This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer File: m1M3vRp8XunFenOwozxhIZzSqcs.cer (raw, json) Hash identifier: za7L/8h2lGWx5TQeBjxEK88bGoCCqG5mS2DRVBdp1m0= Subject key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA35F667EE06123EC1806DEC59E2A02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 149.153.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5f:66:7e:e0:61:23:ec:18:06:de:c5:9e:2a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:74:91:90:bc:e5:86:27:79:bf:e9:2d:4e:3b: 9c:6d:fb:91:a8:4e:04:02:88:28:5e:f0:69:b7:92: ae:91:21:cb:91:3f:55:95:db:b6:5c:fe:51:8b:96: a1:14:ef:69:99:9b:fa:b8:d1:a9:4b:26:53:1a:17: 28:7b:2a:24:67:cd:b9:8d:aa:8b:73:d3:47:f2:93: e9:9b:4f:57:9b:dd:15:ff:1a:3a:3f:0f:20:eb:e8: 17:b9:e0:19:aa:81:5a:7f:0f:0d:82:4b:34:e7:35: 6a:99:48:27:db:b0:ae:fe:9b:e1:0e:20:33:37:cc: 0d:a8:a5:ff:42:cf:77:c0:84:90:88:79:7b:49:a8: ba:e4:08:ab:da:69:1a:cf:ae:d3:84:73:f4:cd:65: 08:27:3f:01:ed:97:2d:b9:28:2c:6a:dd:51:57:78: 3a:81:f2:80:e1:35:71:45:2b:1c:bc:7b:e0:5a:c8: 49:a3:a0:83:30:f0:a6:77:46:72:39:ea:55:fc:7b: 34:11:59:6f:c2:4d:d7:d0:92:42:00:f2:c1:6e:36: 33:12:df:b3:a9:65:86:25:71:aa:f1:44:5c:3e:1a: cd:2d:51:27:c7:ed:3c:e1:cf:42:76:7f:b1:1d:6e: 76:a2:57:94:ee:6f:d6:dd:44:1e:7d:26:be:75:a3: 16:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption 61:74:4b:e9:41:40:22:3d:99:43:6e:24:6d:0b:35:7a:02:79: e6:cb:32:50:1f:1e:4a:b4:db:1e:fa:45:d5:6a:31:3c:b2:1b: 9d:5d:23:a6:14:e0:08:89:48:1a:6f:5f:0f:0a:b4:f6:94:26: c6:9a:19:99:79:17:33:c3:c0:a9:90:d2:d6:29:f1:70:de:23: d3:43:95:47:f1:b7:a0:0f:2a:b2:5d:94:27:17:12:7a:cd:e1: f9:22:17:b5:ad:b8:97:1d:0a:7d:70:65:a7:29:b5:86:f8:5d: 8e:01:8b:bc:42:e9:c0:d8:23:05:a6:8d:61:63:c5:61:c5:26: 08:68:57:df:18:95:8e:7a:38:79:f1:91:23:5f:53:ed:df:29: 52:94:07:26:bb:53:0a:9b:7c:c2:13:37:f1:95:79:33:18:75: 22:7a:6d:15:81:55:b9:00:e2:7b:fb:0a:4d:6a:e5:31:d5:0c: 4e:97:f1:4b:74:bc:f6:2e:10:b4:97:5f:b5:de:e0:f3:12:7b: 57:6e:18:b6:9c:84:64:bd:31:04:23:7b:81:2f:b8:2b:25:87: 1e:11:1e:3f:68:c1:1d:7a:fa:79:c1:38:7f:7d:fa:41:3b:20: 3d:75:ba:0c:dd:a1:e7:02:8e:1a:e9:3c:5b:86:87:7e:c7:07: ef:0a:46:50 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt7o19mfuBhI+wYBt7FnioCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjUzMzdiZDFhN2M1ZWU5YzU3YTczYjBhMzNjNjEyMTljZDJhOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83SRkLzlhid5v+ktTjucbfuRqE4E AogoXvBpt5KukSHLkT9Vldu2XP5Ri5ahFO9pmZv6uNGpSyZTGhcoeyokZ825jaqL c9NH8pPpm09Xm90V/xo6Pw8g6+gXueAZqoFafw8Ngks05zVqmUgn27Cu/pvhDiAz N8wNqKX/Qs93wISQiHl7Sai65Air2mkaz67ThHP0zWUIJz8B7ZctuSgsat1RV3g6 gfKA4TVxRSscvHvgWshJo6CDMPCmd0ZyOepV/Hs0EVlvwk3X0JJCAPLBbjYzEt+z qWWGJXGq8URcPhrNLVEnx+084c9Cdn+xHW52oleU7m/W3UQefSa+daMW6wIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFJtTN70afF7pxXpzsKM8YSGc0qnLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzljYjVm Yi1hYjY1LTRhMmItODhkZC0yZWY3MTY1YjIxYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvOWNiNWZi LWFiNjUtNGEyYi04OGRkLTJlZjcxNjViMjFiNS8xL20xTTN2UnA4WHVuRmVuT3dv enhoSVp6U3Fjcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAlZkwDQYJKoZIhvcNAQELBQADggEBAGF0S+lB QCI9mUNuJG0LNXoCeebLMlAfHkq02x76RdVqMTyyG51dI6YU4AiJSBpvXw8KtPaU JsaaGZl5FzPDwKmQ0tYp8XDeI9NDlUfxt6APKrJdlCcXEnrN4fkiF7WtuJcdCn1w ZacptYb4XY4Bi7xC6cDYIwWmjWFjxWHFJghoV98YlY56OHnxkSNfU+3fKVKUBya7 UwqbfMITN/GVeTMYdSJ6bRWBVbkA4nv7Ck1q5THVDE6X8Ut0vPYuELSXX7Xe4PMS e1duGLachGS9MQQje4EvuCslhx4RHj9owR16+nnBOH99+kE7ID11ugzdoecCjhrp PFuGh37HB+8KRlA= -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:23 2026 by rpki-client