This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer File: M-oI76mz94ye-dt2etwh3WGDTg8.cer (raw, json) Hash identifier: cn+X3r2FBxbxF8+at0ueeWNqPDKynObzQI/0k7xchxk= Subject key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8042F48AFCAD0AAA346626A89890C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49630 AS: 198944 IP: 81.161.96.0/23 IP: 185.82.228.0/22 IP: 185.137.112.0/22 IP: 185.247.100.0/22 IP: 2001:67c:2a68::/48 IP: 2a03:6960::/32 IP: 2a03:a560::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:42:f4:8a:fc:ad:0a:aa:34:66:26:a8:98:90:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:60:98:76:e6:7f:7e:96:8d:94:b8:49:b7: 4f:9e:cd:1c:41:0a:c8:8d:97:3a:88:ab:81:39:94: ff:1d:df:51:1f:44:71:69:66:a7:9e:ab:2f:45:bc: ed:05:02:12:1b:19:95:a3:77:cc:60:df:7c:ab:28: 71:f7:55:81:65:41:7d:61:e6:da:1f:c1:6b:73:36: 3a:3b:44:93:88:3a:1b:ac:f5:64:80:89:bc:0f:8f: 37:37:44:73:f3:19:d9:4b:ec:ff:d0:30:00:b2:15: 07:53:36:8b:fc:72:c1:d2:32:dc:51:44:e1:a7:ca: 85:54:fb:37:ff:32:6f:9b:e5:ab:52:f7:e4:41:f8: 7e:2b:cd:19:c7:6b:98:0e:18:63:2f:77:1f:80:a1: 8c:2a:91:a7:05:38:1c:57:a2:2f:ab:35:61:10:26: d9:6c:4e:d4:c9:3b:77:01:d8:15:41:c8:db:03:d1: 2a:83:9c:88:5c:55:87:15:33:ac:98:91:0d:2a:d0: bb:85:96:9c:00:3d:93:5a:2d:15:91:08:55:75:9d: ae:e2:89:37:2c:be:8c:97:15:c3:e6:ca:13:1f:98: 2f:67:86:9d:e5:d2:7b:35:d9:0d:04:3f:2b:67:18: 52:e4:49:cf:bf:22:95:21:9c:eb:60:54:4b:b3:4b: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.96.0/23 185.82.228.0/22 185.137.112.0/22 185.247.100.0/22 IPv6: 2001:67c:2a68::/48 2a03:6960::/32 2a03:a560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49630 198944 Signature Algorithm: sha256WithRSAEncryption 0a:4b:3c:fb:2d:60:02:f4:d9:c1:5c:9c:94:75:58:d6:d7:e3: 86:54:82:98:a1:e5:45:c2:e1:b2:59:6c:45:31:18:c2:37:ee: 7f:60:54:e3:df:8d:05:2b:37:3a:c4:49:aa:2a:13:d9:2b:0f: 4d:32:b0:85:60:39:e8:89:38:1c:94:7e:e6:d0:ac:56:e7:88: 8e:6e:b3:69:a3:db:5b:0c:75:7b:d8:64:33:0b:b5:c2:b0:6e: ab:1f:00:d3:06:9e:75:18:b1:9d:df:61:b8:ee:57:83:dc:91: e9:aa:9a:73:ea:39:ff:35:7c:97:8f:73:80:3e:08:cd:ff:f7: 38:a4:d6:c9:b4:30:53:e7:fd:cd:47:8a:d4:59:e3:07:8b:8a: aa:b4:8d:bd:c0:de:00:81:dd:4b:7b:b1:78:0a:7a:cf:64:ac: 0b:94:0e:78:08:86:e8:fe:ed:89:70:3e:e9:7b:24:bc:cb:f5: 4c:a5:2a:7d:f9:1b:6d:95:7d:b3:aa:fd:34:54:c6:56:1c:12: 67:ad:e9:63:63:cd:3a:b3:0a:74:14:ee:51:2d:f1:a4:09:e7: ad:d6:bd:cd:2c:60:e1:7f:77:11:51:6c:15:f6:eb:2c:34:76: 48:d3:ba:af:0c:a5:3a:1f:41:58:7d:e7:c3:f7:b0:e5:01:5f: 2a:07:32:63 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt8gEL0ivytCqo0ZiaomJDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2VhMDhlZmE5YjNmNzhjOWVmOWRiNzY3YWRjMjFkZDYxODM0ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYNgmHbmf36WjZS4SbdPns0cQQrI jZc6iKuBOZT/Hd9RH0RxaWannqsvRbztBQISGxmVo3fMYN98qyhx91WBZUF9Yeba H8FrczY6O0STiDobrPVkgIm8D483N0Rz8xnZS+z/0DAAshUHUzaL/HLB0jLcUUTh p8qFVPs3/zJvm+WrUvfkQfh+K80Zx2uYDhhjL3cfgKGMKpGnBTgcV6IvqzVhECbZ bE7UyTt3AdgVQcjbA9Eqg5yIXFWHFTOsmJENKtC7hZacAD2TWi0VkQhVdZ2u4ok3 LL6MlxXD5soTH5gvZ4ad5dJ7NdkNBD8rZxhS5EnPvyKVIZzrYFRLs0tewwIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFDPqCO+ps/eMnvnbdnrcId1hg04PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzY4ODQy NS0xNGNiLTRmZDYtOGYyNy1kZWNjZmEzZWE2MzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNjg4NDI1 LTE0Y2ItNGZkNi04ZjI3LWRlY2NmYTNlYTYzNS8xL00tb0k3Nm16OTR5ZS1kdDJl dHdoM1dHRFRnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFAGCCsGAQUF BwEHAQH/BEEwPzAeBAIAATAYAwQBUaFgAwQCuVLkAwQCuYlwAwQCufdkMB0EAgAC MBcDBwAgAQZ8KmgDBQAqA2lgAwUAKgOlYDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAwd4CAwMJIDANBgkqhkiG9w0BAQsFAAOCAQEACks8+y1gAvTZwVyclHVY1tfj hlSCmKHlRcLhsllsRTEYwjfuf2BU49+NBSs3OsRJqioT2SsPTTKwhWA56Ik4HJR+ 5tCsVueIjm6zaaPbWwx1e9hkMwu1wrBuqx8A0waedRixnd9huO5Xg9yR6aqac+o5 /zV8l49zgD4Izf/3OKTWybQwU+f9zUeK1FnjB4uKqrSNvcDeAIHdS3uxeAp6z2Ss C5QOeAiG6P7tiXA+6XskvMv1TKUqffkbbZV9s6r9NFTGVhwSZ63pY2PNOrMKdBTu US3xpAnnrda9zSxg4X93EVFsFfbrLDR2SNO6rwylOh9BWH3nw/ew5QFfKgcyYw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:40 2026 by rpki-client