This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer File: M3EM-B0hd3qY09mZ3B5urgVffDw.cer (raw, json) Hash identifier: zMbUc5rS/xG4LdPtmiXwytzPDHtfXyEkl16EM1eCHQ8= Subject key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F8EE9889967873079846218EAC1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47698 IP: 91.206.174.0/23 IP: 91.208.103.0/24 IP: 2001:67c:394::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f8:ee:98:89:96:78:73:07:98:46:21:8e:ac:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:14:dd:15:f8:58:4b:5c:db:01:d5:4b:73: 27:ec:86:79:ce:a3:b5:94:bf:95:49:c0:06:0d:0c: 49:af:ad:69:c2:65:c9:56:07:cc:e4:50:58:f2:27: 12:52:ac:2b:b1:de:12:ab:38:67:dc:e1:94:ec:6c: cc:2f:a2:c7:9e:66:96:8c:a3:05:bd:68:f3:6f:92: ba:43:83:78:11:8f:e2:d2:d4:33:2e:ce:78:7f:02: cf:19:e6:72:94:a1:03:8d:f9:9a:90:a6:fb:51:4b: 7c:7c:39:9d:9e:e4:c0:62:17:b3:e0:0f:5e:31:ca: f2:e4:e2:79:29:25:e1:18:b9:d6:88:ac:02:4a:32: 13:72:5c:52:06:48:f0:b1:d4:b9:3d:a3:80:b2:2f: 0c:e5:04:b4:91:f5:b0:6d:fb:d5:14:2b:c8:fd:88: b3:94:5b:2d:b7:b5:45:b0:ca:1c:0b:0e:ca:1f:74: f7:e7:41:1c:d2:9a:be:0e:5f:7b:ab:50:8c:f3:a0: c0:a2:f4:f8:b3:62:36:33:e9:74:51:88:b7:2c:f2: 4a:98:68:2b:b0:c5:71:04:2f:bc:17:72:4d:d3:ff: 24:e5:e3:b0:c7:b3:37:2e:38:4d:81:e6:52:42:4f: 71:f2:b0:48:ba:6a:29:09:3e:e7:d8:2d:b9:c0:9f: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.174.0/23 91.208.103.0/24 IPv6: 2001:67c:394::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47698 Signature Algorithm: sha256WithRSAEncryption 53:a4:a5:fa:6a:bb:ea:67:d6:79:bb:67:34:ec:15:0b:4f:b0: de:19:5b:de:69:d4:9b:56:58:2b:39:05:97:b5:67:27:8a:84: 5d:f4:12:ab:d0:a0:c1:b0:7e:3c:04:ae:8d:84:2c:cd:72:c7: fa:98:fa:7a:78:c5:a3:8d:28:09:8e:25:15:35:81:82:89:ba: 86:2a:c1:88:89:3e:ae:ea:1c:24:62:02:11:5c:d6:a8:4c:c4: 07:8d:72:7c:b1:a3:14:dc:fa:5b:b7:6a:5f:8a:ba:4f:24:e7: 4e:ae:b7:8a:66:4a:92:f2:66:e3:98:61:4d:66:e2:dd:5e:39: ab:15:d9:56:bb:4a:1c:a8:f9:b3:5e:52:4b:96:5e:5b:ae:1a: b2:bb:56:60:ab:f8:7b:f5:fe:e2:61:10:e4:d9:fb:cf:12:b9: 12:83:d5:c9:53:f2:10:df:0e:1d:e7:a9:2f:39:54:b6:ee:cd: a9:ff:56:30:06:b7:1e:22:b6:f1:59:9c:64:83:eb:b1:d6:f1: a9:6f:bb:78:d1:f5:a6:78:80:49:3c:bc:7d:09:1a:4e:0a:4f: 1c:06:0f:cc:29:69:50:bc:aa:9c:40:c6:b0:2c:90:1e:09:29: 61:59:f3:ea:e0:70:fb:df:02:ea:1b:1e:45:33:a1:4b:8f:18: 6a:ae:34:e0 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt4NPjumImWeHMHmEYhjqwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzcxMGNmODFkMjE3NzdhOThkM2Q5OTlkYzFlNmVhZTA1NWY3YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWIU3RX4WEtc2wHVS3Mn7IZ5zqO1 lL+VScAGDQxJr61pwmXJVgfM5FBY8icSUqwrsd4Sqzhn3OGU7GzML6LHnmaWjKMF vWjzb5K6Q4N4EY/i0tQzLs54fwLPGeZylKEDjfmakKb7UUt8fDmdnuTAYhez4A9e Mcry5OJ5KSXhGLnWiKwCSjITclxSBkjwsdS5PaOAsi8M5QS0kfWwbfvVFCvI/Yiz lFstt7VFsMocCw7KH3T350Ec0pq+Dl97q1CM86DAovT4s2I2M+l0UYi3LPJKmGgr sMVxBC+8F3JN0/8k5eOwx7M3LjhNgeZSQk9x8rBIumopCT7n2C25wJ+xUQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFDNxDPgdIXd6mNPZmdwebq4FX3w8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzM5Njcw OS0yMGUxLTRmN2QtOTYzZS0zYjVlODNmNjI2ZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMzk2NzA5 LTIwZTEtNGY3ZC05NjNlLTNiNWU4M2Y2MjZlMy8xL00zRU0tQjBoZDNxWTA5bVoz QjV1cmdWZmZEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQBW86uAwQAW9BnMA8EAgACMAkDBwAgAQZ8A5Qw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALpSMA0GCSqGSIb3DQEBCwUAA4IBAQBT pKX6arvqZ9Z5u2c07BULT7DeGVveadSbVlgrOQWXtWcnioRd9BKr0KDBsH48BK6N hCzNcsf6mPp6eMWjjSgJjiUVNYGCibqGKsGIiT6u6hwkYgIRXNaoTMQHjXJ8saMU 3Ppbt2pfirpPJOdOrreKZkqS8mbjmGFNZuLdXjmrFdlWu0ocqPmzXlJLll5brhqy u1Zgq/h79f7iYRDk2fvPErkSg9XJU/IQ3w4d56kvOVS27s2p/1YwBrceIrbxWZxk g+ux1vGpb7t40fWmeIBJPLx9CRpOCk8cBg/MKWlQvKqcQMawLJAeCSlhWfPq4HD7 3wLqGx5FM6FLjxhqrjTg -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:38 2026 by rpki-client