This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer File: 01MMFE9ZLPqJG6vxlagXkAzW2RY.cer (raw, json) Hash identifier: Lhyc8/vOlh2fhfB+OKuyWJjxb0UL3oRKq4sdyqYHAxc= Subject key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3945E776555C272BD759487B64250 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197135 IP: 91.216.202.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:94:5e:77:65:55:c2:72:bd:75:94:87:b6:42:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3530c144f592cfa891babf195a817900cd6d916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:19:85:ea:41:5d:c2:ba:12:bf:d8:95:ab: 81:14:93:01:9a:9d:3a:45:c8:cd:2d:e1:4c:ff:0c: 1a:38:02:8c:d5:40:18:a8:a6:27:c9:02:8a:9e:45: ce:1b:96:23:cf:03:e0:48:1a:bf:d6:3d:c5:2a:8a: 93:3d:5a:14:09:30:2f:48:98:cb:66:1f:fc:85:0c: 9b:e0:9c:0a:ba:94:f1:dd:c2:a5:fa:a0:78:e3:6d: c5:9a:e5:77:6f:6c:c3:de:68:ab:b8:46:22:bf:1f: 23:17:5c:00:7e:b5:0b:5a:53:20:b1:25:96:57:58: 15:6d:86:82:e2:e5:18:a3:39:84:3c:0a:b3:85:c9: bd:9c:57:0e:21:57:ae:f0:6b:d9:09:90:ff:89:d3: b1:ad:fe:11:a4:82:ff:b0:4b:a9:18:df:30:d7:df: b3:06:47:3c:cf:b2:8f:28:a5:7e:d0:90:a5:85:0c: dd:bc:19:df:69:5a:d0:64:b5:c0:0c:17:0a:47:2d: 0e:b6:cd:fb:ed:cc:d3:81:00:30:ea:58:f7:93:68: 9e:2e:b3:45:f7:cc:2d:96:2d:9d:39:0f:51:53:ea: 33:41:93:ac:e9:40:6d:1f:8c:bb:98:c1:0a:30:7e: 51:08:9e:6e:9a:a6:9b:0e:df:1c:2f:5d:a3:e1:42: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.202.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197135 Signature Algorithm: sha256WithRSAEncryption 18:e4:bc:2e:b0:08:72:d7:fc:a3:ed:a2:81:96:25:19:02:8f: 1c:fe:63:7d:90:18:77:e0:5e:3d:70:cc:b0:75:8c:2d:d9:3e: ce:a3:79:1f:17:60:e6:3e:07:a5:50:a4:59:12:40:91:7a:fd: b9:87:6c:3e:a4:7d:c2:8e:c1:27:d3:07:25:f6:47:c1:ea:1b: 96:59:7c:75:94:df:bc:22:91:a1:0e:b6:ec:ac:85:b5:08:4b: 39:9a:99:be:70:f7:3a:33:4b:01:7c:b7:c0:39:bd:0a:44:42: 80:0f:c2:54:1d:a9:5f:ee:83:c7:54:5b:48:a4:e4:95:27:63: 57:43:b9:25:86:f2:fb:f4:5d:ac:fd:43:b9:c1:47:3c:b7:88: 5e:44:78:56:29:e8:0a:ad:fa:e5:25:d7:85:18:ff:a1:bb:ad: 15:ef:06:28:c0:27:74:e7:79:cb:e5:d8:bd:d2:95:b6:44:8d: 6e:b0:30:98:32:5f:c3:90:44:5f:d7:3c:09:f7:fd:67:47:8b: 32:7e:d4:65:66:58:58:bc:0e:ad:2e:23:46:92:0c:4d:80:c5: ec:65:a5:b0:0b:eb:eb:3f:e0:0f:ff:ca:42:c0:a7:5f:94:05: d2:ae:c5:2f:50:61:da:68:68:ab:4a:e0:cc:24:f3:56:d3:5c: 62:b4:30:a2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o5Red2VVwnK9dZSHtkJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzUzMGMxNDRmNTkyY2ZhODkxYmFiZjE5NWE4MTc5MDBjZDZkOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveYZhepBXcK6Er/YlauBFJMBmp06 RcjNLeFM/wwaOAKM1UAYqKYnyQKKnkXOG5YjzwPgSBq/1j3FKoqTPVoUCTAvSJjL Zh/8hQyb4JwKupTx3cKl+qB4423FmuV3b2zD3miruEYivx8jF1wAfrULWlMgsSWW V1gVbYaC4uUYozmEPAqzhcm9nFcOIVeu8GvZCZD/idOxrf4RpIL/sEupGN8w19+z Bkc8z7KPKKV+0JClhQzdvBnfaVrQZLXADBcKRy0Ots377czTgQAw6lj3k2ieLrNF 98wtli2dOQ9RU+ozQZOs6UBtH4y7mMEKMH5RCJ5umqabDt8cL12j4UKVvQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNNTDBRPWSz6iRur8ZWoF5AM1tkWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkL2QzY2M4 MC1jMWRlLTQ5OGYtODhlZi02YmE3OTk1N2U4NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvZDNjYzgw LWMxZGUtNDk4Zi04OGVmLTZiYTc5OTU3ZTg2Mi8xLzAxTU1GRTlaTFBxSkc2dnhs YWdYa0F6VzJSWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9jKMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMCDzANBgkqhkiG9w0BAQsFAAOCAQEAGOS8LrAIctf8o+2igZYlGQKPHP5jfZAY d+BePXDMsHWMLdk+zqN5Hxdg5j4HpVCkWRJAkXr9uYdsPqR9wo7BJ9MHJfZHweob lll8dZTfvCKRoQ627KyFtQhLOZqZvnD3OjNLAXy3wDm9CkRCgA/CVB2pX+6Dx1Rb SKTklSdjV0O5JYby+/RdrP1DucFHPLeIXkR4VinoCq365SXXhRj/obutFe8GKMAn dOd5y+XYvdKVtkSNbrAwmDJfw5BEX9c8Cff9Z0eLMn7UZWZYWLwOrS4jRpIMTYDF 7GWlsAvr6z/gD//KQsCnX5QF0q7FL1Bh2mhoq0rgzCTzVtNcYrQwog== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:26 2026 by rpki-client