This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer File: dvMR7xWBoA5DfNcEtigayGIa_FY.cer (raw, json) Hash identifier: 3+5FH9cB+CAPHi96eafwM1KEm+ByquTeYnqixKhk51M= Subject key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82216E13CD1132622C96920027D3CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8361 IP: 185.38.20.0/22 IP: 194.2.155.0/24 IP: 194.169.249.0/24 IP: 195.22.144.0/23 IP: 212.104.192.0/20 IP: 2a04:7140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:21:6e:13:cd:11:32:62:2c:96:92:00:27:d3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76f311ef1581a00e437cd704b6281ac8621afc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:96:0c:bc:5b:91:85:72:f4:75:51:66:03: 29:e7:ec:ef:4a:8b:43:f7:e9:77:4f:38:db:01:4c: cd:ed:06:70:ef:03:10:8e:ca:5e:75:c6:5e:bd:88: 2b:fc:f6:80:24:b0:f9:a9:63:84:55:8a:eb:d8:97: 99:19:44:45:aa:b0:6a:f1:3f:9f:b9:9a:56:15:c5: 54:4a:aa:1e:15:3d:eb:41:9e:4f:46:30:b5:92:41: 69:f2:14:8b:aa:f2:76:5f:e9:3c:40:00:82:02:6c: 19:a6:0d:37:95:78:e9:3c:b4:5e:dd:24:44:da:0b: 59:6c:af:c4:58:30:df:e7:c5:ee:ca:22:bd:ba:1e: 6a:8e:35:f3:65:59:7c:a4:23:0e:c2:04:36:88:c4: e2:6b:e3:28:df:24:d8:dc:3f:5a:d6:75:9c:0e:64: 81:aa:a2:88:e0:7f:17:65:81:bf:f1:8d:74:ad:59: de:04:f0:84:7c:03:8a:13:d1:36:0a:ea:5a:39:d1: f0:e9:84:c0:d5:a9:b2:1a:81:e6:ce:94:61:62:20: d2:57:26:6b:28:49:b4:a4:a3:d2:7a:d7:b0:68:21: 10:05:70:12:db:24:36:33:ff:c5:4a:59:62:64:c2: b8:0b:b1:da:ad:7b:e4:9e:61:d0:be:64:59:93:5e: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.20.0/22 194.2.155.0/24 194.169.249.0/24 195.22.144.0/23 212.104.192.0/20 IPv6: 2a04:7140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8361 Signature Algorithm: sha256WithRSAEncryption a8:42:a3:0a:6e:3a:d6:86:69:b5:1a:b7:c4:8b:05:aa:45:0b: 58:41:2b:21:79:42:d3:97:cf:a4:bc:a9:46:d1:82:6c:42:fa: 4a:57:c5:2e:b3:f2:ed:91:4b:d5:f7:b9:d3:91:0d:b1:9a:8b: cb:26:3c:f1:73:cc:b8:56:5a:82:87:c2:a8:2a:a3:88:36:72: 65:2f:fe:5e:38:82:1f:c4:ad:4b:f9:11:56:c1:4b:3c:89:ad: 22:8b:31:82:74:f8:69:11:ba:9f:b4:9b:0d:a3:65:2c:a9:f1: 6e:06:1f:d1:19:75:56:57:2a:74:16:36:48:7d:11:f0:0c:67: 09:d8:c9:e9:31:93:6f:66:0e:61:cd:c8:87:9b:41:56:02:31: 4f:d6:1c:54:1c:8f:d4:b6:31:e3:74:41:a7:c9:83:d1:a7:1a: 3d:1b:7a:bf:64:3c:55:22:a6:fd:38:ea:6a:ad:25:58:59:a8: fa:12:30:8b:b0:08:0a:d6:ea:79:a7:1e:ac:e8:20:de:7d:f4: 09:f4:df:6d:5c:7f:bb:3a:93:c2:61:03:aa:08:da:1a:e1:d2: e2:c6:29:d8:db:6b:43:47:4e:69:59:eb:d0:4d:dc:e9:87:a4: 66:18:24:fb:7e:31:cc:55:9c:3a:7e:b5:e4:87:81:97:bc:2a: 22:72:d9:cb -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt/giFuE80RMmIslpIAJ9PPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmYzMTFlZjE1ODFhMDBlNDM3Y2Q3MDRiNjI4MWFjODYyMWFmYzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK+WDLxbkYVy9HVRZgMp5+zvSotD 9+l3TzjbAUzN7QZw7wMQjspedcZevYgr/PaAJLD5qWOEVYrr2JeZGURFqrBq8T+f uZpWFcVUSqoeFT3rQZ5PRjC1kkFp8hSLqvJ2X+k8QACCAmwZpg03lXjpPLRe3SRE 2gtZbK/EWDDf58XuyiK9uh5qjjXzZVl8pCMOwgQ2iMTia+Mo3yTY3D9a1nWcDmSB qqKI4H8XZYG/8Y10rVneBPCEfAOKE9E2CupaOdHw6YTA1amyGoHmzpRhYiDSVyZr KEm0pKPSetewaCEQBXAS2yQ2M//FSlliZMK4C7HarXvknmHQvmRZk14AcQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFHbzEe8VgaAOQ3zXBLYoGshiGvxWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzUyNTIy NC03OGVhLTQ5ZTQtOTc0OS0xNjk0MzEyOTZjNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvNTI1MjI0 LTc4ZWEtNDllNC05NzQ5LTE2OTQzMTI5NmM1OS8xL2R2TVI3eFdCb0E1RGZOY0V0 aWdheUdJYV9GWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCuSYUAwQAwgKbAwQAwqn5AwQBwxaQAwQE1GjA MA0EAgACMAcDBQMqBHFAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiCpMA0GCSqG SIb3DQEBCwUAA4IBAQCoQqMKbjrWhmm1GrfEiwWqRQtYQSsheULTl8+kvKlG0YJs QvpKV8Uus/LtkUvV97nTkQ2xmovLJjzxc8y4VlqCh8KoKqOINnJlL/5eOIIfxK1L +RFWwUs8ia0iizGCdPhpEbqftJsNo2UsqfFuBh/RGXVWVyp0FjZIfRHwDGcJ2Mnp MZNvZg5hzciHm0FWAjFP1hxUHI/UtjHjdEGnyYPRpxo9G3q/ZDxVIqb9OOpqrSVY Waj6EjCLsAgK1up5px6s6CDeffQJ9N9tXH+7OpPCYQOqCNoa4dLixinY22tDR05p WevQTdzph6RmGCT7fjHMVZw6frXkh4GXvCoictnL -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:08 2026 by rpki-client