This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer File: txDNRHGj-M3NhE0_NmFIlAlStOc.cer (raw, json) Hash identifier: 3OoVFABIwDy8m1pnY5XBw5XeYLZKvNO7tHoyuaqk5LM= Subject key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3606B7FAC76D33219C0B79270338DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.130.116.0/22 IP: 2a04:5440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:06:b7:fa:c7:6d:33:21:9c:0b:79:27:03:38:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:57:6a:42:55:ca:f4:e5:28:60:39:81:b3: 08:e9:0e:de:74:c4:a6:01:69:c0:57:ee:18:30:16: 29:62:c4:52:12:92:eb:fa:41:e2:72:81:5a:87:29: bb:07:75:a3:51:aa:2e:8f:7d:43:43:62:89:84:35: 6b:bd:20:db:33:b5:42:a1:52:55:8b:16:60:10:9d: 01:f4:63:04:03:2d:4a:d3:c9:03:8a:47:42:cf:f2: 96:b2:97:2a:12:1c:53:3b:5b:80:d8:ca:15:b2:18: 99:7f:78:31:72:5a:61:a3:51:b2:40:fd:39:28:1d: 85:c5:6e:69:41:d9:a5:91:e1:cb:4b:bb:59:70:92: 22:74:db:96:88:04:29:c0:a3:53:3a:0e:96:f8:dc: e8:0a:ef:59:22:a6:68:56:b7:b2:7d:75:48:3e:f7: 2b:5a:32:4d:12:47:6e:74:b2:7c:b8:eb:3b:88:d6: 4b:45:94:bc:01:3e:e0:b5:5e:12:f5:dd:29:9f:d2: 08:24:e0:36:34:39:50:67:f4:4a:8f:f6:fe:f3:1e: 32:1f:4e:68:f4:b5:ab:73:0d:6f:ab:85:75:f4:2b: cc:51:99:4a:1a:52:37:85:17:2f:15:5c:84:f1:42: 3a:e5:7b:7d:4f:ce:9c:49:3a:e6:f1:26:93:8c:e5: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.116.0/22 IPv6: 2a04:5440::/29 Signature Algorithm: sha256WithRSAEncryption 03:53:fc:c1:ef:ca:c5:36:ed:34:b9:be:cf:d2:8f:b6:6c:de: e7:47:b1:7f:06:d7:de:92:8c:86:ed:1c:fc:33:63:1f:5c:16: 6f:be:20:27:b3:50:56:5c:86:a4:32:3d:27:bb:37:d6:4c:0d: 37:ea:9d:24:4f:38:c1:0f:48:c7:ad:f0:53:ad:94:5f:af:84: c8:41:79:49:11:66:e6:56:60:6f:d3:04:13:c2:f0:45:72:ec: e9:ed:9f:7b:e4:33:b3:86:14:08:7b:f3:3c:56:70:2d:82:94: f2:89:c1:83:d3:9a:49:97:4a:40:14:a4:32:69:f3:f3:dc:89: 37:95:c3:1a:b0:3b:13:75:88:dd:f4:19:0d:c9:6f:1e:bc:ac: c0:c7:60:71:cc:a1:59:fa:2e:70:6f:cf:60:81:af:4c:22:5f: 19:96:8a:8f:44:1c:c2:b5:96:7e:05:f8:88:ae:fe:4b:98:d5: 24:bf:03:b4:8d:38:10:9b:6d:ea:04:ff:c8:10:5a:03:de:b2: 3a:0d:d8:73:4a:9f:a5:79:29:12:d5:9e:2d:e6:ef:fc:01:39: 1d:16:fd:56:a9:05:5b:34:a4:97:02:36:f9:b3:9e:e6:2e:8e: d8:91:53:55:13:51:f7:46:83:f0:1d:95:8a:25:51:35:4c:64: c6:74:a4:ce -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7Nga3+sdtMyGcC3knAzjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzEwY2Q0NDcxYTNmOGNkY2Q4NDRkM2YzNjYxNDg5NDA5NTJiNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJVXakJVyvTlKGA5gbMI6Q7edMSm AWnAV+4YMBYpYsRSEpLr+kHicoFahym7B3WjUaouj31DQ2KJhDVrvSDbM7VCoVJV ixZgEJ0B9GMEAy1K08kDikdCz/KWspcqEhxTO1uA2MoVshiZf3gxclpho1GyQP05 KB2FxW5pQdmlkeHLS7tZcJIidNuWiAQpwKNTOg6W+NzoCu9ZIqZoVreyfXVIPvcr WjJNEkdudLJ8uOs7iNZLRZS8AT7gtV4S9d0pn9IIJOA2NDlQZ/RKj/b+8x4yH05o 9LWrcw1vq4V19CvMUZlKGlI3hRcvFVyE8UI65Xt9T86cSTrm8SaTjOVCcQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLcQzURxo/jNzYRNPzZhSJQJUrTnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzUyNjhk ZC01NmVlLTRiOWEtODA1MC0yMzJmYmRhZjVjMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNTI2OGRk LTU2ZWUtNGI5YS04MDUwLTIzMmZiZGFmNWMxYS8xL3R4RE5SSEdqLU0zTmhFMF9O bUZJbEFsU3RPYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYJ0MA0EAgACMAcDBQMqBFRAMA0GCSqGSIb3 DQEBCwUAA4IBAQADU/zB78rFNu00ub7P0o+2bN7nR7F/BtfekoyG7Rz8M2MfXBZv viAns1BWXIakMj0nuzfWTA036p0kTzjBD0jHrfBTrZRfr4TIQXlJEWbmVmBv0wQT wvBFcuzp7Z975DOzhhQIe/M8VnAtgpTyicGD05pJl0pAFKQyafPz3Ik3lcMasDsT dYjd9BkNyW8evKzAx2BxzKFZ+i5wb89gga9MIl8ZloqPRBzCtZZ+BfiIrv5LmNUk vwO0jTgQm23qBP/IEFoD3rI6DdhzSp+leSkS1Z4t5u/8ATkdFv1WqQVbNKSXAjb5 s57mLo7YkVNVE1H3RoPwHZWKJVE1TGTGdKTO -----END CERTIFICATE-----Generated at Tue Jan 13 07:51:38 2026 by rpki-client