This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer File: RPMwC82ETWB1L-Xfst4pmWbpuPY.cer (raw, json) Hash identifier: PU3uBe6JbKXK86UAygZGBArodIuzj6K3KCAgazmeHwQ= Subject key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775904CAE09E3955848A0A62C651CAA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 157.247.0.0/16 IP: 192.102.17.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:04:ca:e0:9e:39:55:84:8a:0a:62:c6:51:ca:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:cb:bb:b5:e3:1d:b5:4a:df:66:d5:2e:7e: 9e:8f:da:53:e9:0f:a4:ee:fa:d7:3b:7f:66:bd:2a: 71:6a:10:35:5d:0f:65:f3:81:f0:65:ad:7f:0f:73: b9:e9:07:c6:c8:1f:8f:5d:2b:de:52:96:73:0f:c6: cd:ac:af:ee:50:70:22:f5:35:cd:83:0d:ef:54:86: 5c:80:cb:cb:c6:eb:65:28:25:04:48:dd:e8:08:3b: a2:ca:8c:13:62:7c:c9:b5:5d:48:4b:c9:82:f8:92: aa:c6:27:f1:a7:04:d4:cc:a7:85:f1:4a:1b:3e:1d: b4:c3:1f:35:bd:1e:44:ac:f4:e1:81:7c:e6:8a:c8: 01:90:9f:15:aa:86:7e:25:59:46:1e:11:b1:64:f0: 8d:5c:99:8a:44:a6:75:04:12:bb:bc:15:6b:8c:7d: 5a:60:43:bf:8e:6e:ce:12:3c:0d:e8:3d:65:00:ec: 99:e1:22:84:98:fa:06:6e:db:69:63:e3:79:36:32: a7:d6:6b:b2:a9:5d:2d:66:b3:e0:9e:9d:d4:71:c2: fc:f8:5c:94:91:0d:37:11:ae:b6:48:7d:61:9f:89: 63:29:1c:b0:99:bd:cf:2c:76:9d:92:37:29:c6:12: 3d:80:ec:b2:81:40:e4:a5:b2:7d:60:af:81:e8:d5: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.247.0.0/16 192.102.17.0/24 Signature Algorithm: sha256WithRSAEncryption 40:8a:ab:c8:72:6f:fa:23:81:8e:86:ca:aa:de:ca:0f:ee:0d: eb:78:6f:0b:0e:4d:48:25:50:9d:0b:13:a0:1d:29:cd:a7:e3: d4:88:57:9c:5c:af:61:a5:cc:62:78:82:4d:9d:af:dc:3c:b3: 7a:35:5f:68:96:fc:f2:33:32:64:41:79:60:16:0a:d5:ef:71: 59:1d:d5:39:e0:b3:24:f6:39:fc:4a:2a:6a:46:6f:c4:e1:c1: 2d:47:da:30:83:10:63:99:d5:f3:c8:46:55:5a:73:6d:91:43: 6c:de:59:fe:fe:e3:56:29:d8:e6:20:fb:45:76:18:69:9f:e0: 56:48:e7:bd:32:f8:65:4d:ff:52:c8:bd:68:a9:38:d4:98:72: af:06:b5:da:5e:7d:5b:e5:9c:a2:36:d0:0a:37:07:78:38:ce: 46:90:94:ed:9e:4e:53:ae:07:d8:05:28:6e:2b:e1:34:36:94: fe:cf:6b:2c:8b:23:8f:37:35:0d:41:3f:7a:a5:ec:49:01:8c: 0f:9d:db:50:4d:3f:85:d4:69:46:f8:65:7b:95:2e:10:f4:a0: 76:30:97:c8:3a:be:e9:d1:68:9d:09:dc:8f:06:61:56:86:c2: a1:b8:18:84:e0:e4:f4:ac:3f:fb:97:18:cc:16:0a:2a:80:7c: f5:ff:c5:3a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt3WQTK4J45VYSKCmLGUcqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGYzMzAwYmNkODQ0ZDYwNzUyZmU1ZGZiMmRlMjk5OTY2ZTliOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7Lu7XjHbVK32bVLn6ej9pT6Q+k 7vrXO39mvSpxahA1XQ9l84HwZa1/D3O56QfGyB+PXSveUpZzD8bNrK/uUHAi9TXN gw3vVIZcgMvLxutlKCUESN3oCDuiyowTYnzJtV1IS8mC+JKqxifxpwTUzKeF8Uob Ph20wx81vR5ErPThgXzmisgBkJ8VqoZ+JVlGHhGxZPCNXJmKRKZ1BBK7vBVrjH1a YEO/jm7OEjwN6D1lAOyZ4SKEmPoGbttpY+N5NjKn1muyqV0tZrPgnp3UccL8+FyU kQ03Ea62SH1hn4ljKRywmb3PLHadkjcpxhI9gOyygUDkpbJ9YK+B6NX9ZQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFETzMAvNhE1gdS/l37LeKZlm6bj2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2M0ODM0 MS1iOGYwLTQwZTktOWFhMy04MTQ4NGY3YTc5YmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvYzQ4MzQx LWI4ZjAtNDBlOS05YWEzLTgxNDg0ZjdhNzliYS8xL1JQTXdDODJFVFdCMUwtWGZz dDRwbVdicHVQWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAnfcDBADAZhEwDQYJKoZIhvcNAQELBQADggEB AECKq8hyb/ojgY6Gyqreyg/uDet4bwsOTUglUJ0LE6AdKc2n49SIV5xcr2GlzGJ4 gk2dr9w8s3o1X2iW/PIzMmRBeWAWCtXvcVkd1TngsyT2OfxKKmpGb8ThwS1H2jCD EGOZ1fPIRlVac22RQ2zeWf7+41Yp2OYg+0V2GGmf4FZI570y+GVN/1LIvWipONSY cq8GtdpefVvlnKI20Ao3B3g4zkaQlO2eTlOuB9gFKG4r4TQ2lP7PayyLI483NQ1B P3ql7EkBjA+d21BNP4XUaUb4ZXuVLhD0oHYwl8g6vunRaJ0J3I8GYVaGwqG4GITg 5PSsP/uXGMwWCiqAfPX/xTo= -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:15 2026 by rpki-client