This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer File: aDjbfmmRJ9pMHFpek_RPMCtihjs.cer (raw, json) Hash identifier: 4COdyfq+dqUbjPH0ssFF1nGUyHnoVgpK384ifc0kqn0= Subject key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AE240D670B76EB7BB5E1B3670E517 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.218.164.0/22 IP: 2a0b:d9c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e2:40:d6:70:b7:6e:b7:bb:5e:1b:36:70:e5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6838db7e699127da4c1c5a5e93f44f302b62863b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b9:0c:69:6c:bf:77:2d:d5:8d:1b:17:e2:8c: e5:bc:93:8b:1a:77:e3:be:14:4e:89:06:0a:45:c4: 5d:6d:bb:d2:73:74:e4:b0:c8:21:2c:13:c4:35:2e: f1:91:87:94:73:3a:af:06:84:fb:a8:a5:18:6f:5f: 84:b8:b3:d0:fc:6f:46:09:b9:f3:85:3e:d1:02:69: 68:67:0a:68:44:1b:9b:5e:25:03:bc:a9:c0:3e:19: 00:5a:cd:d2:d9:de:a1:4b:9f:6a:2e:46:fc:c3:6f: dd:76:f6:b8:50:2a:78:7e:61:89:b9:c6:e2:2b:30: f8:f7:5e:54:71:33:e6:8d:c1:3a:8d:82:3d:02:ed: e1:9d:93:88:13:14:fc:8f:2e:c9:05:d0:f4:22:7c: cf:3d:fc:ed:f3:cf:81:3a:29:2e:0b:e7:7c:0f:be: ea:51:17:87:3e:6d:54:5a:9e:0d:2b:2d:e5:bb:fd: b1:e5:68:09:d6:b6:8f:9e:09:57:ac:14:1b:74:e2: 41:96:cd:6b:be:4a:00:4f:96:3e:f7:d2:00:83:ac: 38:3a:d4:a0:22:21:1d:a3:e5:3c:63:93:04:70:9b: 98:4a:dc:9d:a3:2b:65:1c:79:8a:75:74:1f:50:6d: d6:35:ad:31:6b:08:f2:36:94:4f:a3:04:5a:07:93: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.164.0/22 IPv6: 2a0b:d9c0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:2f:db:9a:2c:07:ae:71:70:31:7d:bf:ed:24:12:a3:ae:8d: 9b:21:5b:82:ce:ec:d5:f1:85:4c:d2:3a:06:83:7d:c3:66:52: d3:73:7a:76:d8:23:a5:e7:43:86:11:e4:25:55:c6:2a:1b:d7: 43:33:45:fb:96:72:b1:cc:6d:68:9f:f9:11:18:25:d3:60:f1: 24:8f:7a:e0:3a:ba:ae:c2:f6:b0:8c:61:ee:de:59:cf:25:0c: c6:c2:e0:ac:48:4a:7f:08:eb:4a:86:51:d0:47:f0:3a:38:fb: 23:44:86:ef:25:0e:57:ef:23:34:83:a7:21:1e:3a:86:c0:c4: d1:d5:a0:2e:12:ff:56:51:5f:24:05:ca:8d:9a:71:eb:5f:61: 72:92:a5:27:d2:a6:22:f4:79:26:bb:f4:88:e4:49:6c:4e:ca: a8:89:20:42:d9:7a:c6:bc:72:f4:b7:48:98:2a:c6:a3:ee:c6: 73:58:8c:ec:c7:6c:22:8e:ed:59:29:c3:d6:e2:d3:01:89:5c: 8b:fd:0b:c2:f9:99:bf:47:f7:82:62:fb:37:0e:ef:70:a3:ef: 93:85:7f:a4:69:da:13:7c:8b:cc:45:1f:1b:78:49:18:7b:0d: 3d:58:c4:57:63:b5:d5:78:94:c3:de:0e:c1:a4:2b:03:fe:5e: 9e:1b:85:6d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WuJA1nC3bre7Xhs2cOUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODM4ZGI3ZTY5OTEyN2RhNGMxYzVhNWU5M2Y0NGYzMDJiNjI4NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bkMaWy/dy3VjRsX4ozlvJOLGnfj vhROiQYKRcRdbbvSc3TksMghLBPENS7xkYeUczqvBoT7qKUYb1+EuLPQ/G9GCbnz hT7RAmloZwpoRBubXiUDvKnAPhkAWs3S2d6hS59qLkb8w2/ddva4UCp4fmGJucbi KzD4915UcTPmjcE6jYI9Au3hnZOIExT8jy7JBdD0InzPPfzt88+BOikuC+d8D77q UReHPm1UWp4NKy3lu/2x5WgJ1raPnglXrBQbdOJBls1rvkoAT5Y+99IAg6w4OtSg IiEdo+U8Y5MEcJuYStydoytlHHmKdXQfUG3WNa0xawjyNpRPowRaB5NZsQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGg4235pkSfaTBxaXpP0TzArYoY7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2IyNDcx Yy1iZWJjLTQ0MTItYTZhNC0yZjljYWM3MDBmYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvYjI0NzFj LWJlYmMtNDQxMi1hNmE0LTJmOWNhYzcwMGZhNS8xL2FEamJmbW1SSjlwTUhGcGVr X1JQTUN0aWhqcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudqkMA0EAgACMAcDBQAqC9nAMA0GCSqGSIb3 DQEBCwUAA4IBAQCPL9uaLAeucXAxfb/tJBKjro2bIVuCzuzV8YVM0joGg33DZlLT c3p22COl50OGEeQlVcYqG9dDM0X7lnKxzG1on/kRGCXTYPEkj3rgOrquwvawjGHu 3lnPJQzGwuCsSEp/COtKhlHQR/A6OPsjRIbvJQ5X7yM0g6chHjqGwMTR1aAuEv9W UV8kBcqNmnHrX2FykqUn0qYi9Hkmu/SI5ElsTsqoiSBC2XrGvHL0t0iYKsaj7sZz WIzsx2wiju1ZKcPW4tMBiVyL/QvC+Zm/R/eCYvs3Du9wo++ThX+kadoTfIvMRR8b eEkYew09WMRXY7XVeJTD3g7BpCsD/l6eG4Vt -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:34 2026 by rpki-client