This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.cer (raw, json) Hash identifier: brY17VJuTIdFqaksSVbX/CA1Nfczs9/cEZ51TqqX7bk= Subject key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F850A61949F1D39F1FE2630E122C6F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44746 IP: 91.202.156.0/22 IP: 91.214.88.0/22 IP: 185.19.252.0/22 IP: 2a05:b880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0a:61:94:9f:1d:39:f1:fe:26:30:e1:22:c6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:ea:82:5b:65:96:75:0b:9b:98:5e:7b:1c: cd:e3:be:ca:40:38:1b:29:ce:ee:81:08:d0:3c:ee: 57:5e:ae:49:63:22:87:6f:93:a3:4e:63:f6:98:78: d0:3b:d5:fe:34:ce:3e:9e:dd:06:4d:b9:34:14:7e: fd:8e:66:f5:b3:57:f5:72:8a:d0:79:e5:af:b8:92: ba:7b:06:f1:3e:72:83:46:f6:ee:d5:4b:17:28:ee: e5:d0:74:df:11:18:b8:59:1c:95:07:15:88:1f:25: 55:d2:a3:4f:af:03:26:00:3a:23:6c:85:f9:6b:82: 1a:99:7e:59:47:ca:2b:4c:e7:4c:7b:5e:6b:bf:e3: 63:e1:4b:6f:4a:4c:b8:da:18:e1:7c:e6:30:06:e1: 13:0d:fe:92:e0:60:ed:bd:ca:15:83:6b:3b:02:f1: a1:51:91:a3:99:8d:a0:cc:6b:17:9b:71:87:b6:00: 8c:08:ed:a3:86:68:7b:a2:15:ed:4d:7f:5e:f8:f9: 84:a4:d3:ec:73:f3:27:97:9e:ca:54:d1:c3:54:66: 03:98:1e:31:a8:9c:05:ed:35:e2:f2:14:27:b3:c5: 3e:9b:90:f0:19:d5:5b:27:b2:f7:1b:c0:8c:35:2a: d1:49:76:ae:58:ed:4c:18:95:c4:39:1f:19:e4:00: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.156.0/22 91.214.88.0/22 185.19.252.0/22 IPv6: 2a05:b880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44746 Signature Algorithm: sha256WithRSAEncryption 99:88:02:87:5a:e1:07:9f:25:99:58:93:d4:ee:92:29:19:eb: ed:49:14:00:d7:96:92:67:35:c6:18:05:f2:28:a6:55:1e:42: b0:37:c4:ca:9f:ff:48:d0:4f:07:b1:a0:be:8f:ae:57:66:9f: af:b4:0f:d5:92:15:fb:a9:22:76:81:cc:94:76:e7:86:6d:31: 05:69:f5:06:fc:a4:9b:09:98:45:18:64:a4:d9:e5:14:fa:2b: 39:50:0d:81:10:ae:b4:05:d3:82:81:aa:44:26:ee:bd:9f:86: 52:12:98:07:0c:67:a8:c2:8e:07:2c:a1:aa:94:db:42:35:df: 19:b8:ca:df:39:14:f0:4a:49:49:60:7a:9e:5f:55:c5:c7:5b: 2d:43:74:57:4e:f6:d1:6e:2f:7b:66:5a:6b:ef:e3:79:fb:36: 4b:21:61:f2:94:49:91:1d:68:15:bc:74:76:fd:d9:ce:40:b6: 7b:05:6d:11:ef:e4:67:b8:bc:80:42:35:06:eb:9f:28:77:02: 26:96:44:ea:73:3b:d1:7b:03:bb:e2:22:53:af:f7:09:dd:be: 4d:8f:18:1d:a1:a3:be:ec:47:da:f2:9e:c0:98:ce:23:38:1b: 30:f8:7a:1e:0f:95:60:15:cb:3e:8f:03:66:41:60:bd:58:08: 5b:d9:16:6f -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/hQphlJ8dOfH+JjDhIsb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGNlMWI5ZmZiMmU3M2QyYzk3ZjA4OTMwNjNjYWJiMmNiNzQ2NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqTqgltllnULm5heexzN477KQDgb Kc7ugQjQPO5XXq5JYyKHb5OjTmP2mHjQO9X+NM4+nt0GTbk0FH79jmb1s1f1corQ eeWvuJK6ewbxPnKDRvbu1UsXKO7l0HTfERi4WRyVBxWIHyVV0qNPrwMmADojbIX5 a4IamX5ZR8orTOdMe15rv+Nj4UtvSky42hjhfOYwBuETDf6S4GDtvcoVg2s7AvGh UZGjmY2gzGsXm3GHtgCMCO2jhmh7ohXtTX9e+PmEpNPsc/Mnl57KVNHDVGYDmB4x qJwF7TXi8hQns8U+m5DwGdVbJ7L3G8CMNSrRSXauWO1MGJXEOR8Z5ADt2wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNDOG5/7LnPSyX8IkwY8q7LLdGeQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2U1MTMy Mi0wMTQxLTRkMTYtODE2OC1iOWZiNTNhMmYwM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvZTUxMzIy LTAxNDEtNGQxNi04MTY4LWI5ZmI1M2EyZjAzYy8xLzBNNGJuX3N1YzlMSmZ3aVRC anlyc3N0MFo1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCW8qcAwQCW9ZYAwQCuRP8MA0EAgACMAcDBQMq BbiAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCuyjANBgkqhkiG9w0BAQsFAAOC AQEAmYgCh1rhB58lmViT1O6SKRnr7UkUANeWkmc1xhgF8iimVR5CsDfEyp//SNBP B7Ggvo+uV2afr7QP1ZIV+6kidoHMlHbnhm0xBWn1BvykmwmYRRhkpNnlFPorOVAN gRCutAXTgoGqRCbuvZ+GUhKYBwxnqMKOByyhqpTbQjXfGbjK3zkU8EpJSWB6nl9V xcdbLUN0V0720W4ve2Zaa+/jefs2SyFh8pRJkR1oFbx0dv3ZzkC2ewVtEe/kZ7i8 gEI1BuufKHcCJpZE6nM70XsDu+IiU6/3Cd2+TY8YHaGjvuxH2vKewJjOIzgbMPh6 Hg+VYBXLPo8DZkFgvVgIW9kWbw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:19 2026 by rpki-client