This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer File: M7GzE5YIPOntUeRiiY4pTtghWuc.cer (raw, json) Hash identifier: kP4yEAFUAJBx7MIV3jQtsIW26dr0HkRrRycLlxhzuIc= Subject key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2742935E9AC833188C3715EA982E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5392 IP: 45.91.229.0 -- 45.91.231.255 IP: 195.36.0.0/18 IP: 2a00:1988::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:74:29:35:e9:ac:83:31:88:c3:71:5e:a9:82:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33b1b31396083ce9ed51e462898e294ed8215ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:3f:1e:14:03:28:49:23:a2:5b:c8:4c:4a: b3:cb:0c:3e:42:9e:e6:dc:fc:90:4e:6b:cd:6e:a6: 76:1e:86:1e:a5:85:76:b1:a5:f0:c1:76:33:f0:1a: 4b:d9:69:66:78:c2:0e:76:35:5a:ab:29:08:3c:9f: 21:42:39:7e:c6:3c:09:f8:5e:92:b1:dd:73:30:c1: 46:f0:8d:0a:a7:de:bb:93:42:07:0f:dd:e7:3a:c0: 92:2b:32:a9:e6:9e:3c:08:e0:b9:07:06:20:4c:b3: 8f:49:ac:19:94:a0:a9:00:ee:54:ba:e4:c6:0f:30: 96:10:a2:ac:f3:2c:89:77:33:ae:a9:f7:58:ed:59: 65:01:23:f1:8f:ff:0c:f9:3c:86:9d:12:ab:7c:8e: 4f:e2:00:d8:4c:7f:d3:4a:ab:ba:e2:31:a1:06:ce: 12:ad:f0:8d:3b:8b:0c:63:49:5d:9f:69:60:0d:69: ef:7d:45:72:a5:4c:74:48:3f:7a:b4:4d:a1:a4:1b: 1d:d0:8a:d2:d1:e5:05:1a:ad:de:6e:f8:1c:88:ed: 64:ad:c7:5c:4d:b4:8f:24:f1:95:e7:72:38:d5:29: ed:b0:ff:f0:24:98:67:b9:fc:0d:f5:30:de:0e:ec: 86:46:ff:32:be:cb:f4:ee:1e:57:4c:55:5d:17:58: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.229.0-45.91.231.255 195.36.0.0/18 IPv6: 2a00:1988::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5392 Signature Algorithm: sha256WithRSAEncryption 8b:c2:85:40:a2:f8:73:9b:ad:1e:e9:60:e5:30:9d:2c:ba:e0: 5c:06:e3:27:b5:cb:ac:a6:26:6b:6f:02:b7:d5:35:1d:1b:27: d4:b7:aa:86:e5:7d:98:27:48:74:fc:24:b1:6d:a6:bc:8c:98: 3d:01:5b:a4:de:33:1c:e0:48:0f:7d:ce:0d:8f:19:47:30:6f: 59:a4:59:5a:fd:ea:de:29:10:34:6b:63:47:11:67:65:2a:c2: 93:8f:67:b6:dd:e1:84:b5:c9:95:85:a0:31:1e:25:78:43:f5: 49:3f:cc:65:c2:15:ee:fc:06:90:c9:be:08:dd:18:ad:d3:eb: 29:b2:e2:38:55:a1:0a:77:2f:ff:47:7a:35:81:13:aa:70:45: 7a:8e:0e:01:37:20:2e:19:0c:c7:18:25:32:7c:c8:e0:95:0c: 90:da:90:7a:e9:c3:11:49:2d:d1:af:0b:29:0e:22:93:25:b8: b0:6f:9b:d9:39:c9:11:fb:4a:0b:fc:5e:3f:da:28:2f:75:a9: 66:a4:78:8d:da:81:36:aa:82:fa:bc:68:e1:b4:8f:a5:4e:7f: 55:0f:9f:71:10:9c:15:10:33:1e:7d:92:dc:da:e3:25:18:9c: 9a:66:ec:7c:28:ee:1a:b9:c7:a4:73:5a:2f:f2:af:e7:6b:41: b6:9d:c1:aa -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt4onQpNemsgzGIw3FeqYLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2IxYjMxMzk2MDgzY2U5ZWQ1MWU0NjI4OThlMjk0ZWQ4MjE1YWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgo/HhQDKEkjolvITEqzyww+Qp7m 3PyQTmvNbqZ2HoYepYV2saXwwXYz8BpL2WlmeMIOdjVaqykIPJ8hQjl+xjwJ+F6S sd1zMMFG8I0Kp967k0IHD93nOsCSKzKp5p48COC5BwYgTLOPSawZlKCpAO5UuuTG DzCWEKKs8yyJdzOuqfdY7VllASPxj/8M+TyGnRKrfI5P4gDYTH/TSqu64jGhBs4S rfCNO4sMY0ldn2lgDWnvfUVypUx0SD96tE2hpBsd0IrS0eUFGq3ebvgciO1krcdc TbSPJPGV53I41SntsP/wJJhnufwN9TDeDuyGRv8yvsv07h5XTFVdF1jLAwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFDOxsxOWCDzp7VHkYomOKU7YIVrnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzFjYzFm YS0yOGRkLTQ0ZDQtOThhMC0zM2U2MWJkOTEyZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvMWNjMWZh LTI4ZGQtNDRkNC05OGEwLTMzZTYxYmQ5MTJlYS8xL003R3pFNVlJUE9udFVlUmlp WTRwVHRnaFd1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBAAtW+UDBAMtW+ADBAbDJAAwDQQCAAIwBwMF ACoAGYgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICFRAwDQYJKoZIhvcNAQELBQAD ggEBAIvChUCi+HObrR7pYOUwnSy64FwG4ye1y6ymJmtvArfVNR0bJ9S3qoblfZgn SHT8JLFtpryMmD0BW6TeMxzgSA99zg2PGUcwb1mkWVr96t4pEDRrY0cRZ2UqwpOP Z7bd4YS1yZWFoDEeJXhD9Uk/zGXCFe78BpDJvgjdGK3T6ymy4jhVoQp3L/9HejWB E6pwRXqODgE3IC4ZDMcYJTJ8yOCVDJDakHrpwxFJLdGvCykOIpMluLBvm9k5yRH7 Sgv8Xj/aKC91qWakeI3agTaqgvq8aOG0j6VOf1UPn3EQnBUQMx59ktza4yUYnJpm 7Hwo7hq5x6RzWi/yr+drQbadwao= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:03 2026 by rpki-client