This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer File: n-mO5s-z-6g7lyrhJlO12fxwcC4.cer (raw, json) Hash identifier: kaGbMG9NAxpWyac6Xa+O19l17edCA04wLils2O+bA9M= Subject key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835426DEA69DEAF9301FBDD301DAB86 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60709 IP: 194.102.126.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:42:6d:ea:69:de:af:93:01:fb:dd:30:1d:ab:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3d:08:7e:94:06:f6:80:98:0d:a0:d0:4d:08: a5:6f:43:59:ba:af:da:1e:7f:e8:f2:14:41:52:76: f8:d3:c0:3f:16:5e:0e:d0:10:3b:cc:f4:89:cd:41: 70:a4:15:97:74:4d:09:53:d9:db:ca:6c:31:08:46: d7:8f:d6:da:f4:10:ee:49:02:4e:62:b3:b2:18:09: a3:b8:aa:3d:4e:9c:f4:f1:a6:3a:25:ff:8d:85:56: 8f:b6:48:02:8b:98:f3:4a:0c:d6:5d:5f:66:fb:f7: ca:c3:b4:0f:f9:1b:27:19:c4:f2:7a:dd:24:cf:7a: 47:3f:45:29:86:58:86:6a:1a:b0:1e:cb:3b:f2:5a: 64:67:5c:7c:1d:34:d4:6b:98:10:0a:2a:a3:3e:ab: 0d:ed:f9:f3:a3:19:df:eb:5b:c6:3b:a5:61:09:12: 26:e8:36:b7:53:75:f6:77:2c:c1:30:de:2f:34:ba: 40:30:9e:91:c9:c8:c3:de:f3:ff:39:8a:bd:49:fe: 88:48:7e:0b:2f:33:92:10:5e:6b:95:32:9e:9c:4d: 0e:f6:14:3f:f0:2e:3c:ea:44:f7:7d:99:2f:88:c3: ad:2e:7a:60:2f:0b:b4:7e:51:15:e1:4f:07:be:01: 2a:55:60:19:3a:1b:27:6c:d1:98:a4:12:7a:c6:9c: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.126.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60709 Signature Algorithm: sha256WithRSAEncryption 15:d8:d7:d1:83:ca:b6:c5:83:7a:fb:bc:78:63:a0:d4:38:71: 64:16:1b:f0:14:13:c6:46:dc:74:ba:8f:2b:68:98:e3:89:81: 57:2d:56:f7:32:4e:cf:84:60:d0:f6:1d:3a:91:cc:4e:7c:f6: 61:3a:8b:01:e5:d8:eb:6d:eb:e9:a6:1f:0b:ae:51:60:40:b7: a4:98:3e:5c:7a:6f:15:1a:68:69:75:e3:cb:bd:93:62:9a:59: a3:1b:77:fd:34:8c:9c:2e:1c:88:e8:8f:59:3d:ae:af:70:6f: 62:fd:0b:99:9c:70:b5:ad:4a:3f:b8:cd:a7:8c:0d:39:03:93: c4:b0:41:d1:bb:9a:c9:41:a5:b0:49:1a:97:bc:76:82:fc:fb: dd:a1:c0:f1:e7:4e:ea:43:b2:fb:78:68:e8:be:8f:88:55:ea: bd:9c:47:bf:d3:2a:d8:ff:12:bf:11:e6:c9:27:5b:a6:cb:d4: 9f:60:a5:e0:c4:f2:9b:7b:af:b8:1f:d8:48:d3:1a:9e:d5:e4: ed:31:89:0d:d5:88:13:4c:aa:f3:47:a4:ef:b3:e3:4c:99:fc: 24:37:1f:7b:d0:3e:d8:e5:3f:86:02:1e:63:c1:99:20:9d:0f: a9:74:0e:b4:b1:20:dc:09:de:c1:58:a2:9e:ed:13:24:96:35: 4d:b8:8d:13 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NUJt6mner5MB+90wHauGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU5OGVlNmNmYjNmYmE4M2I5NzJhZTEyNjUzYjVkOWZjNzA3MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT0IfpQG9oCYDaDQTQilb0NZuq/a Hn/o8hRBUnb408A/Fl4O0BA7zPSJzUFwpBWXdE0JU9nbymwxCEbXj9ba9BDuSQJO YrOyGAmjuKo9Tpz08aY6Jf+NhVaPtkgCi5jzSgzWXV9m+/fKw7QP+RsnGcTyet0k z3pHP0UphliGahqwHss78lpkZ1x8HTTUa5gQCiqjPqsN7fnzoxnf61vGO6VhCRIm 6Da3U3X2dyzBMN4vNLpAMJ6RycjD3vP/OYq9Sf6ISH4LLzOSEF5rlTKenE0O9hQ/ 8C486kT3fZkviMOtLnpgLwu0flEV4U8HvgEqVWAZOhsnbNGYpBJ6xpx6QQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJ/pjubPs/uoO5cq4SZTtdn8cHAuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzRhMDJh Zi1kNTQ4LTQ0Y2YtOWRmOC0xM2Y4OThiYzdkMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNGEwMmFm LWQ1NDgtNDRjZi05ZGY4LTEzZjg5OGJjN2QwZS8xL24tbU81cy16LTZnN2x5cmhK bE8xMmZ4d2NDNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwmZ+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDtJTANBgkqhkiG9w0BAQsFAAOCAQEAFdjX0YPKtsWDevu8eGOg1DhxZBYb8BQT xkbcdLqPK2iY44mBVy1W9zJOz4Rg0PYdOpHMTnz2YTqLAeXY623r6aYfC65RYEC3 pJg+XHpvFRpoaXXjy72TYppZoxt3/TSMnC4ciOiPWT2ur3BvYv0LmZxwta1KP7jN p4wNOQOTxLBB0buayUGlsEkal7x2gvz73aHA8edO6kOy+3ho6L6PiFXqvZxHv9Mq 2P8SvxHmySdbpsvUn2Cl4MTym3uvuB/YSNMantXk7TGJDdWIE0yq80ek77PjTJn8 JDcfe9A+2OU/hgIeY8GZIJ0PqXQOtLEg3AnewViinu0TJJY1TbiNEw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:16 2026 by rpki-client