This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer File: rmrw1fOCidNMIbpnxMOXh6QqZp4.cer (raw, json) Hash identifier: xpMxh+0Hi6Q/+SQk9pv0Eo6joR8OLSa6Pp0Cy5/K8vU= Subject key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC932F24BD65D8B5B5FB7FDC6A64561 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.11.104.0/22 IP: 2a02:da40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:32:f2:4b:d6:5d:8b:5b:5f:b7:fd:c6:a6:45:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:29:08:53:97:3c:2c:92:52:09:f9:93:4b: 5e:86:0c:89:b6:cb:a5:07:f2:03:70:d8:90:9f:52: 5e:54:a1:0b:b7:8a:95:2c:c3:c3:91:3e:ef:de:1c: c1:f8:89:cb:7f:c3:76:f5:6e:58:05:2b:d0:a8:89: fe:b7:e7:87:29:d6:1d:a8:1a:55:5d:d6:8e:a8:4c: 50:1e:2f:ca:4f:8b:61:55:2b:68:ae:36:0b:3f:4a: 0b:aa:98:ac:d6:e1:d6:c7:04:49:60:b9:21:46:a7: 05:86:f1:01:f3:c4:dc:ce:48:95:5d:bd:08:73:b6: 0a:54:e7:26:90:d7:bd:1c:57:a4:ed:03:bb:73:44: 5b:c8:cf:1a:16:63:17:0b:46:ed:cc:64:7f:d8:35: bd:76:36:0e:69:01:7b:d9:fb:fe:58:3d:02:c5:be: 55:da:fa:94:06:98:5d:db:d8:21:1c:6b:d5:94:00: 7f:a2:20:b5:4a:21:2e:d8:07:67:be:39:9b:a5:3f: 86:a5:db:ad:bd:e5:8b:cd:08:24:f4:73:63:d1:b3: 84:20:6e:8f:5f:96:a7:d4:39:89:94:d8:11:22:52: cf:4d:a6:23:6c:74:d1:d9:35:dd:39:67:55:17:7b: a2:86:8f:31:40:01:52:95:9b:19:1d:de:9f:ee:f1: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.104.0/22 IPv6: 2a02:da40::/29 Signature Algorithm: sha256WithRSAEncryption 33:77:05:56:a1:65:58:d5:d8:5a:98:2d:4d:a0:fe:47:a1:6b: f4:1f:e4:7f:b4:7b:5c:cc:c9:0a:41:1c:d7:e0:28:7e:4c:4d: cd:5f:e3:dc:91:23:1a:f8:f3:46:d7:9f:cb:d3:f4:d9:94:8d: 68:1b:a7:9f:c7:1b:17:c1:65:39:96:77:ae:ba:80:2d:99:78: ed:58:ea:05:a7:85:f2:e5:53:9d:00:85:68:50:5c:3d:5c:59: 6e:39:ae:0f:cb:5f:42:e9:57:20:5e:b2:f0:a3:c0:3f:7d:99: cd:84:4a:17:28:2d:4e:e4:d6:56:7b:9c:d7:e8:d0:e0:df:04: db:bb:d8:21:f5:e2:33:11:00:12:26:7b:42:7a:7d:e4:11:44: 62:ed:91:6c:af:26:bd:9d:b6:c2:2e:63:c2:4a:d8:e7:7a:25: b2:6b:be:57:cf:52:0b:12:ea:65:bb:15:ca:de:be:88:3c:ca: 9c:18:a4:49:63:67:43:f7:32:01:09:68:88:2f:38:57:29:9d: de:65:e8:75:e4:15:9a:f8:6c:15:88:5a:a5:47:cc:71:69:51: e4:da:d6:26:28:ca:66:5f:56:f2:ff:f7:3a:1d:2f:f5:59:a9: 8b:94:77:c5:05:fc:b0:61:d6:3d:a5:71:e0:03:d5:da:52:63: 00:fa:15:d9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yTLyS9Zdi1tft/3GpkVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTZhZjBkNWYzODI4OWQzNGMyMWJhNjdjNGMzOTc4N2E0MmE2NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/MpCFOXPCySUgn5k0tehgyJtsul B/IDcNiQn1JeVKELt4qVLMPDkT7v3hzB+InLf8N29W5YBSvQqIn+t+eHKdYdqBpV XdaOqExQHi/KT4thVStorjYLP0oLqpis1uHWxwRJYLkhRqcFhvEB88TczkiVXb0I c7YKVOcmkNe9HFek7QO7c0RbyM8aFmMXC0btzGR/2DW9djYOaQF72fv+WD0Cxb5V 2vqUBphd29ghHGvVlAB/oiC1SiEu2AdnvjmbpT+GpdutveWLzQgk9HNj0bOEIG6P X5an1DmJlNgRIlLPTaYjbHTR2TXdOWdVF3uiho8xQAFSlZsZHd6f7vH9ZwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFK5q8NXzgonTTCG6Z8TDl4ekKmaeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlL2RlZjU1 NS05NjUxLTRlODEtODI4Yy03YTk0ZGE3ZDllZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvZGVmNTU1 LTk2NTEtNGU4MS04MjhjLTdhOTRkYTdkOWVlMi8xL3JtcncxZk9DaWROTUlicG54 TU9YaDZRcVpwNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQtoMA0EAgACMAcDBQMqAtpAMA0GCSqGSIb3 DQEBCwUAA4IBAQAzdwVWoWVY1dhamC1NoP5HoWv0H+R/tHtczMkKQRzX4Ch+TE3N X+PckSMa+PNG15/L0/TZlI1oG6efxxsXwWU5lneuuoAtmXjtWOoFp4Xy5VOdAIVo UFw9XFluOa4Py19C6VcgXrLwo8A/fZnNhEoXKC1O5NZWe5zX6NDg3wTbu9gh9eIz EQASJntCen3kEURi7ZFsrya9nbbCLmPCStjneiWya75Xz1ILEupluxXK3r6IPMqc GKRJY2dD9zIBCWiILzhXKZ3eZeh15BWa+GwViFqlR8xxaVHk2tYmKMpmX1by//c6 HS/1WamLlHfFBfywYdY9pXHgA9XaUmMA+hXZ -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:31 2026 by rpki-client