This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer (raw, json) Hash identifier: qdfEfg8aVaatPJaA+ft5fN6cHpbxV4m77J2YfffcxzI= Subject key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DEFEB6F463A026398661221420C31 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:678:5d8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ef:eb:6f:46:3a:02:63:98:66:12:21:42:0c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:17:72:a6:da:5d:8f:27:b7:50:9f:0a:74: 18:88:7f:cc:89:b5:b9:9b:6e:35:45:b9:93:ce:2a: 30:20:9b:8d:e5:6a:ea:20:aa:38:46:52:1e:6c:19: 79:c8:07:10:3e:76:2c:c8:07:0f:95:1d:a6:7a:b1: 90:3d:e4:c2:f3:1e:c0:c5:1a:ba:5f:c0:e2:09:6a: 88:c4:dc:5c:5c:e0:25:70:f2:ee:cf:73:92:a6:ef: 77:00:6f:ff:c5:c3:80:03:8b:75:a5:c9:78:f9:c1: 5e:74:5b:04:c5:97:b7:c6:dd:d9:2d:ce:ca:9e:75: 5a:89:9a:00:85:b3:e6:6d:dc:22:d6:5a:f0:9a:23: c2:b1:f8:c7:f5:38:ca:73:77:7e:fa:73:e3:9e:16: da:11:cf:e8:7d:e8:bd:4f:47:42:a6:92:f5:2a:d8: de:36:df:90:32:af:ef:c0:a5:da:3c:cc:e2:0d:b2: 1d:51:71:c8:e9:39:d7:03:3e:1f:78:48:8b:3b:af: 6a:f6:0c:6c:ca:41:7f:4e:22:f2:7c:20:13:6f:7c: 06:3a:f9:a0:bc:01:39:8c:ad:58:ab:8e:d3:33:02: 38:03:e1:0b:4a:83:0e:1a:ed:00:14:90:23:99:6e: e6:c9:eb:a2:00:d1:4e:ae:87:eb:b3:47:ab:06:9d: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:5d8::/48 Signature Algorithm: sha256WithRSAEncryption 97:f0:d9:bc:5a:36:20:89:58:bc:a0:62:25:ce:df:de:d6:9d: 7a:9a:73:7c:36:cf:1b:a1:62:5f:49:1b:68:06:6d:7e:6e:d5: c7:11:22:04:34:d9:a5:63:6f:f9:08:36:6e:14:cc:c5:cd:68: 62:96:da:1d:83:87:88:69:48:86:b3:16:5f:64:4c:24:e4:42: b9:1a:ef:97:0a:55:c6:ec:36:8a:d9:7b:0b:8b:29:d4:8a:ff: 99:74:44:26:e5:0d:3c:16:01:45:a1:35:3e:ac:2a:a8:ba:ff: cc:85:5c:8d:c7:ae:65:1b:54:0e:ec:60:cc:8d:15:6d:a0:00: cc:2a:f5:e1:f4:de:2c:d8:14:bd:e3:4f:2f:fe:45:8b:3f:9e: 3e:12:9d:1d:78:20:f9:68:43:46:16:94:b9:2a:e3:5a:58:1d: 9c:1d:92:a9:1a:58:4c:72:d8:b8:d6:3e:26:ad:34:d0:d1:03: 47:be:00:64:e4:f9:68:e8:c6:aa:a4:44:d8:42:26:dc:c7:66: fb:72:a0:03:35:5f:c5:b8:f4:2c:88:6c:2f:e2:cb:9b:5e:32: b4:e8:b8:6e:fe:26:90:aa:7d:79:cd:29:76:b5:ae:09:e1:aa: d4:75:36:cb:76:1b:e6:e8:96:26:61:67:52:07:79:24:e6:21: 4a:76:6c:25 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt5fe/rb0Y6AmOYZhIhQgwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTYzMGMzZDIzYzYwNDZjMmYxYTdlMGM4ZmNjYmQ4M2UyMGVkNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVsXcqbaXY8nt1CfCnQYiH/MibW5 m241RbmTziowIJuN5WrqIKo4RlIebBl5yAcQPnYsyAcPlR2merGQPeTC8x7AxRq6 X8DiCWqIxNxcXOAlcPLuz3OSpu93AG//xcOAA4t1pcl4+cFedFsExZe3xt3ZLc7K nnVaiZoAhbPmbdwi1lrwmiPCsfjH9TjKc3d++nPjnhbaEc/ofei9T0dCppL1Ktje Nt+QMq/vwKXaPMziDbIdUXHI6TnXAz4feEiLO69q9gxsykF/TiLyfCATb3wGOvmg vAE5jK1Yq47TMwI4A+ELSoMOGu0AFJAjmW7myeuiANFOrofrs0erBp1nvwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFPpjDD0jxgRsLxp+DI/MvYPiDtTHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzQ5YWQ5 Ny0yMWYxLTRjYzktYjc3Ni04Y2JlZTVhMDI3YzMvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3 LTIxZjEtNGNjOS1iNzc2LThjYmVlNWEwMjdjMy8xLzEtbU1NUFNQR0JHd3ZHbjRN ajh5OWctSU8xTWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngF2DANBgkqhkiG9w0BAQsFAAOCAQEA l/DZvFo2IIlYvKBiJc7f3tadeppzfDbPG6FiX0kbaAZtfm7VxxEiBDTZpWNv+Qg2 bhTMxc1oYpbaHYOHiGlIhrMWX2RMJORCuRrvlwpVxuw2itl7C4sp1Ir/mXREJuUN PBYBRaE1PqwqqLr/zIVcjceuZRtUDuxgzI0VbaAAzCr14fTeLNgUveNPL/5Fiz+e PhKdHXgg+WhDRhaUuSrjWlgdnB2SqRpYTHLYuNY+Jq000NEDR74AZOT5aOjGqqRE 2EIm3Mdm+3KgAzVfxbj0LIhsL+LLm14ytOi4bv4mkKp9ec0pdrWuCeGq1HU2y3Yb 5uiWJmFnUgd5JOYhSnZsJQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:40 2026 by rpki-client