This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer (raw, json) Hash identifier: TGgdlQB1+QHTAGWz+IK+GfnNy6ncN0pMZpVCamPuZP8= Subject key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA74D9A9D012E35218977238895FD17 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 165.220.128.0/17 IP: 185.136.44.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4d:9a:9d:01:2e:35:21:89:77:23:88:95:fd:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:5e:9d:92:9e:98:21:47:0d:73:bb:59:5c: f6:b2:f3:a2:40:9b:f9:07:37:b5:e4:4d:6e:28:bc: d1:a2:33:3c:d9:01:84:7d:6d:03:b6:92:c8:37:db: 6c:5e:fb:ae:49:bb:8b:10:56:15:d1:de:4e:ed:75: 41:bf:66:34:7a:56:ea:a1:46:22:8f:16:00:e9:08: 7a:39:c7:b9:4a:84:7b:75:ab:b5:38:6c:d5:21:88: 17:de:20:87:e1:ec:da:bb:51:51:65:22:b2:30:6a: 98:09:48:6d:88:42:b3:f8:23:26:7f:2a:d4:c1:c7: b3:bd:fd:b9:de:62:e3:2f:bb:eb:6c:c9:a5:60:b2: c5:ed:d2:09:8a:c5:f4:d3:fd:ce:84:b5:4d:d8:9a: e5:17:fa:a1:15:29:be:d2:b7:82:3e:d8:25:e1:40: 64:ed:92:e4:99:fb:9d:8c:20:13:7b:d2:b3:ff:bc: a7:85:ed:25:01:83:8a:51:a0:64:8d:ef:80:6e:85: e0:ab:16:4a:90:ab:2e:05:95:db:46:9e:91:22:9a: 28:46:39:21:53:f6:65:1f:e6:b8:2a:b1:02:49:b4: d1:aa:a4:9d:6b:86:8e:a4:c2:8c:00:ee:13:b8:91: 13:ac:7c:0d:ca:b5:98:23:99:ff:70:5f:b3:31:82: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.220.128.0/17 185.136.44.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:9f:e4:42:20:a1:07:1f:58:86:bb:00:58:0e:05:9b:66:62: 6a:d9:8e:e3:2d:8e:7c:b0:0f:e3:b3:42:83:bb:97:45:35:d8: 39:ec:88:37:2a:5d:41:2e:b4:3c:7b:2f:0f:dd:0c:d6:30:c8: c3:da:5c:68:f7:d8:b7:bc:ec:99:6f:fe:58:b1:f4:1e:9d:3f: 96:0a:ff:40:39:b7:f7:a0:16:66:6c:5c:0a:b1:96:3e:b9:26: bb:b0:30:b8:05:98:4f:f2:d3:f9:16:80:2f:ad:1f:d4:e6:c7: de:55:71:22:a1:71:6f:e8:83:99:a1:2f:16:98:fa:11:c1:b6: 30:2d:27:db:84:08:e1:f6:95:a5:ee:1b:21:63:64:c1:ea:fe: 8e:85:61:36:0a:07:e4:dd:42:09:e2:6e:cd:aa:5f:e5:ba:30: ce:dd:e1:e3:7f:2b:8f:85:8f:f0:45:2a:85:53:27:64:f9:9e: 6e:78:5a:39:9e:41:c5:a3:b5:5b:76:5f:1d:ed:11:b9:56:9f: 2d:35:f0:2f:ce:c5:81:f8:d8:48:d9:da:33:c2:96:57:57:04: 24:88:de:9e:27:29:5f:10:65:f7:ca:e6:d6:5b:e3:5d:f4:2c: 65:38:fe:b8:fe:5f:6f:11:9c:20:3c:98:9e:f9:4f:7b:0e:0a: e7:5b:2f:ab -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt+p02anQEuNSGJdyOIlf0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzYyMjM0NGYyOWU2YjY0MjBiZmViYzM4YmI2N2EzMGY0NDUzZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApatenZKemCFHDXO7WVz2svOiQJv5 Bze15E1uKLzRojM82QGEfW0DtpLIN9tsXvuuSbuLEFYV0d5O7XVBv2Y0elbqoUYi jxYA6Qh6Oce5SoR7dau1OGzVIYgX3iCH4ezau1FRZSKyMGqYCUhtiEKz+CMmfyrU wcezvf253mLjL7vrbMmlYLLF7dIJisX00/3OhLVN2JrlF/qhFSm+0reCPtgl4UBk 7ZLkmfudjCATe9Kz/7ynhe0lAYOKUaBkje+AboXgqxZKkKsuBZXbRp6RIpooRjkh U/ZlH+a4KrECSbTRqqSda4aOpMKMAO4TuJETrHwNyrWYI5n/cF+zMYLPZQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFDNiI0TynmtkIL/rw4u2ejD0RT9xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzRjNjhl NC00ZDcxLTQ2OTYtOTU1Ny02YzY2NThiZDk1MmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvNGM2OGU0 LTRkNzEtNDY5Ni05NTU3LTZjNjY1OGJkOTUyZS8xL00ySWpSUEtlYTJRZ3YtdkRp N1o2TVBSRlAzRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQHpdyAAwQCuYgsMA0GCSqGSIb3DQEBCwUAA4IB AQCOn+RCIKEHH1iGuwBYDgWbZmJq2Y7jLY58sA/js0KDu5dFNdg57Ig3Kl1BLrQ8 ey8P3QzWMMjD2lxo99i3vOyZb/5YsfQenT+WCv9AObf3oBZmbFwKsZY+uSa7sDC4 BZhP8tP5FoAvrR/U5sfeVXEioXFv6IOZoS8WmPoRwbYwLSfbhAjh9pWl7hshY2TB 6v6OhWE2Cgfk3UIJ4m7Nql/lujDO3eHjfyuPhY/wRSqFUydk+Z5ueFo5nkHFo7Vb dl8d7RG5Vp8tNfAvzsWB+NhI2dozwpZXVwQkiN6eJylfEGX3yubWW+Nd9CxlOP64 /l9vEZwgPJie+U97DgrnWy+r -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:48 2026 by rpki-client