This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer File: RMO0TLvE89paS0KFyW6jy1DU0HM.cer (raw, json) Hash identifier: ZXZ1xT1GqPYPm3+iph4GWsJyxkMjLc4D7RDf+zil4qk= Subject key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A223EF2240A3FA15F9B5567207A12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.249.64.0/22 IP: 2a0c:35c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:22:3e:f2:24:0a:3f:a1:5f:9b:55:67:20:7a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:e0:28:4b:97:e3:07:23:b1:25:8a:d1:ea: 4d:a3:43:32:fe:9c:1e:69:9e:5c:14:e6:c8:e0:03: 29:91:8c:25:c9:8b:11:af:bf:9c:db:50:da:aa:a9: 4f:ff:20:75:8c:ae:0b:c3:73:be:c0:e9:14:22:56: 3d:71:c9:55:83:ec:b5:a7:6b:7d:27:c6:bc:8d:3c: fc:c6:2a:3e:81:4f:d1:87:3f:aa:10:44:5f:6f:18: 7c:f0:69:ce:d4:cc:f4:c3:2e:1d:d7:33:15:9b:ce: 68:f0:98:60:45:b5:cd:04:18:36:d9:52:ae:6b:7a: 9c:7c:f1:a5:96:6f:64:cf:ce:a5:a4:b2:2a:3b:b1: f1:74:98:33:f7:26:f7:7d:ff:47:23:94:c4:e7:88: 1d:e6:55:e4:2f:b0:57:c8:f1:b2:b1:d9:d5:9e:b4: 64:12:ca:4e:cf:f7:ad:de:54:5a:66:78:fc:95:0e: a2:d2:7f:1f:3c:ac:95:85:f9:63:b9:db:06:9a:7b: e7:c7:d4:e8:d6:cd:da:49:99:81:81:2e:de:f6:e7: fd:e4:1c:a2:4f:2b:46:9b:0d:f1:c5:64:7e:67:3e: 9a:50:71:60:1d:a4:7e:d8:bf:85:88:4e:47:a0:aa: e4:f8:0c:8e:a5:bf:59:bf:e3:e6:57:71:41:ef:8b: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.64.0/22 IPv6: 2a0c:35c0::/29 Signature Algorithm: sha256WithRSAEncryption 91:1d:df:5f:6e:a1:45:7d:96:00:c4:b5:cb:df:a6:d3:28:1d: 62:6d:00:bf:d9:7a:9d:35:38:f5:3e:b2:7a:19:97:26:b2:88: 8e:5b:a8:f1:2c:62:27:32:4a:36:22:31:77:92:8b:fc:d1:1a: c6:41:59:86:ee:6f:e4:6e:a2:ad:e9:41:68:d8:26:7f:17:ca: 31:43:42:6d:50:04:a7:ce:17:0c:0c:9a:7f:01:d6:6c:61:4e: eb:81:47:9e:12:f8:40:dc:65:7d:0a:b0:c3:09:48:0e:01:6a: b7:3d:a9:cc:9f:f4:a3:5d:cc:81:4f:7a:57:14:c7:89:60:9e: c1:7f:6e:01:a3:72:cc:e7:ae:fd:a8:16:27:05:e7:59:93:b8: ca:e8:09:7c:bf:e4:a0:c3:ef:4d:8a:b7:5f:3e:41:54:c3:84: 9d:bb:cb:2c:65:dd:4f:a9:8a:f8:d0:33:95:03:32:ab:51:fa: ee:e1:d9:30:e9:bd:ea:bb:f4:f7:d5:17:64:21:ab:8e:59:e1: e9:20:62:49:e4:cd:21:61:21:c6:80:d4:70:cc:a4:df:95:06: cd:2f:a8:4c:7a:d4:7e:ee:d2:97:f4:88:ec:cf:c5:f5:d6:2d: 89:6f:aa:8f:8f:cb:4e:8b:58:8e:14:e4:ec:c3:19:20:1b:6a: 72:03:6d:b0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WiI+8iQKP6Ffm1VnIHoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGMzYjQ0Y2JiYzRmM2RhNWE0YjQyODVjOTZlYTNjYjUwZDRkMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrPgKEuX4wcjsSWK0epNo0My/pwe aZ5cFObI4AMpkYwlyYsRr7+c21DaqqlP/yB1jK4Lw3O+wOkUIlY9cclVg+y1p2t9 J8a8jTz8xio+gU/Rhz+qEERfbxh88GnO1Mz0wy4d1zMVm85o8JhgRbXNBBg22VKu a3qcfPGllm9kz86lpLIqO7HxdJgz9yb3ff9HI5TE54gd5lXkL7BXyPGysdnVnrRk EspOz/et3lRaZnj8lQ6i0n8fPKyVhfljudsGmnvnx9To1s3aSZmBgS7e9uf95Byi TytGmw3xxWR+Zz6aUHFgHaR+2L+FiE5HoKrk+AyOpb9Zv+PmV3FB74s2lwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFETDtEy7xPPaWktChcluo8tQ1NBzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkL2IyODRh My1jMmYxLTQyMDUtYjFkNS00Nzk3NzY2OTk1OGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvYjI4NGEz LWMyZjEtNDIwNS1iMWQ1LTQ3OTc3NjY5OTU4ZC8xL1JNTzBUTHZFODlwYVMwS0Z5 VzZqeTFEVTBITS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuflAMA0EAgACMAcDBQMqDDXAMA0GCSqGSIb3 DQEBCwUAA4IBAQCRHd9fbqFFfZYAxLXL36bTKB1ibQC/2XqdNTj1PrJ6GZcmsoiO W6jxLGInMko2IjF3kov80RrGQVmG7m/kbqKt6UFo2CZ/F8oxQ0JtUASnzhcMDJp/ AdZsYU7rgUeeEvhA3GV9CrDDCUgOAWq3PanMn/SjXcyBT3pXFMeJYJ7Bf24Bo3LM 5679qBYnBedZk7jK6Al8v+Sgw+9NirdfPkFUw4Sdu8ssZd1PqYr40DOVAzKrUfru 4dkw6b3qu/T31RdkIauOWeHpIGJJ5M0hYSHGgNRwzKTflQbNL6hMetR+7tKX9Ijs z8X11i2Jb6qPj8tOi1iOFOTswxkgG2pyA22w -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:44 2026 by rpki-client