This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer (raw, json) Hash identifier: ab67M1e5QrntF0VwDln0BYimPTGFMsONH2j86WwE5fU= Subject key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37D855CBFF22D2D2118CB597B1250E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.133.188.0/22 IP: 2a0e:77c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d8:55:cb:ff:22:d2:d2:11:8c:b5:97:b1:25:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:b2:66:61:ad:6e:e1:09:0c:4e:26:29:5b: 67:89:d2:01:e2:c7:84:56:ee:40:af:ce:56:87:e7: e7:57:ae:7b:7e:ab:a1:91:0c:b5:73:c3:99:85:22: de:93:87:9b:a2:0d:1b:11:a7:90:c3:6e:e8:2e:c9: 8c:9c:cd:a0:21:46:22:f0:89:d7:c8:67:95:d5:1e: dd:a2:0c:36:ea:c8:b6:5a:1b:16:32:4f:e2:2f:4b: 27:60:4b:06:11:5e:b3:86:78:c0:6d:c8:12:e8:47: ce:f3:35:2b:ce:9c:89:1d:82:c5:3e:39:81:86:65: 1a:97:da:74:80:87:d7:f4:36:1a:a5:80:8d:fd:3e: 9b:c6:33:b8:0e:fc:ba:1a:d2:f7:42:72:b9:7f:98: 74:d3:37:0d:6f:21:c3:2b:74:8f:fa:b0:cd:76:02: e6:fd:66:1d:a6:5a:5c:46:70:fd:63:7a:45:29:25: 49:70:af:33:77:f8:9a:5e:ac:3f:58:7a:18:37:e9: 65:fb:43:5c:fe:6b:2d:29:6b:2b:a0:1e:43:19:4d: 5e:ab:b6:15:47:86:0b:9b:9e:ba:93:82:25:b2:6b: 79:ec:e4:60:d2:01:11:74:93:ab:16:8d:f1:18:db: fd:1f:05:c7:d1:c3:1e:e7:20:5d:1b:5b:d8:f1:83: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.188.0/22 IPv6: 2a0e:77c0::/29 Signature Algorithm: sha256WithRSAEncryption 8e:8f:e0:e4:cd:2a:c6:4d:f6:1d:91:90:30:c6:b8:1b:cc:cb: d4:97:14:66:a7:29:85:62:1a:2e:86:b2:49:d7:fa:65:7d:08: b4:2c:68:b4:08:fa:f9:4c:82:58:14:3f:fa:72:91:03:a6:29: 9a:14:4e:6f:05:06:dd:04:ec:5c:87:45:16:42:9f:ef:b3:16: b9:fb:79:df:0c:ee:cf:00:3e:e5:bd:91:ae:58:59:ac:a7:cf: b8:9e:28:09:77:65:9a:70:97:d2:ee:70:84:41:e5:90:a5:53: 42:e0:ab:5a:f4:4c:c6:31:1a:2d:f6:98:a9:d3:69:c0:81:ba: 9f:7d:28:b8:a8:1b:73:76:42:60:fd:c4:76:ee:f9:57:2e:41: 6a:a4:47:7d:3e:de:5e:7f:4c:66:8c:0c:7e:f2:6a:a2:82:47: 6d:ea:cc:67:99:07:9e:e6:39:f8:45:0c:ab:40:f3:ac:6c:a6: e8:d8:49:98:43:cb:2d:b5:37:5c:73:b8:95:38:94:0d:82:15: cd:30:f7:9e:12:65:40:0b:eb:77:10:f9:54:f5:d4:ed:65:fa: 57:d0:2e:8d:9b:dd:b0:3d:87:2c:bb:e1:a4:66:e1:40:be:1f: c9:1c:87:99:1a:4b:9d:a6:c8:46:81:8a:de:6c:58:26:64:b1: 19:ae:b5:6b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+N9hVy/8i0tIRjLWXsSUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjgzMmMxMDE0NGU0ZDdmNmE2NDJjNjBkY2VhZTE0MzZmYzk5Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCqyZmGtbuEJDE4mKVtnidIB4seE Vu5Ar85Wh+fnV657fquhkQy1c8OZhSLek4ebog0bEaeQw27oLsmMnM2gIUYi8InX yGeV1R7dogw26si2WhsWMk/iL0snYEsGEV6zhnjAbcgS6EfO8zUrzpyJHYLFPjmB hmUal9p0gIfX9DYapYCN/T6bxjO4Dvy6GtL3QnK5f5h00zcNbyHDK3SP+rDNdgLm /WYdplpcRnD9Y3pFKSVJcK8zd/iaXqw/WHoYN+ll+0Nc/mstKWsroB5DGU1eq7YV R4YLm566k4Ilsmt57ORg0gERdJOrFo3xGNv9HwXH0cMe5yBdG1vY8YM1twIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFA+DLBAUTk1/amQsYNzq4UNvyZyhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjLzVjNTFj ZS03NjBkLTQ0YTAtYTMzOS1jYzY4ZTM3ZDI0NWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvNWM1MWNl LTc2MGQtNDRhMC1hMzM5LWNjNjhlMzdkMjQ1Zi8xL0Q0TXNFQlJPVFg5cVpDeGcz T3JoUTJfSm5LRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYW8MA0EAgACMAcDBQMqDnfAMA0GCSqGSIb3 DQEBCwUAA4IBAQCOj+DkzSrGTfYdkZAwxrgbzMvUlxRmpymFYhouhrJJ1/plfQi0 LGi0CPr5TIJYFD/6cpEDpimaFE5vBQbdBOxch0UWQp/vsxa5+3nfDO7PAD7lvZGu WFmsp8+4nigJd2WacJfS7nCEQeWQpVNC4Kta9EzGMRot9pip02nAgbqffSi4qBtz dkJg/cR27vlXLkFqpEd9Pt5ef0xmjAx+8mqigkdt6sxnmQee5jn4RQyrQPOsbKbo 2EmYQ8sttTdcc7iVOJQNghXNMPeeEmVAC+t3EPlU9dTtZfpX0C6Nm92wPYcsu+Gk ZuFAvh/JHIeZGkudpshGgYrebFgmZLEZrrVr -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:43 2026 by rpki-client