This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer File: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer (raw, json) Hash identifier: 6+o3WKAtnVG91ce9nrDIHfiUZxvNCbWeiLkEcghMh/8= Subject key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113E6764ED96144F47F3F318DC934B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56861 IP: 176.56.144.0 -- 176.56.155.255 IP: 185.63.236.0/22 IP: 2a03:d20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3e:67:64:ed:96:14:4f:47:f3:f3:18:dc:93:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32b1b94b073c547991c20f842eadec167ec19e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:9f:e1:8f:39:e8:75:41:aa:ec:f8:56:3f: b6:b0:64:76:f2:a3:ff:14:df:16:c0:7e:04:50:7a: b4:7b:9a:a5:21:8c:55:7c:43:22:08:f6:db:24:2a: be:3a:cc:d5:4a:d6:d7:2a:ec:68:ce:5c:1d:20:31: d3:d9:35:88:ac:86:7c:bd:6b:3a:60:3e:6a:d4:d2: 00:20:f8:ac:ba:25:e7:c8:18:0a:37:ab:9d:81:15: ab:86:68:20:07:d3:8f:b1:44:6a:02:4a:7e:27:dd: 66:3e:3b:e7:7b:dc:33:7f:34:07:15:41:e4:63:76: a6:db:98:26:88:de:fd:75:82:01:b7:86:53:fc:30: 31:0f:19:36:64:35:62:ff:56:01:f3:78:db:42:41: bb:91:54:ef:a3:80:8c:42:1a:b2:24:d7:11:c3:b6: f0:68:9f:41:fd:d3:21:86:e9:c4:2b:34:41:f5:9a: eb:ba:e0:96:0e:a2:1b:bf:1f:cf:3f:1c:bf:45:c2: 2b:44:5c:ba:54:a4:be:9f:52:e2:40:2a:c9:9c:8b: 75:17:b3:32:1c:bd:14:29:65:41:56:1b:99:1b:af: bd:e6:5b:4d:34:1e:21:2f:10:5a:65:a0:1c:7e:76: 10:3e:4a:44:c6:2b:7b:7a:89:97:ed:8e:7e:af:61: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.56.144.0-176.56.155.255 185.63.236.0/22 IPv6: 2a03:d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56861 Signature Algorithm: sha256WithRSAEncryption 7e:72:0e:ae:49:7c:71:d1:3a:49:e7:5d:d0:c3:85:fa:bb:80: fd:7a:2c:bc:03:25:37:4a:56:1c:3b:9e:15:f8:cc:c8:5d:c6: 02:27:00:18:24:c0:da:26:bb:b9:1d:d2:05:fd:1f:9b:e3:0e: 0f:d8:cd:64:c5:ac:66:32:f0:d9:79:03:4c:ec:39:e2:da:66: 5b:50:e2:83:81:f7:99:fa:e1:18:6a:55:41:37:f5:3d:f3:93: bc:f8:d7:c5:fb:62:41:47:ab:95:dd:84:d9:79:28:9d:3e:57: 2f:76:7e:98:9f:5b:6b:e2:cf:55:ea:61:04:d2:53:96:ae:ec: df:56:84:c8:04:6d:42:ff:15:f9:67:62:df:30:4d:ab:9b:29: 6c:5c:6b:8a:d6:94:19:11:df:d4:b4:c3:f7:73:1b:61:20:c9: 96:7d:b4:9c:71:0e:6f:53:ac:ca:ab:19:23:a6:f6:82:82:e9: 10:2c:31:9f:f9:af:f6:ca:c3:e1:09:2b:e8:bb:83:0b:51:a4: 37:07:35:5b:64:7a:35:99:d1:00:b5:39:ca:9a:e3:e0:61:44: ab:8e:8a:41:e1:c4:42:47:13:9f:24:23:96:56:52:8d:74:5e: 67:32:3f:6a:9f:a9:15:f2:b0:79:0c:9a:85:a7:73:f5:11:4d: cc:21:6a:29 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt5ET5nZO2WFE9H8/MY3JNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmIxYjk0YjA3M2M1NDc5OTFjMjBmODQyZWFkZWMxNjdlYzE5ZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqaf4Y856HVBquz4Vj+2sGR28qP/ FN8WwH4EUHq0e5qlIYxVfEMiCPbbJCq+OszVStbXKuxozlwdIDHT2TWIrIZ8vWs6 YD5q1NIAIPisuiXnyBgKN6udgRWrhmggB9OPsURqAkp+J91mPjvne9wzfzQHFUHk Y3am25gmiN79dYIBt4ZT/DAxDxk2ZDVi/1YB83jbQkG7kVTvo4CMQhqyJNcRw7bw aJ9B/dMhhunEKzRB9ZrruuCWDqIbvx/PPxy/RcIrRFy6VKS+n1LiQCrJnIt1F7My HL0UKWVBVhuZG6+95ltNNB4hLxBaZaAcfnYQPkpExit7eomX7Y5+r2FVbQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFDKxuUsHPFR5kcIPhC6t7BZ+wZ40MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzBhMjA2 ZS0xNzg4LTQzNmItOTcyOC1iZWQ0Yjk5YTdiYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvMGEyMDZl LTE3ODgtNDM2Yi05NzI4LWJlZDRiOTlhN2JiNC8xL01yRzVTd2M4VkhtUndnLUVM cTNzRm43Qm5qUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBASwOJADBAKwOJgDBAK5P+wwDQQCAAIwBwMF ACoDDSAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAN4dMA0GCSqGSIb3DQEBCwUA A4IBAQB+cg6uSXxx0TpJ513Qw4X6u4D9eiy8AyU3SlYcO54V+MzIXcYCJwAYJMDa Jru5HdIF/R+b4w4P2M1kxaxmMvDZeQNM7Dni2mZbUOKDgfeZ+uEYalVBN/U985O8 +NfF+2JBR6uV3YTZeSidPlcvdn6Yn1tr4s9V6mEE0lOWruzfVoTIBG1C/xX5Z2Lf ME2rmylsXGuK1pQZEd/UtMP3cxthIMmWfbSccQ5vU6zKqxkjpvaCgukQLDGf+a/2 ysPhCSvou4MLUaQ3BzVbZHo1mdEAtTnKmuPgYUSrjopB4cRCRxOfJCOWVlKNdF5n Mj9qn6kV8rB5DJqFp3P1EU3MIWop -----END CERTIFICATE-----Generated at Mon Jan 26 10:56:05 2026 by rpki-client