This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer File: M41C-7P0P1bduHguZUkKI9hbcuE.cer (raw, json) Hash identifier: kO36eWkYrOVx5svRNz1Wr/oU+GzYPiANKKzk40Ob6Lc= Subject key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4E9BE8F05CB4B047A4CE40ABD0B06 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51587 IP: 45.95.92.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:e9:be:8f:05:cb:4b:04:7a:4c:e4:0a:bd:0b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:81:fe:95:19:5e:5b:2a:2f:f5:a5:9a:37: 30:d1:0e:be:1f:29:8d:d9:6e:b9:49:8d:a8:2b:63: 4e:29:52:83:ce:93:dc:59:0f:f3:dd:ab:76:7a:e2: 85:73:ac:b5:88:76:5e:0d:51:bf:3d:42:7e:ef:59: 04:15:45:f1:70:12:8d:04:74:13:04:e6:90:64:0f: 58:28:6b:90:ba:b8:f2:ab:f6:f6:10:ed:af:14:83: 1b:dd:ac:8f:7d:09:a1:93:5b:a0:24:bc:b5:00:89: 7a:57:da:54:a2:20:85:47:3c:65:2a:24:3e:89:5a: c3:4d:bf:f2:3c:17:8e:28:c4:50:af:92:11:b4:23: 0e:06:73:01:2a:18:fe:50:fd:9f:e6:c2:3f:d6:9a: 0c:26:d9:5c:12:ac:9f:30:e1:00:f9:44:72:59:24: d0:40:20:96:6c:0f:73:36:4f:32:95:3f:51:80:26: d7:c2:43:ec:25:c5:b2:28:44:e2:57:e8:58:fd:e0: 5d:22:48:fc:dc:bc:29:c2:48:fd:65:37:b8:37:50: 88:fe:6c:15:99:51:59:ca:2e:d3:ce:cf:2f:9f:96: 68:e8:1e:55:77:7b:a8:ba:b7:21:83:26:3a:88:d4: 99:68:5b:0a:52:15:37:15:74:25:5a:cd:52:bb:ef: 67:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51587 Signature Algorithm: sha256WithRSAEncryption 16:b6:77:fa:fe:9a:45:35:50:29:40:40:56:64:0c:42:69:c7: 81:5c:67:c9:e2:28:fe:4b:cc:fc:8b:30:c2:ad:29:ef:b3:da: 0f:a2:ff:84:53:62:fc:bb:e2:6d:47:2f:59:94:6d:87:e7:2e: af:6c:12:62:ab:49:42:f5:23:2c:ae:48:32:bb:8f:b9:1e:97: 29:71:d1:4b:a5:ae:08:0e:46:0b:74:f2:30:8d:ba:9c:ad:ad: d8:2b:ea:e1:9d:b1:a2:d8:67:4b:fb:31:73:15:6f:ae:8c:03: 16:0c:fe:30:e4:26:44:69:72:2a:7a:94:9f:31:09:aa:f8:8d: b9:27:80:b0:2f:e5:ed:cd:db:f5:c1:16:2e:52:f1:ac:7b:de: d0:7b:ea:4a:f4:5c:f0:05:81:b0:cc:b1:82:65:8e:ee:fd:5a: dd:83:00:48:9f:ae:3a:8e:f6:15:8e:31:1b:54:bf:9e:17:b8: 18:04:e1:70:82:08:f6:5b:49:a8:5b:91:e8:a4:3c:c2:5b:c9: a5:41:1e:fe:f3:6d:ac:42:c7:e7:48:a2:f5:2d:28:4e:7c:f3: 0a:21:ad:de:fc:21:e6:74:22:f6:74:45:aa:cd:14:f2:8f:fb: 80:03:09:ac:e2:e2:f3:ae:34:16:f3:6f:1b:91:08:18:26:36: 4f:d6:4c:f5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pOm+jwXLSwR6TOQKvQsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzhkNDJmYmIzZjQzZjU2ZGRiODc4MmU2NTQ5MGEyM2Q4NWI3MmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WKB/pUZXlsqL/Wlmjcw0Q6+HymN 2W65SY2oK2NOKVKDzpPcWQ/z3at2euKFc6y1iHZeDVG/PUJ+71kEFUXxcBKNBHQT BOaQZA9YKGuQurjyq/b2EO2vFIMb3ayPfQmhk1ugJLy1AIl6V9pUoiCFRzxlKiQ+ iVrDTb/yPBeOKMRQr5IRtCMOBnMBKhj+UP2f5sI/1poMJtlcEqyfMOEA+URyWSTQ QCCWbA9zNk8ylT9RgCbXwkPsJcWyKETiV+hY/eBdIkj83Lwpwkj9ZTe4N1CI/mwV mVFZyi7Tzs8vn5Zo6B5Vd3uourchgyY6iNSZaFsKUhU3FXQlWs1Su+9nrQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDONQvuz9D9W3bh4LmVJCiPYW3LhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzkxNjZi OC01ZTU0LTQ1OGQtOWIzMi01NTdhN2QxMWUyYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOTE2NmI4 LTVlNTQtNDU4ZC05YjMyLTU1N2E3ZDExZTJhZS8xL000MUMtN1AwUDFiZHVIZ3Va VWtLSTloYmN1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLV9cMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDJgzANBgkqhkiG9w0BAQsFAAOCAQEAFrZ3+v6aRTVQKUBAVmQMQmnHgVxnyeIo /kvM/Iswwq0p77PaD6L/hFNi/LvibUcvWZRth+cur2wSYqtJQvUjLK5IMruPuR6X KXHRS6WuCA5GC3TyMI26nK2t2Cvq4Z2xothnS/sxcxVvrowDFgz+MOQmRGlyKnqU nzEJqviNuSeAsC/l7c3b9cEWLlLxrHve0HvqSvRc8AWBsMyxgmWO7v1a3YMASJ+u Oo72FY4xG1S/nhe4GAThcIII9ltJqFuR6KQ8wlvJpUEe/vNtrELH50ii9S0oTnzz CiGt3vwh5nQi9nRFqs0U8o/7gAMJrOLi8640FvNvG5EIGCY2T9ZM9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 09:08:06 2026 by rpki-client