This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer (raw, json) Hash identifier: RGv58mBxo2216NKAsJsGB5FYaQemfiAmpjXMg3hvHfQ= Subject key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB33F960B924A40EDE2ABB43339FD1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.183.16.0/22 IP: 2a0e:7400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:33:f9:60:b9:24:a4:0e:de:2a:bb:43:33:9f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=311f85188d082fd5640b5c3fe1221f60c501edb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:32:8c:64:53:77:e6:a3:74:af:e4:08:82: 99:da:ee:8f:62:72:c3:3a:a1:81:bc:67:53:71:1c: 36:82:47:8a:ab:06:f0:50:84:2d:7e:6c:19:d4:bb: 49:35:85:f5:29:a2:de:4d:24:cf:fd:3d:24:cc:64: ef:b5:a5:5f:25:09:af:9d:63:1a:1d:ce:9c:73:d8: 82:fe:fa:16:54:e4:fa:1a:ea:06:af:8e:be:67:0c: a2:6c:24:34:ab:12:63:db:c3:7f:1d:05:bc:94:8a: 2d:c7:88:3e:38:79:09:04:a6:a0:ee:9b:49:06:a2: 21:44:9f:44:fe:0b:cf:68:99:b7:70:0f:91:64:6a: 9e:47:82:a8:12:8f:79:86:a2:1f:51:11:f4:62:c7: 72:31:fd:91:d2:e7:a5:f1:4c:7f:96:f7:5f:94:6a: 1f:96:20:57:f0:47:69:82:8b:0f:19:ab:81:ca:4b: de:b2:ec:f9:ef:4f:98:68:21:a3:4c:be:aa:7f:4d: 64:c2:4e:20:34:2e:a4:08:f0:87:fd:9f:51:a8:c1: eb:63:b4:d7:af:ca:1f:7e:45:27:06:1c:00:4a:6e: 67:f3:7e:56:0c:a1:31:06:c8:69:b6:cb:2c:b3:06: 5a:ba:3f:af:fc:1e:f4:a1:bd:1a:d6:f3:79:79:94: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.16.0/22 IPv6: 2a0e:7400::/29 Signature Algorithm: sha256WithRSAEncryption 30:76:a3:1f:3b:8d:70:fc:24:91:07:16:6c:6d:52:14:1e:c6: 60:f1:61:01:82:86:a0:a4:6f:ee:b8:21:dd:16:8f:67:aa:13: 22:a5:c7:a3:3b:16:3b:d4:f6:d2:29:84:0c:98:aa:2e:8b:98: 12:39:90:43:7c:05:28:c4:2e:3d:15:04:38:82:3f:14:6e:fa: a0:6c:41:99:d9:95:56:74:72:83:a5:37:de:b9:58:04:49:b8: 8b:0b:e2:cd:49:c2:d7:92:14:75:d1:9d:03:08:a9:f4:62:4a: e1:62:54:9e:3d:d1:58:29:4b:15:59:2b:e8:d7:a6:e3:07:9d: ae:01:89:67:81:b9:86:7d:db:3b:42:3e:7e:d0:c4:c3:8a:c2: b5:9f:73:fd:35:29:f7:64:e7:90:a0:a2:61:8c:90:14:9d:97: 25:b2:ab:2b:04:cd:18:77:76:19:37:20:9e:39:18:89:4a:18: b9:43:74:9d:2b:5e:4d:21:95:34:be:5f:22:b3:a1:89:d8:50: 47:9f:b9:06:05:0a:be:8a:2b:10:d0:2d:5b:59:77:98:6e:01: 1d:1e:21:dd:f9:de:e3:1a:7f:ee:3c:91:4b:e1:1c:ab:98:a3: 6b:72:97:4f:98:d2:59:c0:5e:af:7f:51:d2:15:a8:4c:05:02: 7f:82:9d:77 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9yzP5YLkkpA7eKrtDM5/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTFmODUxODhkMDgyZmQ1NjQwYjVjM2ZlMTIyMWY2MGM1MDFlZGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkEyjGRTd+ajdK/kCIKZ2u6PYnLD OqGBvGdTcRw2gkeKqwbwUIQtfmwZ1LtJNYX1KaLeTSTP/T0kzGTvtaVfJQmvnWMa Hc6cc9iC/voWVOT6GuoGr46+ZwyibCQ0qxJj28N/HQW8lIotx4g+OHkJBKag7ptJ BqIhRJ9E/gvPaJm3cA+RZGqeR4KoEo95hqIfURH0YsdyMf2R0uel8Ux/lvdflGof liBX8EdpgosPGauBykvesuz570+YaCGjTL6qf01kwk4gNC6kCPCH/Z9RqMHrY7TX r8offkUnBhwASm5n835WDKExBshptsssswZauj+v/B70ob0a1vN5eZRAOQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDEfhRiNCC/VZAtcP+EiH2DFAe21MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzhmYzM5 NS1iNjc0LTQxMzctYmM3NS05YmJkMWVlYmUzM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvOGZjMzk1 LWI2NzQtNDEzNy1iYzc1LTliYmQxZWViZTMzZS8xL01SLUZHSTBJTDlWa0Mxd180 U0lmWU1VQjdiVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbcQMA0EAgACMAcDBQMqDnQAMA0GCSqGSIb3 DQEBCwUAA4IBAQAwdqMfO41w/CSRBxZsbVIUHsZg8WEBgoagpG/uuCHdFo9nqhMi pcejOxY71PbSKYQMmKoui5gSOZBDfAUoxC49FQQ4gj8UbvqgbEGZ2ZVWdHKDpTfe uVgESbiLC+LNScLXkhR10Z0DCKn0YkrhYlSePdFYKUsVWSvo16bjB52uAYlngbmG fds7Qj5+0MTDisK1n3P9NSn3ZOeQoKJhjJAUnZclsqsrBM0Yd3YZNyCeORiJShi5 Q3SdK15NIZU0vl8is6GJ2FBHn7kGBQq+iisQ0C1bWXeYbgEdHiHd+d7jGn/uPJFL 4RyrmKNrcpdPmNJZwF6vf1HSFahMBQJ/gp13 -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:40 2026 by rpki-client