This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer File: M8Ww18CpzSS3PNy5LIdG6FpKW48.cer (raw, json) Hash identifier: L2RTUy7KhpMJaYi87lADkK2lEpz9PLv7hdg0ztPCEsk= Subject key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B048487C64F097B82F5BFD3C5D1E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.149.107.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:04:84:87:c6:4f:09:7b:82:f5:bf:d3:c5:d1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4b:e9:c1:ab:68:49:b4:c1:8f:8e:cc:65:2d: 0d:10:f7:dc:1a:5d:67:c9:14:32:36:ec:af:11:85: 8a:57:f7:ef:5d:c7:49:e5:07:6f:5e:0f:81:9e:21: 23:f2:b6:74:fd:83:93:9c:83:ac:ac:57:90:cd:0d: 36:97:01:70:f5:99:4b:c2:60:f0:5f:8b:74:f3:f7: 31:a8:38:a0:5a:1a:c0:b8:5a:32:95:61:35:61:8e: 54:cc:7a:cc:5f:7c:ec:40:2d:65:ab:47:1a:26:6f: f4:28:3e:66:25:26:ac:82:26:fc:fb:5f:1f:0c:ba: 58:d4:40:56:b3:78:0e:45:dc:02:7f:cf:1a:1d:f7: af:64:7e:e9:9a:32:41:cb:28:4b:88:cf:d3:f8:81: 81:c0:a1:40:f7:2f:ae:f5:31:48:7f:e5:d8:f8:cc: 26:cf:21:c3:37:5e:c1:05:be:93:c0:7c:47:7e:60: 82:38:03:ef:01:e6:e9:87:a2:dc:0f:c8:52:63:4d: 5b:7b:98:a2:79:c2:99:ca:e3:c9:55:bd:a4:47:ec: 60:cf:36:01:b5:83:07:a6:c7:f0:6d:84:d9:97:80: 84:85:ba:ee:47:66:75:87:a3:9d:72:a1:d2:ea:8b: 08:e0:6f:58:25:1b:05:dc:e8:dd:2b:3d:2d:19:1b: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.107.0/24 Signature Algorithm: sha256WithRSAEncryption 41:27:19:00:24:2c:08:f6:3f:f0:91:99:ca:9f:4e:0c:07:c1: f5:12:14:80:df:1d:60:51:f5:02:7a:ed:c5:0f:07:26:25:ca: 5e:aa:ee:85:c8:d5:e5:f4:9a:6a:cc:d4:6e:88:12:2e:11:17: 95:fc:c1:0e:ba:60:b0:d9:25:63:64:ca:63:26:d7:b0:86:ed: b0:da:fe:de:36:f0:61:03:7c:d2:3f:92:5e:68:7d:3f:ee:aa: 1c:9c:9b:15:aa:11:56:85:0c:fa:1e:8c:29:f9:2c:0a:ee:64: d4:b7:0a:ea:2a:e5:04:15:cb:00:bc:fa:e0:87:73:38:0f:ce: 9b:9e:a8:40:a7:96:9d:79:36:78:bb:b9:19:9a:19:b3:d0:bd: ba:67:65:99:f8:f4:0d:3e:a4:60:72:83:10:3d:87:a3:4c:98: d1:69:04:92:8b:4a:41:c3:d9:15:8a:dc:23:15:1b:85:59:7e: 4e:f1:6d:f7:ed:64:39:c9:aa:10:75:9b:fe:f3:46:eb:87:9d: 8d:70:25:4e:e4:13:39:9f:d2:f5:30:cf:4d:c7:8c:73:f7:36: e7:ed:5c:c6:9f:de:e1:cb:61:26:c7:7c:70:99:1a:ee:ce:5d: 53:0a:08:93:48:4f:7c:9c:77:f1:46:82:34:a5:9e:31:40:df: ff:bd:4f:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WwSEh8ZPCXuC9b/TxdHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2M1YjBkN2MwYTljZDI0YjczY2RjYjkyYzg3NDZlODVhNGE1YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kvpwatoSbTBj47MZS0NEPfcGl1n yRQyNuyvEYWKV/fvXcdJ5QdvXg+BniEj8rZ0/YOTnIOsrFeQzQ02lwFw9ZlLwmDw X4t08/cxqDigWhrAuFoylWE1YY5UzHrMX3zsQC1lq0caJm/0KD5mJSasgib8+18f DLpY1EBWs3gORdwCf88aHfevZH7pmjJByyhLiM/T+IGBwKFA9y+u9TFIf+XY+Mwm zyHDN17BBb6TwHxHfmCCOAPvAebph6LcD8hSY01be5iiecKZyuPJVb2kR+xgzzYB tYMHpsfwbYTZl4CEhbruR2Z1h6OdcqHS6osI4G9YJRsF3OjdKz0tGRt9fwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDPFsNfAqc0ktzzcuSyHRuhaSluPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzI1ODFm NC04NDEwLTRhNDMtOTE4Ni0wZmFiMjI2OWVhOGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvMjU4MWY0 LTg0MTAtNGE0My05MTg2LTBmYWIyMjY5ZWE4ZS8xL004V3cxOENwelNTM1BOeTVM SWRHNkZwS1c0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw5VrMA0GCSqGSIb3DQEBCwUAA4IBAQBBJxkA JCwI9j/wkZnKn04MB8H1EhSA3x1gUfUCeu3FDwcmJcpequ6FyNXl9JpqzNRuiBIu EReV/MEOumCw2SVjZMpjJtewhu2w2v7eNvBhA3zSP5JeaH0/7qocnJsVqhFWhQz6 Howp+SwK7mTUtwrqKuUEFcsAvPrgh3M4D86bnqhAp5adeTZ4u7kZmhmz0L26Z2WZ +PQNPqRgcoMQPYejTJjRaQSSi0pBw9kVitwjFRuFWX5O8W337WQ5yaoQdZv+80br h52NcCVO5BM5n9L1MM9Nx4xz9zbn7VzGn97hy2Emx3xwmRruzl1TCgiTSE98nHfx RoI0pZ4xQN//vU/Z -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:11 2026 by rpki-client