This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer (raw, json) Hash identifier: EU7L1eB5USaBg+2MT/h1M0JP+rjAYMRVaJIFu4SOmOg= Subject key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECBD6D9F93F1568495DD6AEE037124 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48943 IP: 94.136.0.0/19 IP: 185.36.16.0/22 IP: 185.202.148.0 -- 185.202.150.255 IP: 2a02:ab8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bd:6d:9f:93:f1:56:84:95:dd:6a:ee:03:71:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:c9:f5:bc:57:87:16:c1:ce:c1:c8:64:87: 17:37:b5:f2:64:d7:bb:57:b9:97:3d:48:15:b7:7d: db:31:a7:ab:0e:e1:fe:4c:54:16:5b:5a:d3:0e:30: 71:0f:7b:7e:43:c0:71:cc:d8:b8:41:69:80:12:cd: 49:d5:80:9b:93:58:ba:4c:68:84:4a:ea:fc:1c:ec: 60:70:2e:27:1d:14:53:d6:21:52:84:fa:8e:a8:4e: f4:78:ff:cc:21:c8:cc:6b:08:d4:2f:18:18:09:03: a8:fd:45:4e:16:19:c4:90:be:97:a9:1e:68:dd:d6: 77:02:51:20:df:26:37:16:6b:9c:2f:d6:0f:df:84: 1f:b5:03:ca:eb:8c:12:50:dd:65:39:ed:21:e9:13: 32:c4:d9:78:d7:22:ec:80:69:1b:a6:11:f4:9f:af: 0d:63:42:52:7f:2e:9f:70:b5:7c:9b:fb:a1:a1:f3: a4:e6:7b:41:c5:6d:9b:81:b1:04:24:78:13:d9:0b: 2b:1f:c1:4e:ac:74:ab:19:42:b1:e8:99:59:03:f2: 75:11:96:ff:a5:c2:46:6b:67:32:fb:78:b0:6a:07: ff:70:3c:30:26:ea:d1:58:ba:90:03:34:6e:eb:bf: d1:7f:ff:27:0a:d7:fd:59:17:ed:ea:75:41:e4:94: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.0.0/19 185.36.16.0/22 185.202.148.0-185.202.150.255 IPv6: 2a02:ab8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48943 Signature Algorithm: sha256WithRSAEncryption 2c:51:3a:df:70:a0:c9:ce:d5:09:61:60:1b:67:c4:b8:54:aa: d3:d6:62:77:b4:61:25:1c:03:45:fa:56:ca:81:d8:65:1e:6a: ab:e9:20:d6:ca:68:23:19:ad:93:2d:5b:d6:76:46:b8:03:ea: 9c:17:bc:29:33:e6:aa:b8:08:32:35:4a:1b:52:2c:8d:07:1d: 3e:bf:a2:bf:4d:92:ba:1f:16:c4:23:a5:bd:1f:32:df:1f:09: c5:bf:f5:b1:b6:a6:54:ce:a5:19:6c:8a:c0:2a:07:e3:10:07: 2c:7f:ca:05:fc:ae:14:8c:3b:9c:e6:f2:fd:ed:d5:de:22:b1: 2d:a5:01:26:6d:3f:f4:9a:c8:6b:48:a9:0a:2c:05:a9:5e:b2: 0b:27:1b:a5:a2:de:27:ab:40:13:6e:10:06:42:8f:ec:22:4b: 62:63:69:04:16:51:7f:47:8b:c6:3a:24:7e:85:59:2f:34:f6: 3f:17:2b:22:b3:fe:42:80:52:e0:3b:9d:59:8a:e7:48:2a:79: e1:3b:8e:60:6b:c4:66:a5:0c:57:3a:d2:ea:6d:1e:91:9e:95: f5:f0:05:e7:b2:c9:4e:b2:e9:91:7a:75:79:ea:1b:04:30:a6: 0a:46:22:78:53:a0:03:ed:a8:98:eb:b5:53:85:e5:54:da:da: 90:52:ae:be -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt57L1tn5PxVoSV3WruA3EkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2Y2NTBjMGEwZjE2NTE1YTcyZGVhNjAxY2U5Y2EyZDRjMTY0OTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn/J9bxXhxbBzsHIZIcXN7XyZNe7 V7mXPUgVt33bMaerDuH+TFQWW1rTDjBxD3t+Q8BxzNi4QWmAEs1J1YCbk1i6TGiE Sur8HOxgcC4nHRRT1iFShPqOqE70eP/MIcjMawjULxgYCQOo/UVOFhnEkL6XqR5o 3dZ3AlEg3yY3FmucL9YP34QftQPK64wSUN1lOe0h6RMyxNl41yLsgGkbphH0n68N Y0JSfy6fcLV8m/uhofOk5ntBxW2bgbEEJHgT2QsrH8FOrHSrGUKx6JlZA/J1EZb/ pcJGa2cy+3iwagf/cDwwJurRWLqQAzRu67/Rf/8nCtf9WRft6nVB5JQMpQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFDP2UMCg8WUVpy3qYBzpyi1MFkmTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxL2ZlMzRk NC01OWI4LTQzMjQtYWQyNy04NTA2OTEyNWQzYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvZmUzNGQ0 LTU5YjgtNDMyNC1hZDI3LTg1MDY5MTI1ZDNiZi8xL01fWlF3S0R4WlJXbkxlcGdI T25LTFV3V1NaTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQFXogAAwQCuSQQMAwDBAK5ypQDBAC5ypYwDQQC AAIwBwMFAyoCCrgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAL8vMA0GCSqGSIb3 DQEBCwUAA4IBAQAsUTrfcKDJztUJYWAbZ8S4VKrT1mJ3tGElHANF+lbKgdhlHmqr 6SDWymgjGa2TLVvWdka4A+qcF7wpM+aquAgyNUobUiyNBx0+v6K/TZK6HxbEI6W9 HzLfHwnFv/WxtqZUzqUZbIrAKgfjEAcsf8oF/K4UjDuc5vL97dXeIrEtpQEmbT/0 mshrSKkKLAWpXrILJxulot4nq0ATbhAGQo/sIktiY2kEFlF/R4vGOiR+hVkvNPY/ Fysis/5CgFLgO51ZiudIKnnhO45ga8RmpQxXOtLqbR6RnpX18AXnsslOsumRenV5 6hsEMKYKRiJ4U6AD7aiY67VTheVU2tqQUq6+ -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:15 2026 by rpki-client