This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer File: cMnQbFGt1oKQY_G2exddDAAB5zY.cer (raw, json) Hash identifier: 4Nq5t1K7Uu/SxVj1vJCWTaLdY7AJ84eGQ/41kx39h1A= Subject key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5ABB5B91F03704DCBF82EFDCD1D76F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216451 IP: 37.230.40.0/21 IP: 89.107.160.0/21 IP: 185.188.200.0/22 IP: 2a0b:2400::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:bb:5b:91:f0:37:04:dc:bf:82:ef:dc:d1:d7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c9d06c51add6829063f1b67b175d0c0001e736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:5f:7f:cb:f9:40:0a:59:e1:a4:ea:48:64: 91:c2:5d:a1:96:a7:9e:a8:ae:a7:87:8e:b1:d9:87: 86:ba:69:f5:9d:8b:3f:58:96:71:45:7e:ab:06:f8: c0:f0:54:b9:49:01:13:07:12:a6:1f:40:75:5e:1a: ef:38:55:3f:d6:7f:ce:8f:e1:bb:10:a9:d8:3b:e3: e8:81:c5:0d:72:4b:91:3c:6f:5b:e5:87:54:0f:c8: 66:7e:0f:57:ed:33:a7:21:5a:29:8d:db:68:18:06: 21:2c:33:84:08:a2:14:0f:20:f6:52:01:42:46:8d: d5:0b:9d:39:e4:a0:9a:7a:8d:67:bb:d0:f8:24:1f: 82:85:96:8c:e8:f9:72:96:4e:d2:4c:6a:50:c7:c9: a4:3b:85:fb:5c:53:be:30:4a:70:ca:8f:2d:cd:b9: e5:7b:04:64:e9:cb:49:84:f6:74:9f:90:45:e6:5f: f8:80:b9:c7:3b:01:1e:69:1e:59:4a:bc:9a:ad:7e: 26:9f:b7:21:c7:bb:0e:72:b6:6e:f4:87:0f:32:6a: c0:ce:db:9b:79:e5:63:0e:89:b5:86:ea:09:75:49: 0d:45:6e:e9:81:91:7c:db:8e:80:8d:b8:2b:49:30: ce:e2:fe:59:d0:9b:ed:d3:e4:95:3a:94:38:7e:b4: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.40.0/21 89.107.160.0/21 185.188.200.0/22 IPv6: 2a0b:2400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216451 Signature Algorithm: sha256WithRSAEncryption 3c:60:28:4e:2c:37:67:f5:7f:cf:8f:44:10:4f:80:43:59:ed: 57:03:db:15:26:d7:9b:2a:55:1a:73:75:f8:f8:3d:6f:e4:2b: ef:4b:9f:1a:c8:1e:75:f9:ea:ef:f6:2b:62:83:5d:53:d3:b5: 91:8d:d7:ae:9c:94:c6:5c:89:f5:e6:3e:d7:20:03:9c:f7:bc: 8d:b3:43:4b:08:a3:28:65:5a:af:41:d8:84:46:46:13:8b:0f: 0c:e2:b5:09:57:e4:64:18:50:fe:aa:bf:39:e0:6a:a6:ca:2c: 96:a3:cd:dd:49:8b:ed:e7:00:e4:49:53:3a:cd:2b:9b:5d:0a: cb:e7:bb:19:00:d5:69:8e:47:f2:dc:8f:af:a2:da:02:b9:55: 94:d6:13:4c:16:fe:d9:59:64:e3:11:c7:94:22:a4:9e:fa:98: f2:26:02:ed:8f:f7:8b:77:99:64:2a:f3:bd:23:91:53:ae:3a: a7:89:7a:f4:48:9c:a0:07:5e:93:a3:0f:52:05:16:98:9a:67: cb:fe:91:99:be:9e:6e:eb:c4:95:3e:70:18:14:97:0c:10:a8: 55:30:dd:49:cf:bc:2d:23:61:31:f2:c5:68:4c:84:16:ff:db: 01:a8:54:71:2b:c4:17:89:37:0c:ed:75:40:e7:71:1c:b0:dd: f9:a6:ec:56 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9WrtbkfA3BNy/gu/c0ddvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGM5ZDA2YzUxYWRkNjgyOTA2M2YxYjY3YjE3NWQwYzAwMDFlNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaBff8v5QApZ4aTqSGSRwl2hlqee qK6nh46x2YeGumn1nYs/WJZxRX6rBvjA8FS5SQETBxKmH0B1XhrvOFU/1n/Oj+G7 EKnYO+PogcUNckuRPG9b5YdUD8hmfg9X7TOnIVopjdtoGAYhLDOECKIUDyD2UgFC Ro3VC5055KCaeo1nu9D4JB+ChZaM6Plylk7STGpQx8mkO4X7XFO+MEpwyo8tzbnl ewRk6ctJhPZ0n5BF5l/4gLnHOwEeaR5ZSryarX4mn7chx7sOcrZu9IcPMmrAztub eeVjDom1huoJdUkNRW7pgZF8246AjbgrSTDO4v5Z0Jvt0+SVOpQ4frR7QwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHDJ0GxRrdaCkGPxtnsXXQwAAec2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzI4ZGQz MC1lYzA4LTRkYzgtYTFkMS01ZDNhODY0OTQ3NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvMjhkZDMw LWVjMDgtNGRjOC1hMWQxLTVkM2E4NjQ5NDc3NS8xL2NNblFiRkd0MW9LUVlfRzJl eGRkREFBQjV6WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJeYoAwQDWWugAwQCubzIMA0EAgACMAcDBQAq CyQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNgzANBgkqhkiG9w0BAQsFAAOC AQEAPGAoTiw3Z/V/z49EEE+AQ1ntVwPbFSbXmypVGnN1+Pg9b+Qr70ufGsgedfnq 7/YrYoNdU9O1kY3XrpyUxlyJ9eY+1yADnPe8jbNDSwijKGVar0HYhEZGE4sPDOK1 CVfkZBhQ/qq/OeBqpsoslqPN3UmL7ecA5ElTOs0rm10Ky+e7GQDVaY5H8tyPr6La ArlVlNYTTBb+2Vlk4xHHlCKknvqY8iYC7Y/3i3eZZCrzvSORU646p4l69EicoAde k6MPUgUWmJpny/6Rmb6ebuvElT5wGBSXDBCoVTDdSc+8LSNhMfLFaEyEFv/bAahU cSvEF4k3DO11QOdxHLDd+absVg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:54:56 2026 by rpki-client