This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer File: M6Udf_AtIfrBk65K7R8MOVbORRU.cer (raw, json) Hash identifier: ES2qODOmpuJByR/Hd4SX4/JkhxYTL63e0SR6ciCPaBE= Subject key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7970423E9428AABC1C517FA3DF0AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.53.0.0/24 IP: 2001:67c:2c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:97:04:23:e9:42:8a:ab:c1:c5:17:fa:3d:f0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:8b:35:6d:69:8e:63:65:d9:c4:33:7e:2d: d7:8c:b4:45:84:6a:7c:67:18:ee:91:9f:40:36:6e: 1a:da:f3:ef:c5:5d:b1:71:07:6a:f9:ef:e7:9c:b8: cb:eb:f7:9c:75:93:7d:9a:6b:ee:fa:96:f8:47:ec: 3f:83:bb:ed:d8:f9:37:93:5e:5d:50:8f:eb:f3:fd: a4:83:28:8c:a5:ea:72:fd:1e:99:d7:30:59:64:ae: 17:b6:39:73:78:32:fa:cc:46:2a:52:26:29:be:68: 50:41:54:36:fb:c9:6a:36:62:6f:3b:3c:b8:9a:ae: 0a:2f:d2:7e:f8:e0:70:69:ed:67:7a:34:12:49:f4: 93:24:2d:25:f4:6e:9e:65:69:e7:bd:9d:ab:7e:bc: a6:cf:aa:b3:14:f6:09:71:33:f2:a2:44:0a:e2:35: 64:8f:40:21:a0:93:cf:d3:73:f8:b7:b6:12:53:88: 46:6d:d3:cd:82:9b:b3:e0:fc:8c:0d:6c:e0:e3:69: 06:c8:a6:57:5a:d7:35:df:44:be:3c:b2:9b:c2:a6: 6a:c9:c8:3b:72:a5:89:d6:96:f9:a0:25:05:d6:66: 26:80:f0:9b:f3:f8:db:86:b7:7e:18:7f:37:3d:6f: 6a:cc:e4:3f:da:4b:15:6f:71:a6:74:a8:41:4c:55: c3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.0.0/24 IPv6: 2001:67c:2c::/48 Signature Algorithm: sha256WithRSAEncryption 28:ff:9a:0b:8c:10:10:bb:68:0f:29:b4:11:93:3e:3f:83:32: 31:4b:23:d5:7c:c8:f7:06:f9:26:2e:31:0a:cb:cb:5f:fa:52: 1e:aa:a3:27:8a:27:ec:f3:20:4a:20:1c:be:0b:31:69:f8:68: a2:96:80:ae:58:8f:bf:0a:60:42:1e:74:ef:67:b2:23:f4:78: 66:8e:69:87:5a:f3:15:b5:eb:fc:03:f1:44:cd:52:36:06:ed: b4:2f:19:b2:0b:51:9d:cf:92:78:9a:f5:7d:30:ec:78:8f:ab: 50:03:e8:b0:bb:07:4b:fd:53:90:1e:4e:f5:51:63:b0:b2:b1: f7:da:0c:97:1e:87:61:04:23:55:c5:24:4e:a3:b3:1c:ea:ec: 66:c6:a5:3f:07:6f:ad:a7:d4:bd:df:13:b0:45:8b:eb:5a:3f: 42:2f:f2:2f:96:3c:07:bc:5d:3e:ce:53:25:81:9a:7b:ae:90: 5b:f7:0b:b2:66:90:1e:e7:cd:89:fb:15:77:6a:d0:88:41:9a: b9:0f:0e:7e:5e:60:1c:a5:50:7f:43:8e:28:3e:e0:b0:69:15: e2:9c:65:72:e3:0a:59:b0:3d:8a:d0:ad:9c:81:09:e7:18:54: f5:cd:d9:63:be:37:e8:17:7a:c0:f5:78:a5:fe:e3:0f:eb:74: 61:6d:24:4c -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt6x5cEI+lCiqvBxRf6PfCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2E1MWQ3ZmYwMmQyMWZhYzE5M2FlNGFlZDFmMGMzOTU2Y2U0NTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEOLNW1pjmNl2cQzfi3XjLRFhGp8 ZxjukZ9ANm4a2vPvxV2xcQdq+e/nnLjL6/ecdZN9mmvu+pb4R+w/g7vt2Pk3k15d UI/r8/2kgyiMpepy/R6Z1zBZZK4XtjlzeDL6zEYqUiYpvmhQQVQ2+8lqNmJvOzy4 mq4KL9J++OBwae1nejQSSfSTJC0l9G6eZWnnvZ2rfrymz6qzFPYJcTPyokQK4jVk j0AhoJPP03P4t7YSU4hGbdPNgpuz4PyMDWzg42kGyKZXWtc130S+PLKbwqZqycg7 cqWJ1pb5oCUF1mYmgPCb8/jbhrd+GH83PW9qzOQ/2ksVb3GmdKhBTFXDkwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFDOlHX/wLSH6wZOuSu0fDDlWzkUVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzUxOGU0 Mi1lYmFlLTQ1NDctOGIyMi05YjFlNmE4ZTQwZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTE4ZTQy LWViYWUtNDU0Ny04YjIyLTliMWU2YThlNDBmMy8xL002VWRmX0F0SWZyQms2NUs3 UjhNT1ZiT1JSVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwjUAMA8EAgACMAkDBwAgAQZ8ACwwDQYJKoZI hvcNAQELBQADggEBACj/mguMEBC7aA8ptBGTPj+DMjFLI9V8yPcG+SYuMQrLy1/6 Uh6qoyeKJ+zzIEogHL4LMWn4aKKWgK5Yj78KYEIedO9nsiP0eGaOaYda8xW16/wD 8UTNUjYG7bQvGbILUZ3Pknia9X0w7HiPq1AD6LC7B0v9U5AeTvVRY7CysffaDJce h2EEI1XFJE6jsxzq7GbGpT8Hb62n1L3fE7BFi+taP0Iv8i+WPAe8XT7OUyWBmnuu kFv3C7JmkB7nzYn7FXdq0IhBmrkPDn5eYBylUH9Djig+4LBpFeKcZXLjClmwPYrQ rZyBCecYVPXN2WO+N+gXesD1eKX+4w/rdGFtJEw= -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:24 2026 by rpki-client