This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer File: cMvrOI9ZAsFhYLvtCWLLYisruDI.cer (raw, json) Hash identifier: KXtZ1uOErhPEYBApITLloQhJMv6eDxrkMv+WbzLl6yY= Subject key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4B5ECEF6A10E68E91E9070625FC94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.46.20.0/22 IP: 2a01:82a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:b5:ec:ef:6a:10:e6:8e:91:e9:07:06:25:fc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70cbeb388f5902c16160bbed0962cb622b2bb832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f2:28:82:7b:f2:fb:b9:f8:c2:89:92:ea:1d: 9c:6e:04:df:6b:c2:4d:6e:60:13:66:27:ed:b9:77: cd:3d:84:c8:52:a3:aa:da:68:51:f1:1b:71:f8:65: 45:06:e5:ee:77:e1:56:ce:fa:57:81:6c:37:d7:30: 78:7b:f4:78:79:b6:71:0d:49:c7:bd:e2:9c:57:0f: e3:4e:a2:22:2a:18:16:f1:0f:6e:b2:39:d6:8f:db: 24:88:6c:6e:73:15:6f:da:4c:02:ba:f3:39:13:c7: 9e:7c:79:9e:b3:e1:d2:4b:78:e3:0f:4b:ef:14:8d: ac:8e:41:11:bc:24:de:6b:d7:95:c0:48:67:b0:36: 95:88:97:e0:a8:52:7b:19:35:44:a1:aa:60:94:55: d1:b0:cf:36:f2:b8:08:79:01:a5:69:e5:1a:c7:80: 69:56:21:42:15:03:b3:37:b1:38:be:fd:5c:d6:a4: 67:0b:af:19:35:d4:f6:91:63:e4:e6:13:ac:5b:eb: 76:31:46:e8:2b:3e:ae:07:8e:cf:63:b1:d1:fa:ff: 99:66:99:ba:43:d0:1f:50:d7:10:af:7e:89:8d:cd: 71:a6:62:4e:8f:d9:86:54:da:76:18:ee:d7:a7:f1: 9b:b3:0e:cf:de:31:c3:f6:51:ca:f1:7b:af:f1:b9: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.20.0/22 IPv6: 2a01:82a0::/32 Signature Algorithm: sha256WithRSAEncryption 47:9b:b2:94:20:2d:81:1a:79:e5:a9:8b:f3:81:0f:ba:b5:b4: 5c:9b:b8:66:96:4a:7e:ee:a9:a2:74:f3:86:fd:21:13:09:bd: da:62:f4:62:60:22:34:a3:86:0b:64:78:b3:23:fa:6c:8f:40: 56:9f:a0:21:5a:9c:d8:ce:56:d4:03:12:37:92:14:2f:2e:8f: 01:db:3a:da:e9:6f:55:8e:88:63:ad:de:4f:a0:a3:b1:70:20: 3d:0a:9d:6e:2c:89:51:68:18:ff:fb:9b:37:32:c5:42:dd:bf: 62:69:b6:f3:c4:1c:cd:d1:b3:5b:f0:59:87:05:48:64:66:ff: af:f2:bc:e7:60:fd:8f:00:42:44:3d:30:61:a0:1d:8e:f4:8e: e6:a7:ed:c7:9c:c2:90:89:a1:76:3b:73:f0:dc:f7:53:a7:0d: 5c:71:14:51:a0:56:63:db:8d:44:57:e2:1b:ae:76:57:6b:9a: 87:de:a7:d6:1f:15:36:a3:34:a6:53:e8:25:e1:c7:e9:e8:64: 09:a5:6b:81:60:81:ab:ff:91:56:75:6a:ba:cf:26:f6:5b:52: c4:d8:94:ed:c2:33:10:b7:82:64:19:a6:42:ba:de:fd:9e:47: 88:f6:27:76:ee:42:80:4e:58:5b:7b:48:22:79:1c:03:9c:ba: 4f:90:28:33 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pLXs72oQ5o6R6QcGJfyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGNiZWIzODhmNTkwMmMxNjE2MGJiZWQwOTYyY2I2MjJiMmJiODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPIognvy+7n4womS6h2cbgTfa8JN bmATZiftuXfNPYTIUqOq2mhR8Rtx+GVFBuXud+FWzvpXgWw31zB4e/R4ebZxDUnH veKcVw/jTqIiKhgW8Q9usjnWj9skiGxucxVv2kwCuvM5E8eefHmes+HSS3jjD0vv FI2sjkERvCTea9eVwEhnsDaViJfgqFJ7GTVEoapglFXRsM828rgIeQGlaeUax4Bp ViFCFQOzN7E4vv1c1qRnC68ZNdT2kWPk5hOsW+t2MUboKz6uB47PY7HR+v+ZZpm6 Q9AfUNcQr36Jjc1xpmJOj9mGVNp2GO7Xp/Gbsw7P3jHD9lHK8Xuv8bknTwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHDL6ziPWQLBYWC77Qliy2IrK7gyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzE0OWNm Ni02MTFkLTRlMDMtYTY2MC1kY2UxMTI3YWIyMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvMTQ5Y2Y2 LTYxMWQtNGUwMy1hNjYwLWRjZTExMjdhYjIyMy8xL2NNdnJPSTlaQXNGaFlMdnRD V0xMWWlzcnVESS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuS4UMA0EAgACMAcDBQAqAYKgMA0GCSqGSIb3 DQEBCwUAA4IBAQBHm7KUIC2BGnnlqYvzgQ+6tbRcm7hmlkp+7qmidPOG/SETCb3a YvRiYCI0o4YLZHizI/psj0BWn6AhWpzYzlbUAxI3khQvLo8B2zra6W9Vjohjrd5P oKOxcCA9Cp1uLIlRaBj/+5s3MsVC3b9iabbzxBzN0bNb8FmHBUhkZv+v8rznYP2P AEJEPTBhoB2O9I7mp+3HnMKQiaF2O3Pw3PdTpw1ccRRRoFZj241EV+IbrnZXa5qH 3qfWHxU2ozSmU+gl4cfp6GQJpWuBYIGr/5FWdWq6zyb2W1LE2JTtwjMQt4JkGaZC ut79nkeI9id27kKATlhbe0gieRwDnLpPkCgz -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:36 2026 by rpki-client