This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer File: morKHCZcEygjx4T9qEL3oaBbjLc.cer (raw, json) Hash identifier: DJpZA1wYasb8e0J7O8lON6u1iUZidp9N8nrX/IzO0qo= Subject key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6F4F2F77717F1F9AD715A5683BB78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.37.36.0/22 IP: 2a01:e8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f4:f2:f7:77:17:f1:f9:ad:71:5a:56:83:bb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:9b:0f:20:74:ac:ec:6a:54:14:a1:f9:ff: 03:ed:96:d7:48:00:27:07:58:49:8c:0e:36:12:e9: aa:f1:88:50:fc:7a:cb:28:70:f6:fa:e2:9c:be:72: 79:c1:f7:2b:3d:8b:c3:75:9a:ea:9a:11:db:b4:fa: ef:28:5b:08:e9:0f:3d:84:d3:07:bc:ea:03:c7:8f: ee:4d:e1:ff:06:ee:5a:3b:68:57:6b:d5:35:f9:79: 39:8a:cc:82:c2:59:6e:4e:d1:85:bd:e0:68:06:d6: 52:53:a8:e9:aa:a3:55:2f:9d:c1:f7:41:a3:6f:5b: d6:fd:24:83:6a:1b:91:6d:82:82:d6:02:02:86:22: f6:34:bd:6a:0e:44:5f:08:5c:85:4c:a7:52:f0:21: 3f:f2:13:be:c1:97:68:3a:e8:5f:22:ee:d3:2c:61: 91:51:53:31:47:30:0d:5c:38:e4:95:cb:12:2f:24: de:62:d1:97:47:58:59:8f:c9:fd:75:94:d1:1a:9b: 0c:da:e7:e7:46:14:99:76:f6:b1:a6:32:5d:69:23: 40:33:53:b3:41:47:3e:16:05:b9:5a:4a:61:81:1f: 12:4e:69:47:41:8d:3d:4f:42:df:f8:82:ec:18:2d: bf:3f:a2:61:98:19:bd:02:8c:84:8e:e4:1a:29:76: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.36.0/22 IPv6: 2a01:e8c0::/29 Signature Algorithm: sha256WithRSAEncryption ad:87:df:cb:58:f5:cc:9c:90:7c:34:ad:08:56:45:4a:a2:eb: c7:4a:b7:7f:e2:45:d3:c9:16:de:a3:15:90:3d:28:17:e5:44: 6a:ac:53:4b:e1:ce:d3:bd:48:89:9e:8e:72:da:db:10:38:1c: 90:cc:ca:17:28:28:94:bf:33:bd:1b:7d:3f:cb:08:a9:a9:cd: 9a:ea:21:00:e7:67:6d:dd:c4:5c:83:6e:65:6d:a0:f2:52:51: 9d:cb:75:50:81:f0:81:14:09:34:3e:3e:fe:34:ac:88:5e:57: 77:79:de:1c:1c:e1:5f:ee:75:d0:95:68:ff:94:80:4a:08:66: 9f:62:b8:36:e6:0f:a4:f1:41:b9:2b:80:9a:b8:ac:af:dd:4a: 3a:da:3a:38:fc:44:76:8a:f3:ff:f9:93:cb:1c:2d:90:f1:83: 36:21:b2:bb:74:2d:34:de:26:66:2f:9e:b1:70:8a:3c:7c:a6: ac:63:72:cb:ec:09:9a:65:39:f8:f9:52:ed:80:82:fd:1c:29: d9:98:47:ee:80:f6:4e:3a:fe:fb:6d:d1:fb:10:f0:d0:5a:c9: dc:a7:60:fc:e2:72:9f:c2:c2:b6:4f:17:4a:81:27:f1:2a:d7: 40:9b:8c:89:e8:0e:6e:f2:67:15:76:f7:b3:40:fb:1b:fb:fc: cc:32:2e:a1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3xvTy93cX8fmtcVpWg7t4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YThhY2ExYzI2NWMxMzI4MjNjNzg0ZmRhODQyZjdhMWEwNWI4Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN2bDyB0rOxqVBSh+f8D7ZbXSAAn B1hJjA42Eumq8YhQ/HrLKHD2+uKcvnJ5wfcrPYvDdZrqmhHbtPrvKFsI6Q89hNMH vOoDx4/uTeH/Bu5aO2hXa9U1+Xk5isyCwlluTtGFveBoBtZSU6jpqqNVL53B90Gj b1vW/SSDahuRbYKC1gIChiL2NL1qDkRfCFyFTKdS8CE/8hO+wZdoOuhfIu7TLGGR UVMxRzANXDjklcsSLyTeYtGXR1hZj8n9dZTRGpsM2ufnRhSZdvaxpjJdaSNAM1Oz QUc+FgW5WkphgR8STmlHQY09T0Lf+ILsGC2/P6JhmBm9AoyEjuQaKXbzhQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJqKyhwmXBMoI8eE/ahC96GgW4y3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzAyMjJk OC04ZDhhLTQ0YzAtYTExZi1kYzBjNGYxMDgzYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvMDIyMmQ4 LThkOGEtNDRjMC1hMTFmLWRjMGM0ZjEwODNjOS8xL21vcktIQ1pjRXlnang0VDlx RUwzb2FCYmpMYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSUkMA0EAgACMAcDBQMqAejAMA0GCSqGSIb3 DQEBCwUAA4IBAQCth9/LWPXMnJB8NK0IVkVKouvHSrd/4kXTyRbeoxWQPSgX5URq rFNL4c7TvUiJno5y2tsQOByQzMoXKCiUvzO9G30/ywipqc2a6iEA52dt3cRcg25l baDyUlGdy3VQgfCBFAk0Pj7+NKyIXld3ed4cHOFf7nXQlWj/lIBKCGafYrg25g+k 8UG5K4CauKyv3Uo62jo4/ER2ivP/+ZPLHC2Q8YM2IbK7dC003iZmL56xcIo8fKas Y3LL7AmaZTn4+VLtgIL9HCnZmEfugPZOOv77bdH7EPDQWsncp2D84nKfwsK2TxdK gSfxKtdAm4yJ6A5u8mcVdvezQPsb+/zMMi6h -----END CERTIFICATE-----Generated at Sun Jan 25 06:06:08 2026 by rpki-client