This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer File: fM2Lj3l51soXEsHVCkDU5VXJThM.cer (raw, json) Hash identifier: wgMOnPrWr4FFROC5mhTve+x6cgS4W+UArGKFVymQ9NU= Subject key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9A1F88A8D7085E3452236F073749 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.229.140.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9a:1f:88:a8:d7:08:5e:34:52:23:6f:07:37:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:4b:25:af:5d:95:74:f1:00:ff:09:3e:62: 35:d3:29:14:0e:7e:72:07:46:9b:04:26:d1:b5:67: ce:e6:a7:9c:29:1c:9d:e6:5e:ac:43:9f:be:dd:33: 1f:a8:95:0d:2a:1e:b1:11:65:42:1b:ab:a1:df:98: 28:e1:49:6c:13:e4:89:f9:b0:05:1d:66:a1:20:e3: 24:4b:a1:89:3a:46:a8:bc:6f:65:2a:ee:64:52:15: 64:af:27:5a:5c:b5:9d:ce:d3:38:8b:6c:46:8f:f3: 09:14:c9:98:d1:89:07:4c:77:af:36:21:92:0d:de: 71:ee:51:73:6b:41:3b:c2:e5:bb:29:b5:7c:d7:46: 20:4f:5e:ea:6c:b6:f9:08:5e:7b:dd:9a:f4:a2:62: f3:c0:06:2b:6b:06:f3:09:02:99:29:e7:ba:45:70: 7c:1c:d3:d8:0a:f4:86:b0:6d:bc:96:d4:e2:18:3d: d4:be:84:11:18:98:e5:85:23:3e:21:03:fa:8b:27: 39:d4:e0:8f:e3:15:08:54:58:8b:b4:66:92:13:6e: 3e:74:9b:34:f9:67:43:95:57:75:4c:27:e3:85:30: 66:39:34:49:44:1a:23:43:24:0d:2c:00:e8:4e:7e: 82:8b:2f:b7:ed:29:f1:64:50:ce:d5:61:31:59:1e: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.140.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:cc:89:aa:47:73:56:5c:e5:4d:9c:39:34:2b:c2:7b:86:08: d2:35:3f:ce:e8:c7:ad:87:11:1e:15:aa:81:0e:71:d9:ab:a8: 2a:83:bd:74:7d:50:c4:f0:07:b9:9a:d5:5b:8c:67:a4:ec:2c: 74:28:72:a5:42:d5:ef:11:67:54:82:7c:78:2a:3b:79:da:ab: 86:1d:33:c8:0e:87:60:65:1a:9c:e7:8f:b3:1a:5b:d5:56:b9: 2a:72:46:bb:55:f5:30:d5:e3:cb:dd:90:38:4e:46:ee:bf:49: 2e:13:7d:da:9d:fd:5d:d8:2b:6e:ec:d8:f6:71:3c:47:d9:4b: 8e:d3:45:9b:41:4b:e7:de:18:39:27:d4:0a:12:3e:71:d5:96: 0f:bf:84:8d:cc:8a:ec:ba:ec:41:8a:1d:3e:54:c7:0b:26:40: 6a:2e:28:fa:32:90:8e:70:79:51:34:10:4f:82:55:07:68:43: 15:50:8c:a4:f5:d2:6f:7a:d4:ad:45:6e:fb:f6:88:29:65:05: 56:20:51:d0:df:7f:21:33:59:26:61:8b:40:7d:3f:54:fb:b1: 0b:86:55:d1:cc:c6:a3:1c:39:43:6c:c7:05:76:b6:f4:0b:ba: b9:33:2a:75:39:b5:e5:09:44:76:da:69:0e:dd:1a:21:63:4c: 7e:50:7d:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt265ofiKjXCF40UiNvBzdJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2NkOGI4Zjc5NzlkNmNhMTcxMmMxZDUwYTQwZDRlNTU1Yzk0ZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsulLJa9dlXTxAP8JPmI10ykUDn5y B0abBCbRtWfO5qecKRyd5l6sQ5++3TMfqJUNKh6xEWVCG6uh35go4UlsE+SJ+bAF HWahIOMkS6GJOkaovG9lKu5kUhVkrydaXLWdztM4i2xGj/MJFMmY0YkHTHevNiGS Dd5x7lFza0E7wuW7KbV810YgT17qbLb5CF573Zr0omLzwAYrawbzCQKZKee6RXB8 HNPYCvSGsG28ltTiGD3UvoQRGJjlhSM+IQP6iyc51OCP4xUIVFiLtGaSE24+dJs0 +WdDlVd1TCfjhTBmOTRJRBojQyQNLADoTn6Ciy+37SnxZFDO1WExWR69EwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHzNi495edbKFxLB1QpA1OVVyU4TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzgxMTU2 Yy1iODE0LTQ4Y2YtYTBjMy1jYWI3ODYwNzdlODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvODExNTZj LWI4MTQtNDhjZi1hMGMzLWNhYjc4NjA3N2U4My8xL2ZNMkxqM2w1MXNvWEVzSFZD a0RVNVZYSlRoTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+WMMA0GCSqGSIb3DQEBCwUAA4IBAQAczImq R3NWXOVNnDk0K8J7hgjSNT/O6MethxEeFaqBDnHZq6gqg710fVDE8Ae5mtVbjGek 7Cx0KHKlQtXvEWdUgnx4Kjt52quGHTPIDodgZRqc54+zGlvVVrkqcka7VfUw1ePL 3ZA4Tkbuv0kuE33anf1d2Ctu7Nj2cTxH2UuO00WbQUvn3hg5J9QKEj5x1ZYPv4SN zIrsuuxBih0+VMcLJkBqLij6MpCOcHlRNBBPglUHaEMVUIyk9dJvetStRW779ogp ZQVWIFHQ338hM1kmYYtAfT9U+7ELhlXRzMajHDlDbMcFdrb0C7q5Myp1ObXlCUR2 2mkO3RohY0x+UH2X -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:39 2026 by rpki-client