This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer File: M54PXmVDk87aIttEl48nPnieI0E.cer (raw, json) Hash identifier: re03BNySKfRV8Iy9D/jHrz+boNsT0X+reWO1UgfETQU= Subject key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3590B0956B47691B07CBFF79C63CA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48019 IP: 91.207.66.0/23 IP: 194.105.136.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:90:b0:95:6b:47:69:1b:07:cb:ff:79:c6:3c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=339e0f5e654393ceda22db44978f273e789e2341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:ed:e8:5d:91:47:63:ef:73:9c:24:70:d8: dc:7b:d5:e8:a7:05:93:e1:5d:93:1a:67:c6:be:1e: e9:a2:f0:18:1c:f4:06:52:f9:fb:53:b0:3a:a1:4b: 57:52:79:4c:24:f1:ff:4e:20:2a:c5:7a:94:6e:41: 91:ee:c4:e0:3d:01:51:67:c3:ee:07:19:bc:17:4a: 44:d8:93:b1:5a:64:13:00:44:7b:72:32:26:e5:55: 95:f9:31:69:b5:85:72:ae:f0:5e:98:61:c4:6d:92: af:7b:a2:6e:3d:51:78:86:0a:59:54:67:83:0e:d6: 24:f0:0e:e4:f9:23:c9:95:07:32:5f:50:ba:2b:46: fd:f4:1e:a3:66:02:e0:49:f0:19:02:88:7d:dc:7c: ee:53:ba:5a:f0:29:f7:d0:91:20:5e:7b:56:0a:41: 02:c5:22:c0:0e:91:dd:89:7d:75:6f:b7:2f:9d:ab: 15:aa:fb:e6:74:3f:fa:db:36:4c:fd:1c:9a:39:11: 81:1e:b9:9c:c6:c2:cf:4d:45:e2:0e:d0:83:9f:bd: 18:60:a8:7a:ed:a5:7d:29:81:17:65:70:21:6d:d0: a2:06:9c:3c:c1:95:8d:a8:88:cc:e8:4e:32:f7:20: 8e:5a:2f:63:7b:9b:a9:d3:2f:5e:71:89:d1:a8:02: f8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.66.0/23 194.105.136.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48019 Signature Algorithm: sha256WithRSAEncryption 33:cd:c6:63:ee:af:c5:17:9a:1d:ae:af:4e:21:30:b5:a3:37: 93:db:f6:01:3c:ef:22:45:e7:49:a0:e2:09:fa:64:92:29:5a: ec:27:98:e0:af:05:bc:29:c6:ae:61:b9:14:26:c4:be:04:4e: 9e:a2:62:36:be:7b:86:4d:3c:23:7d:3e:54:40:69:8d:1d:62: d1:b9:6a:33:ea:61:89:a2:03:95:56:07:0e:bb:d9:e1:fc:7a: 02:64:68:75:cb:c8:d2:60:ff:71:be:7a:46:b8:ce:68:7c:c9: 65:a7:54:7b:f4:e3:c5:d9:7d:51:7d:bc:11:db:9c:74:3a:dd: 57:9b:06:86:fa:18:f7:83:73:95:a6:f6:e5:eb:78:67:15:6a: fb:c9:c5:ba:9c:25:ac:a1:66:0e:c2:0f:74:be:b3:18:13:97: 0b:e5:38:02:cb:1f:b8:22:40:a4:18:ac:52:9a:ea:af:4d:26: 1b:03:7c:f2:a6:f8:48:df:50:bd:07:2e:1e:4b:b4:fd:b4:7d: f7:da:bb:96:a6:14:e4:92:99:db:f9:28:f9:bf:61:b2:58:ad: b6:18:62:ae:1e:4a:55:70:59:bd:f7:d7:07:17:f5:18:e0:3a: 4c:c3:05:7b:bb:ce:53:dd:c3:08:1d:a8:b2:71:c4:ee:f3:83: a7:40:0d:68 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7NZCwlWtHaRsHy/95xjyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzllMGY1ZTY1NDM5M2NlZGEyMmRiNDQ5NzhmMjczZTc4OWUyMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApETt6F2RR2Pvc5wkcNjce9XopwWT 4V2TGmfGvh7povAYHPQGUvn7U7A6oUtXUnlMJPH/TiAqxXqUbkGR7sTgPQFRZ8Pu Bxm8F0pE2JOxWmQTAER7cjIm5VWV+TFptYVyrvBemGHEbZKve6JuPVF4hgpZVGeD DtYk8A7k+SPJlQcyX1C6K0b99B6jZgLgSfAZAoh93HzuU7pa8Cn30JEgXntWCkEC xSLADpHdiX11b7cvnasVqvvmdD/62zZM/RyaORGBHrmcxsLPTUXiDtCDn70YYKh6 7aV9KYEXZXAhbdCiBpw8wZWNqIjM6E4y9yCOWi9je5up0y9ecYnRqAL40QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFDOeD15lQ5PO2iLbRJePJz54niNBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzM2YjA5 OC1lOWFjLTQ5MTAtYTZmNS04ZTVkOWVlZmFmOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMzZiMDk4 LWU5YWMtNDkxMC1hNmY1LThlNWQ5ZWVmYWY5MS8xL001NFBYbVZEazg3YUl0dEVs NDhuUG5pZUkwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW89CAwQBwmmIMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC7kzANBgkqhkiG9w0BAQsFAAOCAQEAM83GY+6vxReaHa6vTiEwtaM3 k9v2ATzvIkXnSaDiCfpkkila7CeY4K8FvCnGrmG5FCbEvgROnqJiNr57hk08I30+ VEBpjR1i0blqM+phiaIDlVYHDrvZ4fx6AmRodcvI0mD/cb56RrjOaHzJZadUe/Tj xdl9UX28EducdDrdV5sGhvoY94Nzlab25et4ZxVq+8nFupwlrKFmDsIPdL6zGBOX C+U4AssfuCJApBisUprqr00mGwN88qb4SN9QvQcuHku0/bR999q7lqYU5JKZ2/ko +b9hslitthhirh5KVXBZvffXBxf1GOA6TMMFe7vOU93DCB2osnHE7vODp0ANaA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:27 2026 by rpki-client