This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer (raw, json) Hash identifier: u5rPunCvGn9l+aDikRbIwk4BsIsdApnmeeMut6fMRLI= Subject key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C721C726DD6A0E44CF13E76F70DAB8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56743 IP: 91.223.179.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:21:c7:26:dd:6a:0e:44:cf:13:e7:6f:70:da:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=769a0ed13591d4b84ca79a8eb577226076651a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:e4:ed:d4:af:ac:05:e5:a1:8e:05:89:b5: af:1f:5d:10:40:55:c8:31:5b:b5:6b:55:93:50:d0: 97:2b:53:81:38:3e:de:bb:4d:7d:30:ec:6b:c2:81: 97:7a:23:ac:82:df:36:fd:07:15:01:2e:da:03:29: a0:c2:1b:73:53:cf:e4:a2:61:15:fe:3b:37:12:51: 48:12:a1:86:65:13:3f:71:28:5d:49:22:1c:a0:0c: 8e:57:9d:33:6d:59:89:39:86:70:91:50:37:53:af: a0:02:6b:e7:41:44:6c:df:4a:8a:5a:c8:b2:c0:85: 7f:85:82:83:16:57:aa:91:da:3e:9e:96:33:30:67: 80:2f:c2:f8:88:b0:a5:72:57:e7:0f:7c:be:b2:28: 7e:c5:4b:e7:73:28:35:60:b1:d3:cc:0a:c4:12:e2: b9:cb:1d:70:e8:c4:2a:d9:c7:d6:f0:9d:90:78:fa: 04:7c:07:96:66:a7:2e:4d:f0:58:bb:9b:95:90:1e: d3:9d:cd:7b:03:4e:f9:43:a7:ff:ee:c0:ca:6c:43: 72:7f:49:5c:3e:38:20:61:ea:99:a9:96:fc:14:2b: 00:b4:de:f5:22:1d:2b:30:c5:fb:0c:4c:d0:c5:c9: dd:11:16:6e:14:52:45:84:b7:a4:19:7b:83:ae:62: dd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.179.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56743 Signature Algorithm: sha256WithRSAEncryption 00:fb:ce:7c:98:32:df:07:06:48:01:0e:a7:8f:9f:17:b6:9c: a7:64:63:c5:1e:5f:68:73:5f:34:4e:32:fb:2e:ee:81:22:6d: 7d:34:e6:20:31:24:d3:7b:25:8e:e2:2b:6c:89:0d:81:cb:c9: 6b:2a:61:9d:ee:89:2f:50:fe:c3:cc:45:f8:27:a5:1d:64:e0: a4:a6:8e:2a:cd:26:3d:4e:11:91:02:c7:dc:8c:2d:a8:37:b0: d5:49:18:49:48:e4:2e:77:c1:90:fa:54:8b:4b:6d:da:5f:c0: 54:c4:de:3b:92:23:cb:48:6b:72:a1:27:a0:4c:0b:41:2d:ff: 55:e7:80:2c:63:5d:f5:0e:8b:ad:e1:5d:2a:9c:5c:57:8d:be: 92:f4:bd:33:ec:e9:0e:1d:aa:55:a7:93:45:cb:f1:3e:ae:fc: b8:b8:51:fb:ad:5e:67:f6:c2:b4:40:1d:22:77:08:13:3e:2b: 08:c7:8c:eb:a9:db:fc:19:8c:89:75:9a:37:9b:36:a8:08:37: 8e:6c:9b:b6:17:49:86:ba:92:96:3e:2f:b8:b9:d1:33:c9:2a: 7c:3a:bc:1e:ed:c8:0e:05:ea:5e:ed:08:1d:92:78:59:80:3e: b9:dd:b1:13:b3:b5:df:b4:5f:0d:7a:b9:35:21:32:2b:03:e3: 31:7b:57:2c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xyHHJt1qDkTPE+dvcNq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjlhMGVkMTM1OTFkNGI4NGNhNzlhOGViNTc3MjI2MDc2NjUxYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/jk7dSvrAXloY4FibWvH10QQFXI MVu1a1WTUNCXK1OBOD7eu019MOxrwoGXeiOsgt82/QcVAS7aAymgwhtzU8/komEV /js3ElFIEqGGZRM/cShdSSIcoAyOV50zbVmJOYZwkVA3U6+gAmvnQURs30qKWsiy wIV/hYKDFleqkdo+npYzMGeAL8L4iLClclfnD3y+sih+xUvncyg1YLHTzArEEuK5 yx1w6MQq2cfW8J2QePoEfAeWZqcuTfBYu5uVkB7Tnc17A075Q6f/7sDKbENyf0lc PjggYeqZqZb8FCsAtN71Ih0rMMX7DEzQxcndERZuFFJFhLekGXuDrmLdqQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHaaDtE1kdS4TKeajrV3ImB2ZRoUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2LzY4YzAw OC02OWQzLTQzNmYtYWQzMy0yZGJlNzg1NDIyZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvNjhjMDA4 LTY5ZDMtNDM2Zi1hZDMzLTJkYmU3ODU0MjJmOC8xL2Rwb08wVFdSMUxoTXA1cU90 WGNpWUhabEdoUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9+zMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdpzANBgkqhkiG9w0BAQsFAAOCAQEAAPvOfJgy3wcGSAEOp4+fF7acp2RjxR5f aHNfNE4y+y7ugSJtfTTmIDEk03sljuIrbIkNgcvJayphne6JL1D+w8xF+CelHWTg pKaOKs0mPU4RkQLH3IwtqDew1UkYSUjkLnfBkPpUi0tt2l/AVMTeO5Ijy0hrcqEn oEwLQS3/VeeALGNd9Q6LreFdKpxcV42+kvS9M+zpDh2qVaeTRcvxPq78uLhR+61e Z/bCtEAdIncIEz4rCMeM66nb/BmMiXWaN5s2qAg3jmybthdJhrqSlj4vuLnRM8kq fDq8Hu3IDgXqXu0IHZJ4WYA+ud2xE7O137RfDXq5NSEyKwPjMXtXLA== -----END CERTIFICATE-----Generated at Thu Jan 1 14:09:59 2026 by rpki-client