This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer File: duK6XMFQs1PL00ufBF6gUJdAhE0.cer (raw, json) Hash identifier: h3eDsszauEtmCUAp+rR9aOWM02tN/hnqAhjPTpLHU/8= Subject key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8335B51EFEDD88A352038B8C034DB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.211.120.0/22 IP: 2a0b:6540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:35:b5:1e:fe:dd:88:a3:52:03:8b:8c:03:4d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:35:49:e3:29:8e:b9:cf:35:8d:e4:68:59: de:46:08:e1:b3:f8:50:83:0f:13:f7:7c:7a:66:72: 7a:8f:c0:ea:d9:62:fc:3a:bd:b6:d7:2e:7d:36:28: ff:9b:45:5d:b4:80:51:77:4a:7e:c4:96:cd:0f:6a: c2:0c:3d:6f:58:ce:0f:a0:37:17:3b:b1:ca:44:89: d8:0e:f7:68:af:1b:1f:6c:fb:15:50:0b:f3:57:1e: af:12:98:04:78:f1:df:63:5c:05:16:67:2c:0c:93: 8d:8b:66:0f:73:78:94:f5:74:74:7c:cd:f8:43:8e: 50:5e:8c:74:ef:c2:01:f9:f3:9f:64:5a:46:2d:d1: 6c:40:42:bf:0a:f9:82:ec:1b:f7:3d:85:f8:71:5d: 25:f5:9e:b5:b1:6a:b1:3c:bf:64:d4:d4:1d:5b:f9: 83:1a:7f:55:c6:e4:84:74:2e:36:d1:aa:d6:ba:97: 44:a8:1c:72:53:b5:1d:ea:6b:d4:a7:35:b3:5f:c1: a1:ba:50:cc:a4:74:85:a4:c2:c0:be:6b:39:c0:aa: 7b:7b:44:40:f8:25:f1:22:38:c6:f5:ee:56:49:db: d3:43:d4:f8:03:ad:4c:dc:85:d6:d4:ce:bf:90:72: 83:09:dc:ba:49:33:f3:d0:4d:9f:2f:2d:3c:5a:52: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.120.0/22 IPv6: 2a0b:6540::/29 Signature Algorithm: sha256WithRSAEncryption 8e:f2:20:58:47:21:35:44:98:bd:da:c2:94:5f:55:66:3e:b9: 3c:e1:bf:ce:a7:00:f2:21:35:81:fd:ab:6b:2f:f3:44:40:d7: ee:da:50:d9:e2:7c:48:c2:7a:97:90:78:f8:8e:1b:da:8f:51: c3:70:53:a8:41:55:3d:e2:84:d9:74:e0:cc:0c:6e:f9:fb:dd: cd:96:5d:8c:85:10:3c:bc:bf:3a:12:ca:fc:79:66:36:56:10: 76:e0:70:91:1b:67:81:2d:ba:f3:8f:e8:74:c2:7c:2f:ae:f6: 93:73:dd:71:25:4a:ce:84:8d:fc:04:89:eb:3b:05:d2:24:78: 17:54:26:0c:fb:c8:e0:ef:71:7c:eb:56:a4:64:72:f5:d9:64: 6b:89:12:ce:39:c9:98:35:53:b4:4d:56:26:87:df:66:09:b8: 4d:a0:f2:ba:c8:db:6f:b4:cd:8b:64:99:fc:50:18:5f:5f:59: c0:54:51:0e:5d:29:6b:57:ee:41:e4:af:35:76:49:9c:fc:6f: f3:8c:80:26:31:4e:df:61:9a:36:c2:bc:91:23:a4:59:ee:c7: f8:2d:05:d1:31:1f:ef:ed:93:b9:41:f4:d4:69:07:a9:a6:b5: ff:18:cd:82:d4:bb:f1:fb:05:b3:57:a8:ca:78:3a:bb:8a:a3: 41:81:56:4a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/gzW1Hv7diKNSA4uMA022MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmUyYmE1Y2MxNTBiMzUzY2JkMzRiOWYwNDVlYTA1MDk3NDA4NDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqU1SeMpjrnPNY3kaFneRgjhs/hQ gw8T93x6ZnJ6j8Dq2WL8Or221y59Nij/m0VdtIBRd0p+xJbND2rCDD1vWM4PoDcX O7HKRInYDvdorxsfbPsVUAvzVx6vEpgEePHfY1wFFmcsDJONi2YPc3iU9XR0fM34 Q45QXox078IB+fOfZFpGLdFsQEK/CvmC7Bv3PYX4cV0l9Z61sWqxPL9k1NQdW/mD Gn9VxuSEdC420arWupdEqBxyU7Ud6mvUpzWzX8GhulDMpHSFpMLAvms5wKp7e0RA +CXxIjjG9e5WSdvTQ9T4A61M3IXW1M6/kHKDCdy6STPz0E2fLy08WlLZ7QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHbiulzBULNTy9NLnwReoFCXQIRNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzMxZDJl ZC04ZTJmLTRmYTktODNjYS03MDQwNWUzNTI4YWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvMzFkMmVk LThlMmYtNGZhOS04M2NhLTcwNDA1ZTM1MjhhZi8xL2R1SzZYTUZRczFQTDAwdWZC RjZnVUpkQWhFMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudN4MA0EAgACMAcDBQMqC2VAMA0GCSqGSIb3 DQEBCwUAA4IBAQCO8iBYRyE1RJi92sKUX1VmPrk84b/OpwDyITWB/atrL/NEQNfu 2lDZ4nxIwnqXkHj4jhvaj1HDcFOoQVU94oTZdODMDG75+93Nll2MhRA8vL86Esr8 eWY2VhB24HCRG2eBLbrzj+h0wnwvrvaTc91xJUrOhI38BInrOwXSJHgXVCYM+8jg 73F861akZHL12WRriRLOOcmYNVO0TVYmh99mCbhNoPK6yNtvtM2LZJn8UBhfX1nA VFEOXSlrV+5B5K81dkmc/G/zjIAmMU7fYZo2wryRI6RZ7sf4LQXRMR/v7ZO5QfTU aQepprX/GM2C1Lvx+wWzV6jKeDq7iqNBgVZK -----END CERTIFICATE-----Generated at Sun Jan 11 22:31:30 2026 by rpki-client