This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer File: mJAcfP_Rmk_qePebEASZkmbcwiQ.cer (raw, json) Hash identifier: owR05YclPldrLT11NUYM9I+6vvOMIZ+IA95tPlNfwlw= Subject key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAB098094D14275E3ABAA9A403F051 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.210.232.0/22 IP: 185.43.232.0/22 IP: 193.36.43.0/24 IP: 2a01:6ce0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b0:98:09:4d:14:27:5e:3a:ba:a9:a4:03:f0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98901c7cffd19a4fea78f79b1004999266dcc224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:5f:9d:ed:9e:54:b7:d3:57:2c:10:07:a7: d1:7a:e8:1f:34:6c:58:29:03:e0:c6:6f:50:bc:24: 86:f3:23:de:b3:8d:f0:72:57:ae:d2:a0:a0:86:bd: 9a:1d:b7:75:bc:f6:1b:8f:93:9b:51:f2:f5:36:50: f9:68:1c:28:8c:df:b3:24:0c:d3:3b:6f:0b:d2:fc: 7f:58:d4:3e:18:fc:d5:02:e4:f1:2b:b8:61:bb:95: 8b:76:7c:a2:fe:6b:1e:8d:d3:0f:14:27:35:9d:fb: e0:73:da:21:91:ea:47:be:43:4d:54:80:09:24:73: ab:cc:23:e6:50:d3:30:bf:8d:a2:64:66:1e:ba:bd: d1:77:f2:7b:44:10:6a:aa:40:47:52:e8:a1:a4:10: 96:65:f5:de:c3:28:3e:69:53:47:b7:29:bd:89:a0: 30:bf:1f:7e:33:9a:79:f8:d9:c2:23:7e:e0:07:17: 30:46:8d:fd:7f:fb:3c:cf:f8:f9:f7:6e:c5:1c:f8: 97:8f:35:7e:d7:83:16:16:1f:40:e8:fa:4b:f2:35: 7f:a4:8d:fe:1e:52:f3:b7:e1:19:62:81:4e:40:6a: 74:47:d0:1d:8d:b0:b9:2e:60:20:b0:94:0f:0f:da: 8a:74:40:13:70:69:24:82:fd:15:12:06:0e:0b:8b: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.232.0/22 185.43.232.0/22 193.36.43.0/24 IPv6: 2a01:6ce0::/32 Signature Algorithm: sha256WithRSAEncryption 38:a3:a5:3e:45:10:45:67:25:ae:e3:38:ea:cd:34:fc:88:6f: 03:2d:14:21:e3:b9:8a:18:0d:6d:6f:b6:d6:d0:5c:72:cd:86: 3e:57:1a:c9:64:c1:ba:47:05:16:f7:bf:d4:27:bb:6a:19:82: 31:ba:05:55:34:22:70:70:46:35:01:c0:47:ed:76:25:df:c7: 9d:27:44:98:9d:22:10:ac:75:7f:ed:ba:2f:e1:63:a0:fc:55: 9c:00:93:c6:1a:52:df:58:88:d6:a1:82:7a:97:0a:91:58:40: 4e:8f:98:90:e6:2b:5a:fa:04:1d:b2:f8:d6:bb:86:f0:16:5f: 56:c7:6c:30:30:04:31:87:4b:4e:0e:20:21:91:e1:86:b8:69: 13:7e:92:b5:ba:a3:c8:d3:7a:34:39:cc:64:20:42:69:12:30: 84:32:20:6f:ef:b5:9f:09:d7:51:1e:41:93:07:19:df:f8:f6: b9:71:df:b9:5a:2f:0b:53:55:06:61:9a:ea:05:99:da:52:86: 37:3e:bc:c1:39:b9:bc:5a:d1:63:5b:cc:f7:61:ee:15:32:62: a7:13:92:a9:a1:9e:b3:3b:15:01:87:9a:7d:90:66:25:dc:07: 16:c2:72:ab:ee:f4:26:17:d4:b7:cb:8a:01:28:fc:e2:48:56: 24:53:1d:aa -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9yrCYCU0UJ146uqmkA/BRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODkwMWM3Y2ZmZDE5YTRmZWE3OGY3OWIxMDA0OTk5MjY2ZGNjMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Bfne2eVLfTVywQB6fReugfNGxY KQPgxm9QvCSG8yPes43wcleu0qCghr2aHbd1vPYbj5ObUfL1NlD5aBwojN+zJAzT O28L0vx/WNQ+GPzVAuTxK7hhu5WLdnyi/msejdMPFCc1nfvgc9ohkepHvkNNVIAJ JHOrzCPmUNMwv42iZGYeur3Rd/J7RBBqqkBHUuihpBCWZfXewyg+aVNHtym9iaAw vx9+M5p5+NnCI37gBxcwRo39f/s8z/j5927FHPiXjzV+14MWFh9A6PpL8jV/pI3+ HlLzt+EZYoFOQGp0R9AdjbC5LmAgsJQPD9qKdEATcGkkgv0VEgYOC4veBwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2UyMGM5 NS0wZjkyLTQ1OTgtOTZkZi1jYmMyNzk3YzFkMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvZTIwYzk1 LTBmOTItNDU5OC05NmRmLWNiYzI3OTdjMWQwYS8xL21KQWNmUF9SbWtfcWVQZWJF QVNaa21iY3dpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCW9LoAwQCuSvoAwQAwSQrMA0EAgACMAcDBQAq AWzgMA0GCSqGSIb3DQEBCwUAA4IBAQA4o6U+RRBFZyWu4zjqzTT8iG8DLRQh47mK GA1tb7bW0FxyzYY+VxrJZMG6RwUW97/UJ7tqGYIxugVVNCJwcEY1AcBH7XYl38ed J0SYnSIQrHV/7bov4WOg/FWcAJPGGlLfWIjWoYJ6lwqRWEBOj5iQ5ita+gQdsvjW u4bwFl9Wx2wwMAQxh0tODiAhkeGGuGkTfpK1uqPI03o0OcxkIEJpEjCEMiBv77Wf CddRHkGTBxnf+Pa5cd+5Wi8LU1UGYZrqBZnaUoY3PrzBObm8WtFjW8z3Ye4VMmKn E5KpoZ6zOxUBh5p9kGYl3AcWwnKr7vQmF9S3y4oBKPziSFYkUx2q -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:31 2026 by rpki-client