This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer File: M15yXKz4PJf0V6VnYs-EbWQxF80.cer (raw, json) Hash identifier: KzbAHwPBab8J3jO44noGRgL/zQBKcaayqyTTRBo17a4= Subject key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A98F415F451C5452FDF92389A3E03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42612 IP: 46.231.120.0/21 IP: 82.98.128.0/18 IP: 185.192.220.0/22 IP: 2a02:be8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:98:f4:15:f4:51:c5:45:2f:df:92:38:9a:3e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=335e725cacf83c97f457a56762cf846d643117cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:f1:d6:bc:f3:ba:eb:6a:6f:35:16:a9:84: 61:7b:c8:42:56:6d:fa:2e:1a:8a:6d:5e:9b:2c:9b: ab:43:bb:78:cc:66:e3:8c:4b:09:d9:58:ff:79:a9: 8e:6f:b6:c7:1e:42:43:ee:6e:1c:d0:2d:2d:f9:09: fd:c5:f4:bc:5a:ff:1e:1a:9a:89:c5:23:06:2a:3a: 54:a9:f1:43:d5:62:74:07:2d:6a:40:ad:1f:4f:53: 1e:8e:cb:ca:60:bc:0f:35:74:8b:11:c5:8a:83:3c: 4c:3e:f8:2f:63:6e:85:20:57:bf:5d:3a:79:31:46: 6b:b5:84:07:01:f9:90:88:da:e2:75:aa:ae:27:4e: 55:77:fc:7f:26:65:db:4a:7a:24:ae:39:9f:a6:72: 7c:22:c2:ce:65:bb:71:45:79:3a:8b:0f:8f:c9:98: 4e:ed:14:b4:d8:74:5e:7d:0b:f5:e1:4c:01:15:c7: 5c:ff:92:a2:d2:e5:75:86:2a:95:b1:85:1f:99:71: 19:9c:b2:ab:30:b2:b2:7e:ea:8f:87:bf:5f:bb:22: a3:2e:4e:a5:e8:0a:44:e9:b0:b0:d8:39:3b:f7:4f: 26:d0:fd:2f:40:43:e4:2b:96:6c:93:a2:c4:b1:28: 20:1e:72:39:30:93:6b:85:bf:9c:2a:f0:8c:ec:d7: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.120.0/21 82.98.128.0/18 185.192.220.0/22 IPv6: 2a02:be8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42612 Signature Algorithm: sha256WithRSAEncryption 32:ab:87:19:d4:6a:a0:31:1e:ce:62:e8:dc:10:51:c6:2d:0a: d7:90:19:c8:13:61:02:d5:63:35:fc:06:fe:21:25:98:6c:a3: 31:f8:b5:73:8e:31:1b:9d:1f:dc:82:f2:f0:05:f7:1f:e1:ea: 10:48:bc:4e:85:cd:47:53:8f:49:b0:a9:41:a6:22:e8:cd:dd: 9b:af:78:70:1c:81:df:6b:6a:eb:f4:80:1f:e0:83:b8:5d:c3: d5:12:fe:5b:c4:9f:bf:8c:ca:14:d2:de:08:26:15:f2:32:f6: ff:47:8d:88:fb:16:fe:f2:c6:05:ad:17:34:29:7c:e3:fa:19: b2:8d:dd:d1:40:99:04:63:04:f6:ea:7e:ab:c9:7c:96:f2:ce: 34:e9:b5:f1:10:a9:5f:36:ea:67:c3:49:73:f1:65:ab:b7:c8: 3c:90:34:b7:16:ea:b4:7a:ad:5a:97:54:4f:02:6c:a8:41:38: 6b:f0:84:bf:d0:e4:56:51:6b:63:47:93:15:c6:41:56:fe:2b: f9:55:d4:35:b7:b0:85:9f:9c:ea:71:88:09:15:3e:91:5f:b6: a0:77:db:93:58:4a:e1:89:a4:8a:13:47:05:cc:50:20:23:88: 5a:fd:f6:15:45:88:93:78:91:28:11:1a:ae:bf:7e:88:84:31: fd:0a:9e:19 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt6Wpj0FfRRxUUv35I4mj4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzVlNzI1Y2FjZjgzYzk3ZjQ1N2E1Njc2MmNmODQ2ZDY0MzExN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySLx1rzzuutqbzUWqYRhe8hCVm36 LhqKbV6bLJurQ7t4zGbjjEsJ2Vj/eamOb7bHHkJD7m4c0C0t+Qn9xfS8Wv8eGpqJ xSMGKjpUqfFD1WJ0By1qQK0fT1MejsvKYLwPNXSLEcWKgzxMPvgvY26FIFe/XTp5 MUZrtYQHAfmQiNridaquJ05Vd/x/JmXbSnokrjmfpnJ8IsLOZbtxRXk6iw+PyZhO 7RS02HRefQv14UwBFcdc/5Ki0uV1hiqVsYUfmXEZnLKrMLKyfuqPh79fuyKjLk6l 6ApE6bCw2Dk7908m0P0vQEPkK5Zsk6LEsSggHnI5MJNrhb+cKvCM7NeA9QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFDNeclys+DyX9FelZ2LPhG1kMRfNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyLzAyNjU0 OC01MDEyLTRhZDAtYTViYi04MmMwNTYwNTk1Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvMDI2NTQ4 LTUwMTItNGFkMC1hNWJiLTgyYzA1NjA1OTVjZC8xL00xNXlYS3o0UEpmMFY2Vm5Z cy1FYldReEY4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDLud4AwQGUmKAAwQCucDcMA0EAgACMAcDBQAq AgvoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCmdDANBgkqhkiG9w0BAQsFAAOC AQEAMquHGdRqoDEezmLo3BBRxi0K15AZyBNhAtVjNfwG/iElmGyjMfi1c44xG50f 3ILy8AX3H+HqEEi8ToXNR1OPSbCpQaYi6M3dm694cByB32tq6/SAH+CDuF3D1RL+ W8Sfv4zKFNLeCCYV8jL2/0eNiPsW/vLGBa0XNCl84/oZso3d0UCZBGME9up+q8l8 lvLONOm18RCpXzbqZ8NJc/Flq7fIPJA0txbqtHqtWpdUTwJsqEE4a/CEv9DkVlFr Y0eTFcZBVv4r+VXUNbewhZ+c6nGICRU+kV+2oHfbk1hK4YmkihNHBcxQICOIWv32 FUWIk3iRKBEarr9+iIQx/QqeGQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:40:54 2026 by rpki-client