This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer (raw, json) Hash identifier: 7IcMf+NjCgTQjgGfdY5NJk/YX18eFv7K2o5hj8MJa8Q= Subject key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF213A24199D2C1DB2803A3A75C8119 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.164.153.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:13:a2:41:99:d2:c1:db:28:03:a3:a7:5c:81:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:91:57:43:d0:31:c0:94:23:e4:91:63:f1: 6e:28:c4:e4:7c:98:53:e7:31:15:39:11:52:ee:81: c8:36:2d:35:b5:db:04:9a:3e:1a:8a:31:4c:9b:d7: 7e:df:6e:44:c9:61:db:d3:22:bf:cf:e4:73:32:dc: f0:79:ce:7e:6b:a2:c9:04:f8:09:4f:24:ea:5d:65: c6:7b:fa:6c:e4:ff:1d:89:33:c2:42:6a:25:c9:5a: c4:6e:e0:2e:1b:6a:ae:27:db:b2:aa:8d:52:ca:e9: 3e:60:be:5b:65:b2:97:a0:ed:f8:a2:28:87:ee:31: 4c:18:ac:f5:25:f5:61:38:83:7f:34:08:27:4c:10: 00:b5:0f:3b:d5:40:42:7c:08:6c:67:9f:25:19:cf: 36:81:d7:16:69:df:67:89:7f:df:cb:b2:c2:12:ed: 5a:d1:73:82:8e:5c:e5:15:25:f5:de:7f:fe:24:46: 41:c8:0e:d6:2d:0d:c3:90:e5:61:4c:da:be:41:93: c6:6d:19:96:0a:6f:28:1a:1e:1b:8b:d6:00:87:c3: be:b9:de:f3:ad:ac:2a:81:7e:ae:7d:01:d0:23:7f: 71:c6:1f:87:f1:b3:8b:2f:b0:ce:97:ad:1e:05:a2: cf:f9:df:9e:07:db:9a:2c:eb:5d:c7:17:04:a1:a9: 8b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.153.0/24 Signature Algorithm: sha256WithRSAEncryption 23:22:6e:e5:63:3a:d9:4e:76:97:89:55:39:e1:d8:11:5e:72: 8c:3e:08:69:ec:6c:45:a2:f9:f4:cb:f7:6b:49:f8:81:bc:7a: 78:7d:de:7a:92:98:bd:f7:77:78:cb:70:34:40:0a:f1:4c:a1: 1e:2b:61:60:2f:62:55:c0:12:82:8f:9e:22:83:1c:4e:fa:4c: b1:36:b9:ec:b7:77:a8:8e:1d:e9:a6:47:98:71:9a:1d:73:ec: ae:98:ce:eb:d5:f2:ae:fd:0d:4d:c3:ae:3b:8e:18:0e:8c:d6: 47:7e:e6:38:44:78:62:c9:4a:5a:dc:7d:d2:85:8f:14:5c:bb: 98:ec:3d:a1:2a:65:47:d5:ed:ba:20:29:8f:28:ee:4f:91:29: 1c:b6:87:24:ec:32:95:de:36:0e:7b:be:fa:f6:d8:bc:d6:7c: cd:9b:f5:88:b0:f3:37:99:c5:2b:1c:15:0a:a8:54:f3:db:5d: 35:b6:00:73:ba:e4:04:a8:f3:b9:3a:69:42:df:7a:9e:44:02: 76:c1:63:12:fb:7d:45:da:9a:ba:66:a3:74:26:f2:ea:43:1e: 81:e6:29:61:9d:0b:82:36:20:c2:26:c6:52:50:e7:ee:a8:fe: 9c:e5:3d:4b:fa:7b:78:83:33:f7:a4:1c:71:ea:14:24:10:00: f2:d2:ff:75 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/8hOiQZnSwdsoA6OnXIEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2NlMTYwMGY1MDczNTk2MGY4NmQ2MjFjZDRmNWY1OWY4NzlhMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg6RV0PQMcCUI+SRY/FuKMTkfJhT 5zEVORFS7oHINi01tdsEmj4aijFMm9d+325EyWHb0yK/z+RzMtzwec5+a6LJBPgJ TyTqXWXGe/ps5P8diTPCQmolyVrEbuAuG2quJ9uyqo1Syuk+YL5bZbKXoO34oiiH 7jFMGKz1JfVhOIN/NAgnTBAAtQ871UBCfAhsZ58lGc82gdcWad9niX/fy7LCEu1a 0XOCjlzlFSX13n/+JEZByA7WLQ3DkOVhTNq+QZPGbRmWCm8oGh4bi9YAh8O+ud7z rawqgX6ufQHQI39xxh+H8bOLL7DOl60eBaLP+d+eB9uaLOtdxxcEoamL7QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJzOFgD1BzWWD4bWIc1PX1n4eaDoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzRmMTdm YS1kNWU4LTQzOWQtODdhMi1kZjMyYTI1YzVmMmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNGYxN2Zh LWQ1ZTgtNDM5ZC04N2EyLWRmMzJhMjVjNWYyZi8xL25NNFdBUFVITlpZUGh0WWh6 VTlmV2ZoNW9PZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAPqSZMA0GCSqGSIb3DQEBCwUAA4IBAQAjIm7l YzrZTnaXiVU54dgRXnKMPghp7GxFovn0y/drSfiBvHp4fd56kpi993d4y3A0QArx TKEeK2FgL2JVwBKCj54igxxO+kyxNrnst3eojh3ppkeYcZodc+yumM7r1fKu/Q1N w647jhgOjNZHfuY4RHhiyUpa3H3ShY8UXLuY7D2hKmVH1e26ICmPKO5PkSkctock 7DKV3jYOe7769ti81nzNm/WIsPM3mcUrHBUKqFTz2101tgBzuuQEqPO5OmlC33qe RAJ2wWMS+31F2pq6ZqN0JvLqQx6B5ilhnQuCNiDCJsZSUOfuqP6c5T1L+nt4gzP3 pBxx6hQkEADy0v91 -----END CERTIFICATE-----Generated at Mon Jan 26 04:49:35 2026 by rpki-client