This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer File: M1wzNuLOO9daspzoHlT_gexW8do.cer (raw, json) Hash identifier: IS7BnogqypXg6sj0T0SF9EDSs4k+eG/Uc9TyUtK3kkc= Subject key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1325E8D5CD8A20BFB612C4EC107636 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202823 IP: 185.150.220.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:25:e8:d5:cd:8a:20:bf:b6:12:c4:ec:10:76:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e7:a0:b4:e4:5f:98:f9:17:41:10:83:44:72: 66:13:e2:f1:2a:d7:bf:06:56:1f:5f:e6:ba:1b:9b: c1:f4:e3:2d:d2:b2:2b:bb:5c:3e:e7:b5:a0:dd:91: 83:66:8b:3f:ec:64:3e:27:2d:20:ce:00:f3:f0:43: 6f:7b:35:e6:51:3a:6d:bf:96:90:2b:9f:42:81:46: 59:1c:ed:06:84:56:b7:0b:ae:3d:1c:e9:9c:01:1f: 41:dd:3d:f6:64:09:10:eb:eb:bc:a6:4a:38:bd:b8: 27:5d:98:e8:ab:af:80:ab:e3:a6:32:14:de:ae:3c: c1:b6:7a:6d:c6:da:b2:c9:6e:7c:86:3b:90:a0:34: 10:e2:8a:63:3e:c0:b8:e8:94:7e:6a:70:2a:da:85: 33:82:7b:3c:bb:34:cf:46:bf:0c:ba:2a:6f:71:e2: 06:71:88:c4:0b:cb:4f:ba:69:08:4a:28:71:33:d1: 7d:69:84:e8:c0:77:89:93:6d:d9:e2:78:85:ca:d4: 29:d2:ae:ca:d1:a3:db:df:03:bb:4f:58:1d:8b:26: 2b:ac:bc:8a:18:3a:b7:01:af:59:7c:6b:9d:6e:b6: 9e:39:72:86:65:52:5e:29:cc:3d:07:74:de:7c:98: d7:a3:cd:cf:d9:e8:55:f1:d5:4d:03:bc:12:dd:23: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.220.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202823 Signature Algorithm: sha256WithRSAEncryption 56:fe:76:e7:dd:16:4f:cd:90:09:03:06:0c:ff:d5:fd:37:33: f5:2c:f0:6c:6c:ba:3a:71:08:46:a0:44:d3:e1:1b:9a:a4:bd: d8:e0:81:72:f6:ef:92:ff:97:a6:5f:0d:c8:34:46:53:50:ae: 61:0d:5a:9f:49:ce:d4:24:61:bf:6f:ea:7e:91:ce:75:51:cc: 6c:ff:c6:99:b1:75:09:8b:da:d0:89:ab:d5:f0:7c:05:48:84: 53:69:f3:a2:3e:c3:14:0d:a7:f0:6e:14:ed:9d:ea:82:54:3e: c9:bb:75:5c:e6:b7:9d:8e:88:94:cb:38:12:7e:c5:d8:43:23: d9:f8:3a:eb:bf:0b:89:6d:25:65:c6:e3:ed:b1:f5:28:21:13: 89:fd:ba:43:00:57:cb:a8:59:9a:ae:5b:a2:6a:18:49:6e:48: 92:71:fc:73:4b:72:5e:1e:d2:5e:64:fe:be:19:83:79:61:ce: 5d:4b:17:6c:22:69:1b:bd:8c:4c:fc:01:bb:a9:80:49:1b:95: 98:c1:5d:c3:7b:dd:15:53:bb:aa:17:2f:df:a9:ce:71:d9:63: ce:b7:2b:c7:70:04:f4:ba:bd:44:30:0b:35:24:e2:9d:c9:a7: dd:9d:f0:06:23:0c:fa:36:8b:01:3f:f4:e4:50:75:34:a5:66: 05:ed:1d:70 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EyXo1c2KIL+2EsTsEHY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzVjMzMzNmUyY2UzYmQ3NWFiMjljZTgxZTU0ZmY4MWVjNTZmMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuegtORfmPkXQRCDRHJmE+LxKte/ BlYfX+a6G5vB9OMt0rIru1w+57Wg3ZGDZos/7GQ+Jy0gzgDz8ENvezXmUTptv5aQ K59CgUZZHO0GhFa3C649HOmcAR9B3T32ZAkQ6+u8pko4vbgnXZjoq6+Aq+OmMhTe rjzBtnptxtqyyW58hjuQoDQQ4opjPsC46JR+anAq2oUzgns8uzTPRr8MuipvceIG cYjEC8tPumkISihxM9F9aYTowHeJk23Z4niFytQp0q7K0aPb3wO7T1gdiyYrrLyK GDq3Aa9ZfGudbraeOXKGZVJeKcw9B3TefJjXo83P2ehV8dVNA7wS3SMVHwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDNcMzbizjvXWrKc6B5U/4HsVvHaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzZlZDIw ZS0yMTU5LTQ3ZDUtOWIxZC00MWQ1MDlmOGIxNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvNmVkMjBl LTIxNTktNDdkNS05YjFkLTQxZDUwOWY4YjE1NS8xL00xd3pOdUxPTzlkYXNwem9I bFRfZ2V4Vzhkby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZbcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMYRzANBgkqhkiG9w0BAQsFAAOCAQEAVv52590WT82QCQMGDP/V/Tcz9SzwbGy6 OnEIRqBE0+EbmqS92OCBcvbvkv+Xpl8NyDRGU1CuYQ1an0nO1CRhv2/qfpHOdVHM bP/GmbF1CYva0Imr1fB8BUiEU2nzoj7DFA2n8G4U7Z3qglQ+ybt1XOa3nY6IlMs4 En7F2EMj2fg6678LiW0lZcbj7bH1KCETif26QwBXy6hZmq5bomoYSW5IknH8c0ty Xh7SXmT+vhmDeWHOXUsXbCJpG72MTPwBu6mASRuVmMFdw3vdFVO7qhcv36nOcdlj zrcrx3AE9Lq9RDALNSTincmn3Z3wBiMM+jaLAT/05FB1NKVmBe0dcA== -----END CERTIFICATE-----Generated at Tue Jan 27 10:59:40 2026 by rpki-client