This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer File: mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer (raw, json) Hash identifier: 2UEgW/K8D0TdpxrtMs8z0kBHjlG9e2JSwMLmA5szcG4= Subject key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF29F0D4CE171C2F2B2DDABA7B34308 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.122.28.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9f:0d:4c:e1:71:c2:f2:b2:dd:ab:a7:b3:43:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9923d1040c05f099fb4fedb498bb4a14832798fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:36:c9:95:7d:0f:22:60:7b:86:a1:4b:99: a9:ac:df:88:c7:64:5c:15:7d:0c:55:c7:3e:17:06: e1:72:de:9d:e3:a7:59:73:a3:4a:8f:b4:35:07:1a: 2a:06:57:32:ea:64:bd:5c:5e:bf:1a:26:29:8d:7f: f3:55:ea:cd:a2:77:50:6f:05:b6:a4:15:67:06:05: 01:0f:0e:9e:93:67:1d:2a:a5:06:b4:21:d7:92:c4: 33:e6:48:74:a3:45:9c:46:41:8e:86:48:a3:6a:d4: ca:28:cb:17:a6:83:39:ed:5a:4e:3b:32:c7:3f:4b: 85:e3:21:74:e8:b7:68:82:a8:cc:9f:3c:cd:bd:dc: 47:77:f7:53:63:97:66:03:e7:63:1f:1e:03:cf:24: 7e:a4:af:2e:5f:2c:73:49:f8:39:dc:1e:e2:44:e3: 34:bf:d4:48:ed:a8:36:ba:a1:4d:89:27:d0:fd:79: 35:65:c5:47:e9:9e:02:a4:a9:b7:df:8e:71:6c:0d: d2:3b:15:89:b8:bb:92:8f:56:71:e9:64:60:82:fc: 7d:56:a1:bc:f0:db:98:51:f0:00:17:7e:43:b5:49: 4d:23:7d:ca:9d:f2:36:f5:a5:fe:e9:06:ea:d9:91: 29:05:54:5a:09:5b:ce:46:b9:95:f6:f9:87:3f:47: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.28.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:30:4f:44:04:c3:93:da:5b:61:b9:14:49:ff:75:db:76:b7: f1:c7:8b:06:c6:74:4a:0a:c7:12:84:95:63:ff:28:a7:c7:81: 33:06:7b:08:b5:d1:e2:17:cc:ad:c7:5f:6d:e7:68:be:98:d6: f0:73:9e:08:8c:e3:98:a9:f7:27:e6:85:ff:b8:e7:91:f9:73: 0e:93:ee:8f:40:d7:e4:14:03:9c:e5:48:45:94:be:46:a6:77: 01:c2:e0:c7:cd:27:28:12:2f:30:41:4d:41:b4:d0:bb:c8:15: 6e:3d:39:46:eb:72:a8:33:f2:0d:a7:a3:de:a8:61:77:46:82: 6a:2b:40:dc:57:a1:47:34:31:b4:05:5e:f0:28:8c:08:67:76: 41:e5:b6:81:1b:c0:2d:03:55:be:cb:9e:9f:f7:e2:78:47:90: f8:c6:ba:31:7e:ac:7b:26:03:bb:4e:04:b4:bc:02:33:3e:ba: a0:f5:07:56:2b:ea:27:33:74:0e:26:d1:b7:91:9e:a0:ad:5d: 32:88:66:77:f7:42:be:dd:a7:0a:d9:27:53:c9:d6:a6:a5:2a: 26:0d:9c:d8:32:5a:76:58:26:cb:6b:32:d1:59:c5:7c:ff:da: 19:2b:a0:58:14:b4:46:91:a6:32:2e:40:b4:76:76:64:a5:bb: cb:88:8c:2d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/8p8NTOFxwvKy3auns0MIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTIzZDEwNDBjMDVmMDk5ZmI0ZmVkYjQ5OGJiNGExNDgzMjc5OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Y2yZV9DyJge4ahS5mprN+Ix2Rc FX0MVcc+Fwbhct6d46dZc6NKj7Q1BxoqBlcy6mS9XF6/GiYpjX/zVerNondQbwW2 pBVnBgUBDw6ek2cdKqUGtCHXksQz5kh0o0WcRkGOhkijatTKKMsXpoM57VpOOzLH P0uF4yF06LdogqjMnzzNvdxHd/dTY5dmA+djHx4DzyR+pK8uXyxzSfg53B7iROM0 v9RI7ag2uqFNiSfQ/Xk1ZcVH6Z4CpKm3345xbA3SOxWJuLuSj1Zx6WRggvx9VqG8 8NuYUfAAF35DtUlNI33KnfI29aX+6Qbq2ZEpBVRaCVvORrmV9vmHP0dauQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJkj0QQMBfCZ+0/ttJi7ShSDJ5j6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzRkMDVj Zi02M2IwLTQ2YWYtOWUyYy0yMDZlODIzMzZjZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNGQwNWNm LTYzYjAtNDZhZi05ZTJjLTIwNmU4MjMzNmNkZS8xL21TUFJCQXdGOEpuN1QtMjBt THRLRklNbm1Qby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCPnocMA0GCSqGSIb3DQEBCwUAA4IBAQBKME9E BMOT2lthuRRJ/3Xbdrfxx4sGxnRKCscShJVj/yinx4EzBnsItdHiF8ytx19t52i+ mNbwc54IjOOYqfcn5oX/uOeR+XMOk+6PQNfkFAOc5UhFlL5GpncBwuDHzScoEi8w QU1BtNC7yBVuPTlG63KoM/INp6PeqGF3RoJqK0DcV6FHNDG0BV7wKIwIZ3ZB5baB G8AtA1W+y56f9+J4R5D4xroxfqx7JgO7TgS0vAIzPrqg9QdWK+onM3QOJtG3kZ6g rV0yiGZ390K+3acK2SdTydampSomDZzYMlp2WCbLazLRWcV8/9oZK6BYFLRGkaYy LkC0dnZkpbvLiIwt -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:51 2026 by rpki-client