This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer File: MBlcO7BQWGtfTlAEEYAHxIs06uU.cer (raw, json) Hash identifier: wEAbE+TfOCVO/TZMCrLhSJZETIXWhtWCNhEieg8/pKc= Subject key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E387D824F540F7A4A2870C820B133E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.91.156.0/22 IP: 2a0e:1340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7d:82:4f:54:0f:7a:4a:28:70:c8:20:b1:33:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30195c3bb050586b5f4e5004118007c48b34eae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:0f:03:94:d5:79:31:b2:e5:f5:81:ec:1c: 01:6d:9a:89:1f:90:9f:ac:d5:b7:02:fd:0d:62:80: 6b:d9:6f:94:33:9d:15:2a:c5:3a:b5:ee:c9:29:59: ce:1c:a3:55:57:44:a1:98:fe:8d:0d:23:c4:99:e3: 96:bd:a4:76:da:30:71:af:a8:9d:e4:75:de:56:e1: cb:38:9a:ee:0e:50:20:90:33:7b:12:26:c2:e6:40: d7:e6:15:7b:4c:5b:ae:3f:91:0c:f7:2c:de:5e:1e: 74:9e:83:4f:32:7a:cb:0f:4c:e9:d6:85:f1:2f:41: e2:18:29:f6:4f:6b:45:07:0b:68:5e:1a:16:fe:44: c4:1b:dc:4a:35:b9:3a:f4:a8:f6:75:c1:a2:a7:b3: 93:b5:e8:54:85:3e:aa:1d:db:7b:da:6a:40:0d:d1: 93:53:49:5a:23:ed:0b:cb:b7:e2:de:32:e7:cd:97: 80:0e:f7:31:5b:3c:33:ba:4a:0e:7f:cb:17:b1:2e: 20:3d:af:37:df:9a:d6:7d:06:dc:e6:8b:1d:0d:91: d1:06:4d:33:f9:47:62:38:84:56:25:c3:77:9e:97: 3e:69:a6:e2:89:ba:14:f1:94:4c:1a:c7:48:a7:af: 28:5d:2a:07:a6:96:da:86:aa:19:96:34:45:43:f6: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.156.0/22 IPv6: 2a0e:1340::/29 Signature Algorithm: sha256WithRSAEncryption 17:60:78:a5:55:88:06:06:c7:a9:c2:21:ae:b8:32:16:cf:db: 37:e2:27:12:6d:66:5b:0e:e6:47:a8:52:3c:e1:83:fb:df:04: d2:c4:19:dd:81:f0:9b:5b:df:68:98:1d:93:4f:dd:2e:d4:17: 62:09:10:5b:7f:ac:3a:a0:37:cd:96:f6:cf:58:d3:33:f7:18: 22:c5:bf:3e:c5:b7:3c:07:f3:b3:0d:59:f8:81:a4:5f:58:31: 02:df:c6:73:aa:f2:9e:31:14:c2:3e:85:2f:2b:0c:4c:9a:a1: 1c:83:31:1f:90:c9:e9:5b:e2:af:c9:0e:98:0f:03:cd:5c:19: 07:e1:61:11:93:a2:19:6e:57:a2:06:60:01:c1:41:72:ef:18: d5:a3:4d:33:a5:ed:1a:3c:c5:bd:67:4b:49:5f:e2:1e:ec:90: 24:6d:88:97:90:7b:74:a0:a6:3b:f3:5f:3f:c1:cb:31:77:f1: 23:2b:71:ab:fe:13:80:e1:df:c7:1f:1d:c2:f8:72:2a:c3:23: 70:c6:b4:14:25:15:40:28:0e:48:5e:13:c7:f0:63:22:59:ca: 88:b5:fe:fc:c9:60:98:df:c6:c3:ac:28:e3:32:69:67:dc:56: 03:4a:77:f8:21:3c:64:4b:d6:6b:ba:46:46:d3:6c:85:06:b7: a2:27:7c:1a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OH2CT1QPekoocMggsTPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDE5NWMzYmIwNTA1ODZiNWY0ZTUwMDQxMTgwMDdjNDhiMzRlYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RsPA5TVeTGy5fWB7BwBbZqJH5Cf rNW3Av0NYoBr2W+UM50VKsU6te7JKVnOHKNVV0ShmP6NDSPEmeOWvaR22jBxr6id 5HXeVuHLOJruDlAgkDN7EibC5kDX5hV7TFuuP5EM9yzeXh50noNPMnrLD0zp1oXx L0HiGCn2T2tFBwtoXhoW/kTEG9xKNbk69Kj2dcGip7OTtehUhT6qHdt72mpADdGT U0laI+0Ly7fi3jLnzZeADvcxWzwzukoOf8sXsS4gPa8335rWfQbc5osdDZHRBk0z +UdiOIRWJcN3npc+aabiiboU8ZRMGsdIp68oXSoHppbahqoZljRFQ/ZAbwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDAZXDuwUFhrX05QBBGAB8SLNOrlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2M3NjI3 NS1kOGRhLTQ1MjMtODNhZC1iNDIxYzM4YjJmN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvYzc2Mjc1 LWQ4ZGEtNDUyMy04M2FkLWI0MjFjMzhiMmY3Zi8xL01CbGNPN0JRV0d0ZlRsQUVF WUFIeElzMDZ1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVucMA0EAgACMAcDBQMqDhNAMA0GCSqGSIb3 DQEBCwUAA4IBAQAXYHilVYgGBsepwiGuuDIWz9s34icSbWZbDuZHqFI84YP73wTS xBndgfCbW99omB2TT90u1BdiCRBbf6w6oDfNlvbPWNMz9xgixb8+xbc8B/OzDVn4 gaRfWDEC38ZzqvKeMRTCPoUvKwxMmqEcgzEfkMnpW+KvyQ6YDwPNXBkH4WERk6IZ bleiBmABwUFy7xjVo00zpe0aPMW9Z0tJX+Ie7JAkbYiXkHt0oKY7818/wcsxd/Ej K3Gr/hOA4d/HHx3C+HIqwyNwxrQUJRVAKA5IXhPH8GMiWcqItf78yWCY38bDrCjj Mmln3FYDSnf4ITxkS9ZrukZG02yFBreiJ3wa -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:20 2026 by rpki-client