This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.cer (raw, json) Hash identifier: SXloPLUApCk5NnbtAvdqGqDTdtWxmQI5gEWf87dsD9g= Subject key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1382B3C54DD2EAF8CB1666D66FB289 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198885 AS: 201234 IP: 5.45.160.0/20 IP: 5.61.200.0/21 IP: 171.22.8.0/22 IP: 185.43.72.0/22 IP: 185.62.20.0/22 IP: 2a00:73c0::/32 IP: 2a00:fe40::/32 IP: 2a02:7c60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:82:b3:c5:4d:d2:ea:f8:cb:16:66:d6:6f:b2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d26a4409ea91f506d633871c6c35540d460337d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:59:09:01:62:3d:44:a5:ca:4c:aa:7b:5c: 2a:ca:c6:5e:86:2e:c4:1b:84:92:8d:46:9a:25:1d: 1e:3e:12:f4:59:d4:ad:52:79:c6:aa:0a:b1:b1:4d: e5:2b:37:e8:04:6b:1e:05:5e:0f:aa:ea:be:04:60: 6b:80:fd:4a:8a:bb:d9:16:c2:a3:f1:28:83:a4:72: 1b:64:9d:e6:89:ff:d3:4b:51:73:36:2d:f6:45:8b: 34:b2:c9:8a:5e:26:c9:23:ca:9b:38:6f:ba:aa:ad: ae:8f:ad:73:4b:1d:36:51:db:fa:c4:62:15:03:0b: aa:a7:d9:96:13:62:54:ff:89:28:e6:03:e3:c1:8b: c1:53:18:ce:3e:da:50:af:98:84:b3:14:56:44:45: c3:ed:8c:0f:d9:0e:6b:68:c9:8c:c6:c7:bd:09:8a: 6b:d8:f4:34:cf:44:fd:2b:5d:b5:0b:78:3c:c5:ea: f8:1a:01:1c:81:25:bf:52:ff:54:16:af:7d:34:06: f8:7e:5b:d1:e1:5d:d9:ed:62:be:ab:25:6e:c4:60: 1d:5a:c7:ef:1d:5b:ca:49:8a:e0:03:92:8f:97:8f: 9e:81:8c:2f:10:fa:2f:96:03:22:e3:d8:42:7a:e2: c7:ff:2c:3f:d2:e9:b7:ad:db:6d:9b:87:40:f8:02: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.160.0/20 5.61.200.0/21 171.22.8.0/22 185.43.72.0/22 185.62.20.0/22 IPv6: 2a00:73c0::/32 2a00:fe40::/32 2a02:7c60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198885 201234 Signature Algorithm: sha256WithRSAEncryption 58:87:31:12:0e:6a:4d:a2:e9:99:4e:2b:ce:95:d9:4c:ed:a7: 16:20:48:84:89:ed:94:8c:c5:51:1e:3f:a8:58:a8:ce:9d:a5: ec:5a:8e:61:f2:de:f1:6e:e1:a8:08:e8:4c:37:c3:23:3f:15: e8:13:bd:6a:f1:d3:91:04:ac:b0:1c:5c:67:ef:90:81:51:fc: ca:c5:d0:36:b2:eb:45:7c:01:69:fc:c1:83:75:db:ae:34:99: b1:4d:8e:bb:ef:b0:c0:6c:ed:eb:79:d2:25:bd:48:6b:45:d8: ac:6d:9e:cc:dd:68:4a:a6:10:7f:79:9d:2c:50:ff:c6:07:73: 22:fb:f2:9a:5a:d5:10:21:ae:a6:6d:d9:14:98:f7:a6:78:2c: 64:b9:62:a7:20:cd:b0:f6:dd:1d:55:ac:19:45:5f:31:92:39: 13:7e:34:a8:cb:c6:da:56:59:66:52:db:28:5f:c6:ca:94:dd: 40:6d:70:f9:93:24:e6:fc:bb:6e:e1:03:26:cc:dd:b0:ea:09: 64:85:19:85:25:55:7f:3f:54:85:b6:32:fb:57:23:a4:dc:e0: 8c:b2:2f:a3:b1:3e:8a:35:90:78:f8:80:8a:9e:0e:b1:e9:f3: 2e:0d:63:b2:f4:19:38:49:0f:eb:ba:fe:b0:c3:c2:0f:d7:f5: fe:08:cd:f7 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt/E4KzxU3S6vjLFmbWb7KJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjZhNDQwOWVhOTFmNTA2ZDYzMzg3MWM2YzM1NTQwZDQ2MDMzN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+NZCQFiPUSlykyqe1wqysZehi7E G4SSjUaaJR0ePhL0WdStUnnGqgqxsU3lKzfoBGseBV4Pquq+BGBrgP1KirvZFsKj 8SiDpHIbZJ3mif/TS1FzNi32RYs0ssmKXibJI8qbOG+6qq2uj61zSx02Udv6xGIV Awuqp9mWE2JU/4ko5gPjwYvBUxjOPtpQr5iEsxRWREXD7YwP2Q5raMmMxse9CYpr 2PQ0z0T9K121C3g8xer4GgEcgSW/Uv9UFq99NAb4flvR4V3Z7WK+qyVuxGAdWsfv HVvKSYrgA5KPl4+egYwvEPovlgMi49hCeuLH/yw/0um3rdttm4dA+AIf3wIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFNJqRAnqkfUG1jOHHGw1VA1GAzfRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2Y0MTA1 MS0wODEwLTQzZmYtYjE5Ni1jZmVmZGZkZmJlNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZjQxMDUx LTA4MTAtNDNmZi1iMTk2LWNmZWZkZmRmYmU2Yi8xLzBtcEVDZXFSOVFiV000Y2Ni RFZVRFVZRE45RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAkBAIAATAeAwQEBS2gAwQDBT3IAwQCqxYIAwQCuStIAwQCuT4U MBsEAgACMBUDBQAqAHPAAwUAKgD+QAMFACoCfGAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAwjlAgMDEhIwDQYJKoZIhvcNAQELBQADggEBAFiHMRIOak2i6ZlOK86V 2UztpxYgSISJ7ZSMxVEeP6hYqM6dpexajmHy3vFu4agI6Ew3wyM/FegTvWrx05EE rLAcXGfvkIFR/MrF0Day60V8AWn8wYN12640mbFNjrvvsMBs7et50iW9SGtF2Kxt nszdaEqmEH95nSxQ/8YHcyL78ppa1RAhrqZt2RSY96Z4LGS5YqcgzbD23R1VrBlF XzGSORN+NKjLxtpWWWZS2yhfxsqU3UBtcPmTJOb8u27hAybM3bDqCWSFGYUlVX8/ VIW2MvtXI6Tc4IyyL6OxPoo1kHj4gIqeDrHp8y4NY7L0GThJD+u6/rDDwg/X9f4I zfc= -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:32 2026 by rpki-client