This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer File: RwFMkm6nbVZunoqW1YYdR1fIsOo.cer (raw, json) Hash identifier: 1RvmF2ktTl6fd9TnvbMDb7RmLtlKm16uuTJX2RYaNKc= Subject key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B22F5D3E4FD89AFC9A07E7F3B722F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208819 IP: 185.212.36.0/22 IP: 2a0b:7040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:22:f5:d3:e4:fd:89:af:c9:a0:7e:7f:3b:72:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:1a:0b:c2:69:f4:06:a3:6d:57:57:23:f6: 58:6d:1c:15:2c:c4:b9:d0:e0:a2:e8:cf:32:f6:87: 0f:d8:c6:9e:d2:4b:ca:49:b4:aa:39:a3:fc:46:17: d6:37:af:98:31:68:78:38:7f:46:cd:c3:2f:40:b4: 0e:5b:cc:f7:dd:92:d2:8e:35:1b:89:5c:ce:a4:4e: 71:7a:7b:2b:b8:bd:04:da:66:5a:96:70:79:c3:1e: 0d:25:c5:a3:63:66:16:64:4f:c4:60:52:1f:94:21: bf:ec:3c:a2:00:ac:f7:1c:a2:46:7c:23:34:3e:a7: 74:65:2b:83:43:69:46:cb:54:02:0b:16:37:6c:c1: ad:13:8f:00:a8:d4:67:84:d2:07:11:08:0d:00:1a: 5b:92:3a:b5:23:4d:4d:75:52:10:38:7e:2e:82:f3: 1d:1a:ae:51:c2:5f:2e:1f:ff:d2:c5:5b:72:fa:96: 1f:f5:8a:82:9a:ab:fa:8e:b2:a7:9d:86:28:06:24: f7:45:5a:c2:8c:5e:0e:e2:af:02:dc:22:da:5c:28: 84:e9:9d:4a:af:90:f4:3f:a4:d4:e4:b8:fd:2b:b1: 24:28:4e:68:19:0d:a4:69:90:fe:cc:49:80:e7:eb: f2:62:0b:4d:d6:e3:4d:5b:b6:4a:e4:17:1f:88:71: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.36.0/22 IPv6: 2a0b:7040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208819 Signature Algorithm: sha256WithRSAEncryption 90:bc:df:ef:8d:31:0a:91:00:9e:bf:62:46:be:16:9e:5a:26: 0f:b1:c9:0e:16:ab:20:6e:75:f9:3c:0e:bf:67:60:b9:51:c7: eb:43:db:88:4b:23:42:70:6d:64:d4:b6:76:a5:c2:fb:c6:19: 7e:7c:4c:5a:1f:c8:87:15:ff:d7:bb:57:39:38:3b:32:f5:87: fe:62:df:d5:80:15:7f:92:2c:99:49:11:ac:6a:1c:10:96:c7: 88:b4:52:c6:46:c7:f4:c5:cb:59:73:56:bb:02:c0:15:e5:75: ca:2f:8b:7c:b2:69:72:50:a3:87:83:60:23:56:71:79:01:4b: 93:db:2c:42:11:e8:f9:d9:6e:a1:78:b4:ee:21:6f:ab:c0:66: fa:b8:51:fa:67:9d:15:6c:75:d7:08:19:6c:ba:c3:46:93:06: 8c:2d:4d:4e:28:7a:92:ce:fd:df:d5:2b:c0:f6:62:1d:b4:62: 2d:71:5b:0d:fb:25:84:86:48:70:e9:c7:ba:c5:9e:cc:fb:e6: 5f:9d:0d:df:22:52:f5:c8:40:15:19:6d:43:02:21:5f:b8:95: 73:2b:cd:3e:c9:7e:1c:68:5a:f1:8e:bc:a5:d2:a2:16:ea:87: 4b:f2:8d:ae:9e:2b:8b:c0:71:f4:2f:a2:d0:50:48:2d:5f:9f: 45:dc:04:c7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WyL10+T9ia/JoH5/O3IvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzAxNGM5MjZlYTc2ZDU2NmU5ZThhOTZkNTg2MWQ0NzU3YzhiMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszsaC8Jp9AajbVdXI/ZYbRwVLMS5 0OCi6M8y9ocP2Mae0kvKSbSqOaP8RhfWN6+YMWh4OH9GzcMvQLQOW8z33ZLSjjUb iVzOpE5xensruL0E2mZalnB5wx4NJcWjY2YWZE/EYFIflCG/7DyiAKz3HKJGfCM0 Pqd0ZSuDQ2lGy1QCCxY3bMGtE48AqNRnhNIHEQgNABpbkjq1I01NdVIQOH4ugvMd Gq5Rwl8uH//SxVty+pYf9YqCmqv6jrKnnYYoBiT3RVrCjF4O4q8C3CLaXCiE6Z1K r5D0P6TU5Lj9K7EkKE5oGQ2kaZD+zEmA5+vyYgtN1uNNW7ZK5BcfiHF79wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEcBTJJup21Wbp6KltWGHUdXyLDqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzMxMjNk MC03Y2FhLTRkZjMtYWQyMy1hYmE0ZTY0MzA1OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvMzEyM2Qw LTdjYWEtNGRmMy1hZDIzLWFiYTRlNjQzMDU4ZS8xL1J3Rk1rbTZuYlZadW5vcVcx WVlkUjFmSXNPby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudQkMA0EAgACMAcDBQMqC3BAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvszANBgkqhkiG9w0BAQsFAAOCAQEAkLzf740xCpEA nr9iRr4WnlomD7HJDharIG51+TwOv2dguVHH60PbiEsjQnBtZNS2dqXC+8YZfnxM Wh/IhxX/17tXOTg7MvWH/mLf1YAVf5IsmUkRrGocEJbHiLRSxkbH9MXLWXNWuwLA FeV1yi+LfLJpclCjh4NgI1ZxeQFLk9ssQhHo+dluoXi07iFvq8Bm+rhR+medFWx1 1wgZbLrDRpMGjC1NTih6ks7939UrwPZiHbRiLXFbDfslhIZIcOnHusWezPvmX50N 3yJS9chAFRltQwIhX7iVcyvNPsl+HGha8Y68pdKiFuqHS/KNrp4ri8Bx9C+i0FBI LV+fRdwExw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:55 2026 by rpki-client