This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer File: RmSgU4XAYmgVApGX6xUGSF09bRw.cer (raw, json) Hash identifier: Wg/1RPSSHuPDvKo0Fr4FnOYxrHz66S/loDo7lubFUbY= Subject key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77591F5E95271A10167370446D02B682 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.234.214.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1f:5e:95:27:1a:10:16:73:70:44:6d:02:b6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4664a05385c0626815029197eb1506485d3d6d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:d0:6f:bd:76:16:77:5c:f6:0a:cd:64:cd: fa:fa:95:c8:36:b5:e1:9d:d3:ce:74:72:ca:34:a1: 07:6a:83:86:bd:3d:a6:79:2b:88:33:be:82:6b:95: 9a:6f:39:9d:a1:0c:06:8b:dd:40:2f:c5:78:08:b9: 70:b8:03:38:db:fe:35:3a:ac:4c:a9:e1:e7:3f:ca: 3a:97:70:0c:78:c8:a7:2c:8e:cf:a5:0b:db:78:47: 84:cc:f5:d2:3c:10:76:df:99:7d:b6:1f:a6:55:be: e4:f6:ec:ad:df:88:e6:3d:d4:31:6d:0b:5d:96:2e: 68:7b:22:c9:3b:53:c9:2d:45:ad:11:55:9e:84:98: 88:43:80:0d:26:84:b3:4b:aa:43:76:64:ea:e2:a5: a3:bc:57:59:57:25:b8:33:b5:ee:df:1c:2f:79:15: 46:9b:c3:e5:9a:9a:c6:cf:e0:60:1a:74:07:db:f5: 08:ed:83:62:68:ff:96:bc:9d:93:88:28:95:72:77: 5d:77:e7:d0:a0:59:e9:b0:bf:cc:8b:9b:30:a7:31: 12:f9:53:7a:f4:11:00:dd:08:81:41:92:44:1c:61: 93:0e:4d:a4:48:43:d5:6d:1e:2a:e5:f7:86:9a:70: 81:fe:52:d1:db:82:cb:71:77:4d:92:05:d3:7b:13: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.214.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:fc:18:c8:77:ae:1e:72:86:e1:1c:02:20:b5:ae:7e:3c:d1: e1:1b:7e:4c:79:c0:6e:f0:31:4a:d2:39:50:ef:61:bd:cc:70: ae:7d:99:52:f0:54:e7:e8:0c:35:4b:1b:18:ce:0d:7c:34:40: cb:10:84:1b:cb:ce:00:94:42:1e:84:7f:c8:6e:a7:90:f4:e6: f6:5b:e4:c1:9a:08:16:22:1d:e1:85:b2:82:00:8e:4c:be:a5: cb:ab:68:c4:df:b8:58:b2:7f:3c:89:4f:e9:49:11:53:e9:58: 7e:23:59:43:d1:6a:0a:f1:93:82:b9:4b:e3:11:0e:29:05:2e: 3c:d9:ba:3d:d6:e9:4d:0c:34:fa:ad:e6:67:1a:ac:ea:34:f5: f8:03:dd:1f:13:49:f4:1e:86:f2:2e:9a:a7:b1:59:52:24:45: 64:b8:9c:2e:2b:2f:66:de:a5:aa:fd:91:80:19:fc:82:c1:e7: 37:62:37:db:00:52:78:3a:d4:42:51:f3:f6:01:6e:91:2a:f4: 98:bc:f4:fb:ee:66:49:29:83:d5:9b:f8:7a:09:7a:0b:8d:8d: 68:7f:ab:a8:2d:cd:a4:1b:60:78:22:c8:72:2b:bc:28:fd:9c: 65:a6:5d:3c:47:f1:f6:1d:fe:86:43:9c:f7:e9:9d:e9:22:95: b7:63:a2:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WR9elScaEBZzcERtAraCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjY0YTA1Mzg1YzA2MjY4MTUwMjkxOTdlYjE1MDY0ODVkM2Q2ZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr3Qb712Fndc9grNZM36+pXINrXh ndPOdHLKNKEHaoOGvT2meSuIM76Ca5WabzmdoQwGi91AL8V4CLlwuAM42/41OqxM qeHnP8o6l3AMeMinLI7PpQvbeEeEzPXSPBB235l9th+mVb7k9uyt34jmPdQxbQtd li5oeyLJO1PJLUWtEVWehJiIQ4ANJoSzS6pDdmTq4qWjvFdZVyW4M7Xu3xwveRVG m8PlmprGz+BgGnQH2/UI7YNiaP+WvJ2TiCiVcnddd+fQoFnpsL/Mi5swpzES+VN6 9BEA3QiBQZJEHGGTDk2kSEPVbR4q5feGmnCB/lLR24LLcXdNkgXTexN3iwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEZkoFOFwGJoFQKRl+sVBkhdPW0cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2JkNzY0 Ni1hZGQ5LTQ4NTktOWRlOS05Yzg0ODU0ODNkNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYmQ3NjQ2 LWFkZDktNDg1OS05ZGU5LTljODQ4NTQ4M2Q1OS8xL1JtU2dVNFhBWW1nVkFwR1g2 eFVHU0YwOWJSdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+rWMA0GCSqGSIb3DQEBCwUAA4IBAQAb/BjI d64ecobhHAIgta5+PNHhG35MecBu8DFK0jlQ72G9zHCufZlS8FTn6Aw1SxsYzg18 NEDLEIQby84AlEIehH/IbqeQ9Ob2W+TBmggWIh3hhbKCAI5MvqXLq2jE37hYsn88 iU/pSRFT6Vh+I1lD0WoK8ZOCuUvjEQ4pBS482bo91ulNDDT6reZnGqzqNPX4A90f E0n0HobyLpqnsVlSJEVkuJwuKy9m3qWq/ZGAGfyCwec3YjfbAFJ4OtRCUfP2AW6R KvSYvPT77mZJKYPVm/h6CXoLjY1of6uoLc2kG2B4IshyK7wo/Zxlpl08R/H2Hf6G Q5z36Z3pIpW3Y6La -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:49 2026 by rpki-client