This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer File: mRLZRawqSfO02iIhwnuCmq_MsvI.cer (raw, json) Hash identifier: xGKiqL+h+SMunj6cBOaRXI+/3nEnoRitdpV4/s4oVJg= Subject key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1354EDBD4160A2F5CDFC78FB4FBF5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.177.100.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:54:ed:bd:41:60:a2:f5:cd:fc:78:fb:4f:bf:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:e7:56:e4:c0:ec:72:e6:cd:5a:cf:a7:c6: 8f:36:cf:2b:5f:cb:a6:41:dd:11:2a:8d:e5:ff:41: 96:cd:8a:78:88:0f:f4:6f:38:af:c9:35:0c:dd:40: 75:7c:62:7c:00:85:9c:da:c7:96:f4:72:3a:9d:c8: b1:a6:e7:c7:c3:8c:96:12:63:d4:68:ac:36:85:c8: 88:1d:11:a9:59:3b:00:b2:d0:39:a2:eb:26:eb:aa: cb:af:40:90:9f:b8:29:a8:43:c2:a1:23:01:ec:d7: 02:59:e8:85:6a:59:81:67:64:e7:02:a8:98:36:b0: 0c:14:2d:e9:a0:30:94:22:45:80:2a:8a:6c:03:98: 78:d8:45:71:69:41:f2:ff:89:c8:94:6a:91:66:c9: dc:bd:7c:be:04:dd:6c:41:1c:4a:c7:ab:c2:50:9d: 09:3c:1b:ee:ac:ec:28:32:c6:49:00:c1:0d:5b:e8: 9c:8b:d7:9c:f9:82:b4:7e:a7:36:70:6a:b2:dd:e3: 29:06:cc:53:58:53:03:b4:1d:f4:d1:49:60:19:f8: 1f:5e:95:cf:81:f4:f9:42:b9:e5:9c:69:78:3e:b4: 1e:60:67:11:57:4a:92:9f:01:9b:46:fc:09:f1:30: ef:56:f4:45:59:25:ce:72:6f:98:3d:96:ff:58:7d: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.177.100.0/22 Signature Algorithm: sha256WithRSAEncryption 29:5e:95:47:42:d1:fd:6a:f5:d7:7c:0e:35:4b:54:96:84:3f: a9:8d:8c:f7:f6:c9:02:cd:c1:a1:89:35:79:0d:ca:2d:1e:29: 06:b1:f4:0e:8b:1a:89:7a:2b:a3:67:43:ff:76:aa:9a:88:f7: ba:b0:46:70:f5:55:4e:08:91:ad:4e:c2:9f:67:5c:d7:7f:b4: 66:cc:25:2d:fd:11:f0:0a:f1:e4:72:10:d1:72:ad:c5:c4:5d: cf:31:c5:84:2e:e0:86:89:40:b6:98:25:97:16:a6:b8:4f:a2: 69:fa:53:fa:b3:ac:d8:e7:b4:41:2a:0c:bb:be:4d:ef:d8:6c: de:0b:14:03:60:5c:2c:87:bb:e8:84:84:8f:9d:cd:71:77:c5: 27:26:7c:3f:a1:64:2b:c8:4e:ca:3b:71:bc:2b:5a:b5:fc:c7: 66:81:03:64:4d:24:de:63:dd:3e:7e:7d:a5:ef:e2:e5:0a:d9: 21:5b:c0:ac:54:41:db:39:99:16:2c:8b:d4:25:18:a8:26:b9: 6a:d4:25:bb:d6:d0:5f:b1:f6:fb:53:82:66:4d:6c:1d:8f:6f: d2:45:17:e5:f0:ee:2d:e8:ac:7d:29:36:54:47:fa:79:f9:4b: 34:8b:81:9e:d4:1a:e6:a1:2e:93:96:71:b6:86:53:3a:08:63: 88:9c:89:6f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8E1TtvUFgovXN/Hj7T79fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTEyZDk0NWFjMmE0OWYzYjRkYTIyMjFjMjdiODI5YWFmY2NiMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS/nVuTA7HLmzVrPp8aPNs8rX8um Qd0RKo3l/0GWzYp4iA/0bzivyTUM3UB1fGJ8AIWc2seW9HI6ncixpufHw4yWEmPU aKw2hciIHRGpWTsAstA5ousm66rLr0CQn7gpqEPCoSMB7NcCWeiFalmBZ2TnAqiY NrAMFC3poDCUIkWAKopsA5h42EVxaUHy/4nIlGqRZsncvXy+BN1sQRxKx6vCUJ0J PBvurOwoMsZJAMENW+ici9ec+YK0fqc2cGqy3eMpBsxTWFMDtB300UlgGfgfXpXP gfT5QrnlnGl4PrQeYGcRV0qSnwGbRvwJ8TDvVvRFWSXOcm+YPZb/WH3dKwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJkS2UWsKknztNoiIcJ7gpqvzLLyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzc5YWI3 Ni05YmY5LTQ3Y2QtYjU0NC01ZWUwOWZlYWQ1NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNzlhYjc2 LTliZjktNDdjZC1iNTQ0LTVlZTA5ZmVhZDU2MS8xL21STFpSYXdxU2ZPMDJpSWh3 bnVDbXFfTXN2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCw7FkMA0GCSqGSIb3DQEBCwUAA4IBAQApXpVH QtH9avXXfA41S1SWhD+pjYz39skCzcGhiTV5DcotHikGsfQOixqJeiujZ0P/dqqa iPe6sEZw9VVOCJGtTsKfZ1zXf7RmzCUt/RHwCvHkchDRcq3FxF3PMcWELuCGiUC2 mCWXFqa4T6Jp+lP6s6zY57RBKgy7vk3v2GzeCxQDYFwsh7vohISPnc1xd8UnJnw/ oWQryE7KO3G8K1q1/MdmgQNkTSTeY90+fn2l7+LlCtkhW8CsVEHbOZkWLIvUJRio Jrlq1CW71tBfsfb7U4JmTWwdj2/SRRfl8O4t6Kx9KTZUR/p5+Us0i4Ge1BrmoS6T lnG2hlM6CGOInIlv -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:23 2026 by rpki-client