This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer File: exPgVmn1VmYr7FZk4QFln5Zsgmo.cer (raw, json) Hash identifier: dnIr7lclsT5HJEwEsT8PDMqQC6pSxwAOb9oBLfeiGTo= Subject key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12CFE72893C6EEAD1C6B0D0EC0A716 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.223.121.0/24 IP: 2001:67c:2f70::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cf:e7:28:93:c6:ee:ad:1c:6b:0d:0e:c0:a7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b13e05669f556662bec5664e101659f966c826a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:eb:cd:49:08:99:a5:a9:2d:fd:ec:89:7c: 8a:ad:d7:27:ed:25:99:88:fc:15:f7:9e:db:18:6e: b2:b5:a7:ec:4b:7b:a9:2b:cf:17:0d:48:a3:a2:24: a5:b0:19:d0:b3:4b:ec:8e:62:6f:ff:73:dd:65:12: 23:d7:9c:ca:ad:8f:2e:1d:01:fb:8e:17:08:f1:6f: bc:10:b2:2b:37:d1:33:e6:26:bb:9b:7f:9a:a9:40: 71:9a:b7:e1:6d:97:13:79:94:cf:ea:d2:d3:8e:77: cd:e2:ef:ec:d9:00:4a:fa:c4:0c:8b:b6:0e:fc:23: f0:c3:11:a4:24:20:b0:70:54:fa:7e:a4:f9:7a:6e: 26:12:ac:37:54:63:6d:28:dc:5c:c9:0e:69:08:eb: f3:d5:ea:91:72:c3:ea:5a:a5:8c:f4:27:b0:e7:e6: 8c:11:de:e8:2a:e7:f4:2e:0b:da:f3:b6:5f:23:61: 94:8b:56:67:6d:5e:7a:62:5d:50:25:f9:21:ed:a7: 6d:9b:8a:19:e6:41:cc:5b:b5:fa:9f:14:a3:f3:82: 42:dc:29:b5:01:99:4c:bf:ca:dd:4d:7d:d3:44:95: 06:e1:bc:fe:16:09:d2:63:61:4a:62:e3:e4:86:47: ea:83:f0:e8:d1:2e:c7:57:11:61:a1:bb:4d:b5:29: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.121.0/24 IPv6: 2001:67c:2f70::/48 Signature Algorithm: sha256WithRSAEncryption 65:c2:91:83:d7:0a:e8:47:ef:48:54:47:bb:a8:19:dd:33:16: 35:81:50:ef:b8:f4:f4:87:ff:0d:6d:09:01:de:65:fb:7c:2e: 68:9d:39:d2:12:37:9a:46:a3:20:99:8a:d5:41:45:07:3a:32: e9:08:cc:a8:80:3c:aa:37:a1:6f:ef:ac:39:91:a4:6c:87:c1: e0:44:c9:dd:05:c3:d2:f8:1a:6f:26:bf:22:63:06:d7:43:de: 6a:04:52:f5:49:c8:d8:85:26:4b:29:7c:c5:cc:c8:a4:3a:f0: 85:f3:2d:3d:56:45:bb:f7:06:d3:34:23:21:88:04:a1:bb:92: 7f:f5:20:a8:b6:30:83:ab:b7:f2:7b:c2:db:21:8e:9b:fa:d2: e3:cb:74:5a:5b:aa:ba:c2:a6:68:b6:53:24:e6:bd:c6:8a:a2: ed:06:c5:49:a6:4d:62:a6:fa:28:00:6b:91:0a:09:c7:20:31: 47:18:4f:ba:7a:f6:e7:08:8e:9d:b3:dc:54:3b:c5:14:c2:8d: 96:7d:fc:3e:1d:cf:c7:8e:d4:ff:c0:23:99:dd:d6:7c:b4:b2: 02:57:77:72:0e:7f:1c:b8:62:69:39:a6:92:50:b6:11:66:65: f3:8e:fd:4f:d1:55:a9:6b:e6:48:2e:b1:20:37:a8:d6:01:13: 24:5f:59:be -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt8Es/nKJPG7q0caw0OwKcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjEzZTA1NjY5ZjU1NjY2MmJlYzU2NjRlMTAxNjU5Zjk2NmM4MjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJLrzUkImaWpLf3siXyKrdcn7SWZ iPwV957bGG6ytafsS3upK88XDUijoiSlsBnQs0vsjmJv/3PdZRIj15zKrY8uHQH7 jhcI8W+8ELIrN9Ez5ia7m3+aqUBxmrfhbZcTeZTP6tLTjnfN4u/s2QBK+sQMi7YO /CPwwxGkJCCwcFT6fqT5em4mEqw3VGNtKNxcyQ5pCOvz1eqRcsPqWqWM9Cew5+aM Ed7oKuf0Lgva87ZfI2GUi1ZnbV56Yl1QJfkh7adtm4oZ5kHMW7X6nxSj84JC3Cm1 AZlMv8rdTX3TRJUG4bz+FgnSY2FKYuPkhkfqg/Do0S7HVxFhobtNtSnmgQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFHsT4FZp9VZmK+xWZOEBZZ+WbIJqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2Y3NzYx YS1mYzM4LTQ3NWMtOGExMS05NGM3MzM0NmMwZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZjc3NjFh LWZjMzgtNDc1Yy04YTExLTk0YzczMzQ2YzBlYS8xL2V4UGdWbW4xVm1ZcjdGWms0 UUZsbjVac2dtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW995MA8EAgACMAkDBwAgAQZ8L3AwDQYJKoZI hvcNAQELBQADggEBAGXCkYPXCuhH70hUR7uoGd0zFjWBUO+49PSH/w1tCQHeZft8 LmidOdISN5pGoyCZitVBRQc6MukIzKiAPKo3oW/vrDmRpGyHweBEyd0Fw9L4Gm8m vyJjBtdD3moEUvVJyNiFJkspfMXMyKQ68IXzLT1WRbv3BtM0IyGIBKG7kn/1IKi2 MIOrt/J7wtshjpv60uPLdFpbqrrCpmi2UyTmvcaKou0GxUmmTWKm+igAa5EKCccg MUcYT7p69ucIjp2z3FQ7xRTCjZZ9/D4dz8eO1P/AI5nd1ny0sgJXd3IOfxy4Ymk5 ppJQthFmZfOO/U/RValr5kgusSA3qNYBEyRfWb4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:47 2026 by rpki-client