This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer File: mHyvDLazMBzAhKJdXCFBCpLKfjY.cer (raw, json) Hash identifier: Md2gJqdsPKmJMFaR9ZwO28n6mW5xewPeNXPooTZqCy4= Subject key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA515C617E7866A9540F8DD10A30877 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.43.48.0/22 IP: 2a01:5ae0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:15:c6:17:e7:86:6a:95:40:f8:dd:10:a3:08:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:af:f7:1e:30:62:38:c6:d9:0b:37:71:9d: 3c:15:61:1b:af:86:cd:55:05:50:79:f8:15:cc:b4: b6:d2:01:42:70:c1:bd:8d:9d:da:35:6e:e4:49:e3: 69:0a:f9:15:83:a1:bd:26:f0:4f:4d:e4:8b:de:fb: cd:42:70:5f:69:cb:ea:9e:57:7d:d0:c0:ff:ca:ae: 91:7a:49:7e:6f:ad:5b:b2:cc:05:a3:c3:1c:23:c9: af:80:86:3c:69:73:85:fe:65:03:3b:18:40:cd:c9: 18:dc:44:1d:70:8d:cb:c0:1c:28:d4:cb:33:08:b1: 66:f5:f5:6f:7d:ac:eb:2b:81:68:42:5b:55:30:f7: 92:98:c7:d2:1c:59:b0:fd:0f:4f:b4:a5:6f:3b:5b: 51:b6:c7:34:79:e4:9b:2a:53:89:19:21:9c:fd:6d: 0d:02:e5:99:d3:5a:48:80:cc:5b:de:3f:7a:64:1e: 4e:8f:6f:37:2b:ba:bd:ad:4e:88:2f:61:ad:1b:45: 0d:58:28:a4:f9:c3:18:b5:e0:48:16:67:93:82:ed: 72:31:1d:19:7a:8a:be:f3:d7:7a:c1:82:5d:29:e0: e8:12:8b:b3:9a:a2:bf:5b:10:68:a4:26:2b:d9:b9: 1e:e5:49:e5:78:14:16:d3:94:38:b2:21:ed:3e:a9: 73:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.48.0/22 IPv6: 2a01:5ae0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:0a:60:46:30:84:4d:be:51:65:d0:b9:a6:63:53:f2:08:8e: 3c:d9:b7:1e:ea:fe:99:83:96:3c:ba:ec:71:5b:be:d8:2d:8f: 44:8d:d2:67:a2:67:cf:ad:b8:08:7b:2f:77:4c:6a:5a:01:56: 08:d8:fc:51:b2:c2:f0:8f:ed:11:43:8d:aa:a9:ba:cb:68:b4: a3:14:79:68:c0:65:33:cb:ea:fb:ad:6c:20:55:d6:66:a2:41: 15:54:e4:31:4c:21:09:4a:69:a6:7e:ef:1d:91:25:36:af:92: c9:cd:f8:de:12:23:5a:38:8e:30:0e:7d:9d:1b:d6:28:d8:f2: b7:61:5d:36:1b:ce:a5:b1:e7:e5:29:01:c1:e9:a4:b4:51:5b: 8f:2d:6c:71:55:bc:3c:c9:72:af:ec:4e:12:94:13:bd:42:53: c9:4d:8f:b9:12:ce:e6:c0:ac:b1:8f:0c:c9:cb:5f:0b:f1:be: 0c:37:3c:cc:da:58:11:12:dd:b7:8d:9b:33:2a:1c:9b:4d:68: 31:20:62:84:1a:ab:fb:ce:61:d9:f2:bd:b1:61:a2:20:dd:9c: c7:eb:4e:97:33:26:0a:ab:7a:73:fc:b7:e9:16:4b:ce:f6:1c: 41:94:c5:8a:ff:67:c0:27:33:8f:da:05:65:df:a4:87:63:bb: 8f:db:5c:ac -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pRXGF+eGapVA+N0Qowh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODdjYWYwY2I2YjMzMDFjYzA4NGEyNWQ1YzIxNDEwYTkyY2E3ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEav9x4wYjjG2Qs3cZ08FWEbr4bN VQVQefgVzLS20gFCcMG9jZ3aNW7kSeNpCvkVg6G9JvBPTeSL3vvNQnBfacvqnld9 0MD/yq6Rekl+b61bsswFo8McI8mvgIY8aXOF/mUDOxhAzckY3EQdcI3LwBwo1Msz CLFm9fVvfazrK4FoQltVMPeSmMfSHFmw/Q9PtKVvO1tRtsc0eeSbKlOJGSGc/W0N AuWZ01pIgMxb3j96ZB5Oj283K7q9rU6IL2GtG0UNWCik+cMYteBIFmeTgu1yMR0Z eoq+89d6wYJdKeDoEouzmqK/WxBopCYr2bke5UnleBQW05Q4siHtPqlzKQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJh8rwy2szAcwISiXVwhQQqSyn42MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2Y1OGRh MC1kZmJlLTQxNmEtYmZhYS0zNjE3MGNkODEzMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvZjU4ZGEw LWRmYmUtNDE2YS1iZmFhLTM2MTcwY2Q4MTMzMC8xL21IeXZETGF6TUJ6QWhLSmRY Q0ZCQ3BMS2ZqWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSswMA0EAgACMAcDBQAqAVrgMA0GCSqGSIb3 DQEBCwUAA4IBAQAcCmBGMIRNvlFl0LmmY1PyCI482bce6v6Zg5Y8uuxxW77YLY9E jdJnomfPrbgIey93TGpaAVYI2PxRssLwj+0RQ42qqbrLaLSjFHlowGUzy+r7rWwg VdZmokEVVOQxTCEJSmmmfu8dkSU2r5LJzfjeEiNaOI4wDn2dG9Yo2PK3YV02G86l seflKQHB6aS0UVuPLWxxVbw8yXKv7E4SlBO9QlPJTY+5Es7mwKyxjwzJy18L8b4M NzzM2lgREt23jZszKhybTWgxIGKEGqv7zmHZ8r2xYaIg3ZzH606XMyYKq3pz/Lfp FkvO9hxBlMWK/2fAJzOP2gVl36SHY7uP21ys -----END CERTIFICATE-----Generated at Mon Jan 26 07:10:27 2026 by rpki-client