc:f6:f2:a7:d8:6f:c8:62:8c:20:2a:48:6b: 61:4f:b2:87:51:00:7a:ff:06:cd:ff:83:9b:65:87:92:1e:e8: a5:8c:f4:74:0b:c3:b4:a0:09:72:08:7c:c1:d8:ce:e7:0a:95: 3e:70:f5:8e:7a:de:36:ec:f4:76:95:11:86:37:05:49:10:14: a2:d5:7c:ff:03:7d:49:61:e7:b4:d7:d2:0e:b7:41:c3:d2:a2: 32:6d:a9:51:fe:da:c6:af:07:6c:53:d3:95:4b:47:17:41:6f: 5f:d9:4d:3b:62:3f:8d:77:99:0e:20:85:b0:d2:ae:ba:34:ae: e9:c6:1d:41 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt265sXWW4lNMS1PYRzyjTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjQxMzZjM2NkYmZkNWZiNjBjYWZkNGE5YjFkNDczYTNiNjcyNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk4Oe+Qx6jSdGVY4hagbNFNdd+wQ qoqwQ6NdmfmN35uMg4Eb30JCfixXo05ZFeDnX6sPCmKr5JGI4IRP7qE3DiHvIRWm 5DdXdDM+LvTc566IkQIPLa96E8n3fVOTz44DJ9r2OxAc9ay7Wz5zVbozXho33BHd Nql4vrFEnMVji43PzpsPNViC3trP1YHnhI7obCeax0IABCVJbEVOwBt6t6lii+qx 9nyjUG+iefXzIzcnuWtE8FulareN9mAmDcJVEkmg/hzxxDzNH1y756wdFSjIOWGs uCzRY02HwgkeMZLZrETtYz2/nYzsVGFOzPgtAoe0/Jh1TE/SXFN3r+upWQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHZBNsPNv9X7YMr9SpsdRzo7ZyY1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzUyNDZl Ni03MmM2LTRmNDctYTNhMy1lNGRmNWE4N2Q0ZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvNTI0NmU2 LTcyYzYtNGY0Ny1hM2EzLWU0ZGY1YTg3ZDRlZC8xL2RrRTJ3ODJfMWZ0Z3l2MUtt eDFIT2p0bkpqVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAXPkbAwQAwTkjMA0EAgACMAcDBQMqEw7AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVgDANBgkqhkiG9w0BAQsFAAOCAQEAVEze 6gD4gxt7CIMmM15ex7WSaPd6Kuafr/gNmx4hVZ2lW5b+vhfx4yZZtaFV1mNUmU6O tzRFqLr/EQjO3x8yXsUQEpjjzm/PdUQNIxGiAWxj6gP3VP7PKKAaRhmSWkrnWhAo Ep8zi8vJ4Sk/7Uv+q+QErWs67mVEgDvO5FW51DdDijPc9vKn2G/IYowgKkhrYU+y h1EAev8Gzf+Dm2WHkh7opYz0dAvDtKAJcgh8wdjO5wqVPnD1jnreNuz0dpURhjcF SRAUotV8/wN9SWHntNfSDrdBw9KiMm2pUf7axq8HbFPTlUtHF0FvX9lNO2I/jXeZ DiCFsNKuujSu6cYdQQ== -----END CERTIFICATE-----Generated at Mon Jan 12 10:49:31 2026 by rpki-client