This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer File: m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer (raw, json) Hash identifier: dO7qpG3VGdumaZn34kAPCVGxJu504iQ5EVasgI40p3A= Subject key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C127E7E46304BBED6EC81E7188AA695 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212727 IP: 164.153.132.0/22 IP: 185.204.185.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7e:7e:46:30:4b:be:d6:ec:81:e7:18:8a:a6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:01:c6:3e:89:bf:01:a9:40:96:d4:13:b6: 59:b7:d9:e0:b7:f3:3f:ec:13:41:4f:9d:ec:ed:c8: c1:64:b4:14:c9:b8:62:51:c3:6c:4d:93:38:e1:17: 44:44:98:41:9d:ff:40:4e:04:c7:a6:dc:90:d0:21: 1b:46:c0:17:53:4f:fa:e6:59:6c:24:37:ec:21:21: d3:49:3e:72:79:7f:43:69:84:4f:57:d5:a2:fb:ec: 36:c1:28:51:6c:8d:cb:33:d2:8d:e9:23:1c:46:6d: dd:38:fa:4a:c4:a1:01:c0:16:9e:45:da:a8:48:5a: e3:db:1d:1a:35:43:37:b2:1a:ae:eb:8b:a6:9a:f3: 9d:c3:2f:3a:2e:62:a6:9b:2b:21:7a:b5:67:e1:f5: ad:74:18:c4:8c:c8:4a:49:6d:c2:ae:6b:b1:93:29: 6f:87:41:2f:0d:4d:25:77:ba:11:a4:2b:90:28:0e: 40:12:5f:a3:2c:4a:d1:8b:bc:16:72:38:c1:92:7f: e5:1d:80:1f:c9:a2:20:f9:24:69:9d:00:64:11:13: b2:36:3d:35:c1:73:b6:5e:d8:94:85:ca:54:7b:4f: f3:a6:b4:6a:50:7f:9e:fa:51:92:91:ce:b2:64:2a: e0:ff:9f:f6:88:ef:04:09:45:73:9c:85:28:af:9f: 14:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.153.132.0/22 185.204.185.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212727 Signature Algorithm: sha256WithRSAEncryption 5e:4c:ca:22:dd:c1:aa:bb:90:df:97:e8:21:50:22:ee:00:d2: 8f:9a:ec:c0:7e:4a:49:70:66:b9:aa:cc:49:a0:0d:73:12:01: 24:96:7a:e1:2c:e5:54:93:d5:52:e3:8b:a3:f8:51:4a:01:70: 8c:a1:79:fd:dc:2c:3a:6f:e0:0c:ab:cf:33:3a:0f:e8:0f:a5: da:b9:63:03:ad:a6:d7:65:f6:0b:1f:76:c9:75:e6:30:88:1c: d6:4c:26:ce:8d:b0:e8:ac:b5:1a:38:29:05:60:b8:4c:18:91: ea:0d:89:03:a5:12:fa:a3:31:32:19:0c:20:e3:e5:d9:37:04: 8b:d9:32:d9:9f:56:7c:06:6a:71:61:34:91:68:58:6b:41:da: 2f:d5:c1:21:fd:c3:90:a8:71:52:ee:64:6d:9c:08:6c:45:b4: d6:56:8a:c0:a9:b7:1e:9b:e3:99:ba:17:d9:99:cc:3f:74:7a: 9d:c4:a3:40:48:45:2b:51:1a:e2:23:f6:14:40:56:76:ab:ed: 19:4d:13:89:20:66:70:35:81:1c:da:82:9d:6b:49:2c:93:68: b7:4f:15:25:ff:5c:cd:6a:eb:43:9c:cc:b4:df:f4:47:29:7c: f3:fd:c5:c4:68:3c:8b:4f:ae:7d:df:b9:2c:a6:ad:6e:87:c2: 46:cc:60:6f -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8En5+RjBLvtbsgecYiqaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc1OWVjOWZmNTRkZTAzYTdmZjNhNjVlZGJiMmUwNzU4ZTY4NzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIcBxj6JvwGpQJbUE7ZZt9ngt/M/ 7BNBT53s7cjBZLQUybhiUcNsTZM44RdERJhBnf9ATgTHptyQ0CEbRsAXU0/65lls JDfsISHTST5yeX9DaYRPV9Wi++w2wShRbI3LM9KN6SMcRm3dOPpKxKEBwBaeRdqo SFrj2x0aNUM3shqu64ummvOdwy86LmKmmysherVn4fWtdBjEjMhKSW3Crmuxkylv h0EvDU0ld7oRpCuQKA5AEl+jLErRi7wWcjjBkn/lHYAfyaIg+SRpnQBkEROyNj01 wXO2XtiUhcpUe0/zprRqUH+e+lGSkc6yZCrg/5/2iO8ECUVznIUor58U5wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFJt1nsn/VN4Dp/86Ze27LgdY5oeMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzVhZDcz Yi1kYjE3LTQzMjItYWRlNS1iOWE5ZDhhZTk0MjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvNWFkNzNi LWRiMTctNDMyMi1hZGU1LWI5YTlkOGFlOTQyMS8xL20zV2V5ZjlVM2dPbl96cGw3 YnN1QjFqbWg0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCpJmEAwQAucy5MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwM+9zANBgkqhkiG9w0BAQsFAAOCAQEAXkzKIt3BqruQ35foIVAi7gDS j5rswH5KSXBmuarMSaANcxIBJJZ64SzlVJPVUuOLo/hRSgFwjKF5/dwsOm/gDKvP MzoP6A+l2rljA62m12X2Cx92yXXmMIgc1kwmzo2w6Ky1GjgpBWC4TBiR6g2JA6US +qMxMhkMIOPl2TcEi9ky2Z9WfAZqcWE0kWhYa0HaL9XBIf3DkKhxUu5kbZwIbEW0 1laKwKm3HpvjmboX2ZnMP3R6ncSjQEhFK1Ea4iP2FEBWdqvtGU0TiSBmcDWBHNqC nWtJLJNot08VJf9czWrrQ5zMtN/0Ryl88/3FxGg8i0+ufd+5LKatbofCRsxgbw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:07:34 2026 by rpki-client