This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer File: rMSPelkSBYjUFw6igV5q5RvmvP8.cer (raw, json) Hash identifier: lQ4aZ9DxSc0lYQt/1q7v8vXZRfYgXQivM0sTdMR9XjU= Subject key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA720FE669B626603EA08D075C771AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206720 IP: 185.187.244.0/22 IP: 193.56.32.0 -- 193.56.40.255 IP: 193.56.42.0 -- 193.56.45.255 IP: 193.57.48.0/24 IP: 194.5.55.0/24 IP: 2a00:6fc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:20:fe:66:9b:62:66:03:ea:08:d0:75:c7:71:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:82:be:af:c1:0d:28:2c:a5:5e:ef:dd:79: cf:4c:d0:cc:7e:17:25:34:a6:2b:f5:ca:57:4b:b2: a4:2f:54:5f:4e:bb:98:19:ee:d2:0d:42:1f:3d:47: 93:1f:74:be:24:6a:4f:c7:fc:d1:19:fc:d5:b4:03: fe:5f:d1:c6:c5:5f:ce:2a:af:b5:ed:ea:42:55:7e: 23:d5:27:10:98:d8:6f:0f:10:8b:3d:3c:f3:e6:f3: ae:ae:72:84:b1:a5:c4:b5:0a:b6:2d:b4:39:75:23: 21:1e:03:62:0a:9a:59:99:bd:2f:19:20:a1:c5:b1: df:70:5b:68:d5:0f:6c:f5:96:1c:5d:96:e5:a9:e7: ce:c6:b3:1e:73:d4:98:8a:86:b0:8e:3e:cc:92:52: 0f:cb:b9:98:1b:ab:4c:45:18:f0:7d:ab:24:ac:2e: 07:d5:1d:8b:9d:fd:ce:a2:e2:82:0d:91:f7:f5:3a: ca:2c:6f:30:25:0d:c0:36:75:a8:91:46:dd:52:5a: f9:40:2e:09:91:f3:d7:0e:38:34:b4:f7:17:8b:1b: 0a:20:90:62:c2:9f:fc:37:b7:99:23:49:8e:d5:dc: f1:e0:4c:6d:76:28:ed:33:3d:8d:21:7b:8a:a9:18: 61:ec:89:b1:1c:e6:58:7a:66:84:e7:b1:d2:ad:02: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.244.0/22 193.56.32.0-193.56.40.255 193.56.42.0-193.56.45.255 193.57.48.0/24 194.5.55.0/24 IPv6: 2a00:6fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206720 Signature Algorithm: sha256WithRSAEncryption 50:26:e0:c6:54:05:30:af:67:91:56:ad:56:16:0e:ad:93:7f: 8d:0d:8f:6d:10:f2:8c:63:28:c5:16:6d:d1:29:4d:ae:c7:0c: 29:3d:de:63:af:23:4d:de:13:54:34:c2:14:14:ab:a9:c1:41: fb:51:e9:43:5e:0b:a0:b0:86:90:f5:11:9e:00:0f:43:4c:09: 0d:68:ff:7f:c2:fa:f6:a0:bf:d4:5c:00:12:a2:91:09:e8:18: eb:02:85:c7:0b:c7:30:ed:8d:c0:c1:99:8c:c8:91:39:d6:e2: 53:69:7b:26:39:69:e6:30:d1:d6:8f:34:9e:c8:c7:2d:a0:61: cd:07:b8:c7:af:b1:92:6a:68:45:90:0b:fd:31:19:37:ee:9a: 0a:d4:35:c3:4a:bd:5d:e1:a9:86:f6:e8:a7:c6:88:b1:7e:eb: cf:ea:bf:b3:99:42:f2:5b:bb:bc:2a:0d:74:a5:39:80:c0:3a: 38:e6:45:9d:cb:39:01:8c:33:1d:4e:03:fa:68:5a:38:77:3d: fb:ae:38:e3:31:11:8e:71:55:4e:51:af:14:0c:f6:60:1b:82: 56:5f:d3:c0:97:8b:cd:77:8c:7c:1b:40:c7:9f:17:f4:17:1a: 65:65:65:36:9c:04:5c:b3:55:95:a1:b6:3f:33:38:74:d4:96: 5e:f6:ce:4d -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt+pyD+ZptiZgPqCNB1x3GvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2M0OGY3YTU5MTIwNTg4ZDQxNzBlYTI4MTVlNmFlNTFiZTZiY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzeCvq/BDSgspV7v3XnPTNDMfhcl NKYr9cpXS7KkL1RfTruYGe7SDUIfPUeTH3S+JGpPx/zRGfzVtAP+X9HGxV/OKq+1 7epCVX4j1ScQmNhvDxCLPTzz5vOurnKEsaXEtQq2LbQ5dSMhHgNiCppZmb0vGSCh xbHfcFto1Q9s9ZYcXZblqefOxrMec9SYioawjj7MklIPy7mYG6tMRRjwfaskrC4H 1R2Lnf3OouKCDZH39TrKLG8wJQ3ANnWokUbdUlr5QC4JkfPXDjg0tPcXixsKIJBi wp/8N7eZI0mO1dzx4ExtdijtMz2NIXuKqRhh7ImxHOZYemaE57HSrQLjywIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFKzEj3pZEgWI1BcOooFeauUb5rz/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2Q4Njc5 ZS00NmJiLTQ0ZjUtYmE1Mi1iNTJiM2EyMzZmYTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvZDg2Nzll LTQ2YmItNDRmNS1iYTUyLWI1MmIzYTIzNmZhNy8xL3JNU1BlbGtTQllqVUZ3Nmln VjVxNVJ2bXZQOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFYGCCsGAQUF BwEHAQH/BEcwRTA0BAIAATAuAwQCubv0MAwDBAXBOCADBADBOCgwDAMEAcE4KgME AcE4LAMEAME5MAMEAMIFNzANBAIAAjAHAwUAKgBvwDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMDJ4AwDQYJKoZIhvcNAQELBQADggEBAFAm4MZUBTCvZ5FWrVYWDq2T f40Nj20Q8oxjKMUWbdEpTa7HDCk93mOvI03eE1Q0whQUq6nBQftR6UNeC6CwhpD1 EZ4AD0NMCQ1o/3/C+vagv9RcABKikQnoGOsChccLxzDtjcDBmYzIkTnW4lNpeyY5 aeYw0daPNJ7Ixy2gYc0HuMevsZJqaEWQC/0xGTfumgrUNcNKvV3hqYb26KfGiLF+ 68/qv7OZQvJbu7wqDXSlOYDAOjjmRZ3LOQGMMx1OA/poWjh3PfuuOOMxEY5xVU5R rxQM9mAbglZf08CXi813jHwbQMefF/QXGmVlZTacBFyzVZWhtj8zOHTUll72zk0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:29 2026 by rpki-client