This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer File: CjMvWtwEaVM7vdz86JV-ruWL_WA.cer (raw, json) Hash identifier: mbelpG1WKs8t0l5a22jcwFLLX0fhEhQ0aZWGhV84G+4= Subject key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAE6A656969B5E41A6C28B9C8781B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20546 IP: 80.90.0.0/19 IP: 91.236.122.0/24 IP: 185.5.80.0/22 IP: 2a02:cb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e6:a6:56:96:9b:5e:41:a6:c2:8b:9c:87:81:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:fa:cb:a3:21:90:be:ab:ee:3c:c4:18:64: b4:b9:2e:0e:c9:60:79:42:08:b4:c1:f3:20:ba:a6: 07:2b:62:95:19:7c:e7:fb:f6:2b:51:cb:f1:5c:64: 66:43:cf:76:cc:a8:aa:81:46:6f:08:75:a9:bc:a4: 15:45:75:44:d8:ef:cb:47:60:67:9e:c4:4e:76:68: 1e:5d:83:69:32:ec:b5:da:95:54:60:df:58:bc:c3: c9:40:b8:68:dd:50:a3:cc:8e:55:58:c3:55:a2:f1: 40:df:80:95:95:ab:83:c9:fe:8b:fd:d7:37:89:80: 82:1e:c0:9d:3d:96:1e:9f:da:07:aa:84:75:8b:7e: bb:79:68:2a:b8:f3:9d:c4:da:c1:f5:54:44:ab:5c: bd:ab:cf:70:36:bb:d1:1e:fe:19:ae:a8:ff:4c:4f: 4e:d7:c1:a6:b5:80:2b:b5:25:a5:a2:c7:b9:e7:f5: 78:e5:95:a1:8f:f4:a3:08:a1:af:8e:10:09:60:8e: f1:89:75:28:fa:de:31:19:b0:98:2f:33:71:b0:ba: e2:5b:ed:05:3b:00:7b:b8:ec:93:9a:17:dc:96:2e: a1:b3:e7:a7:99:33:e4:59:7e:30:50:3e:0d:27:48: d0:75:14:02:d8:17:5b:7c:4b:7f:17:f3:42:24:14: 27:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.0.0/19 91.236.122.0/24 185.5.80.0/22 IPv6: 2a02:cb40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20546 Signature Algorithm: sha256WithRSAEncryption 90:2e:9d:8d:d3:b3:55:4e:c7:49:0a:a2:56:d9:3d:04:e6:48: 89:c1:8e:2a:bf:59:f9:d4:d0:30:c5:c5:d3:ec:c2:b4:c2:b9: d4:1d:1b:57:c0:3f:c3:14:49:da:b3:3f:51:6d:3a:b5:e7:71: aa:95:c9:9d:f9:29:c7:59:0a:34:cc:9f:9b:43:86:a9:b6:4d: 9e:e6:ab:3f:b0:e3:04:19:1d:ab:d6:7f:c0:54:c9:8b:4f:cf: 8b:84:1f:f2:a9:6e:91:bc:52:96:d7:e5:8b:a9:9a:0a:db:f6: 9e:e2:b0:6e:b8:58:2e:1a:b6:e8:e3:2a:2a:f6:2a:ed:ae:9a: 23:7f:61:55:1f:31:68:05:1e:11:3d:c1:0b:f7:e5:fb:0e:c7: 40:5a:d6:07:15:1e:f0:5e:1f:b6:58:2c:5c:87:c1:6e:64:4c: 3c:d0:49:a9:3d:a4:4b:94:2e:f9:1d:e2:61:17:8c:e5:4a:dd: d4:66:0d:09:e8:c7:ea:6f:d6:73:8b:45:48:10:e6:e2:7b:33: 92:b7:f7:58:0a:fb:9c:b0:bf:eb:72:84:a7:1f:b3:cc:1a:e6: 5d:6b:0f:79:56:c3:ba:ca:30:92:e6:a8:a7:5b:43:a7:e9:e5: a5:6b:07:3b:4a:2c:b0:5e:c4:9a:98:4f:5d:56:69:84:21:2b: 85:64:24:92 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt9yuamVpabXkGmwouch4G3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTMzMmY1YWRjMDQ2OTUzM2JiZGRjZmNlODk1N2VhZWU1OGJmZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnL6y6MhkL6r7jzEGGS0uS4OyWB5 Qgi0wfMguqYHK2KVGXzn+/YrUcvxXGRmQ892zKiqgUZvCHWpvKQVRXVE2O/LR2Bn nsROdmgeXYNpMuy12pVUYN9YvMPJQLho3VCjzI5VWMNVovFA34CVlauDyf6L/dc3 iYCCHsCdPZYen9oHqoR1i367eWgquPOdxNrB9VREq1y9q89wNrvRHv4Zrqj/TE9O 18GmtYArtSWlose55/V45ZWhj/SjCKGvjhAJYI7xiXUo+t4xGbCYLzNxsLriW+0F OwB7uOyTmhfcli6hs+enmTPkWX4wUD4NJ0jQdRQC2BdbfEt/F/NCJBQngwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFAozL1rcBGlTO73c/OiVfq7li/1gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzI3OGY2 OC1jMTZmLTRhMmYtODBmNy00MTMwZmE0OGI1NTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvMjc4ZjY4 LWMxNmYtNGEyZi04MGY3LTQxMzBmYTQ4YjU1OS8xL0NqTXZXdHdFYVZNN3Zkejg2 SlYtcnVXTF9XQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFUFoAAwQAW+x6AwQCuQVQMA0EAgACMAcDBQMq AstAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlBCMA0GCSqGSIb3DQEBCwUAA4IB AQCQLp2N07NVTsdJCqJW2T0E5kiJwY4qv1n51NAwxcXT7MK0wrnUHRtXwD/DFEna sz9RbTq153Gqlcmd+SnHWQo0zJ+bQ4aptk2e5qs/sOMEGR2r1n/AVMmLT8+LhB/y qW6RvFKW1+WLqZoK2/ae4rBuuFguGrbo4yoq9irtrpojf2FVHzFoBR4RPcEL9+X7 DsdAWtYHFR7wXh+2WCxch8FuZEw80EmpPaRLlC75HeJhF4zlSt3UZg0J6Mfqb9Zz i0VIEObiezOSt/dYCvucsL/rcoSnH7PMGuZdaw95VsO6yjCS5qinW0On6eWlawc7 SiywXsSamE9dVmmEISuFZCSS -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:23 2026 by rpki-client