This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer File: m-02rxPaSC_feftUA-UHSGDuzQ0.cer (raw, json) Hash identifier: 1VKl+zsmSSP1Ugye6lmH2R1LYZwMMEtg6eVGy7pWlOE= Subject key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ACACC1DB566F73D16A4430B0E08F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196925 AS: 199311 IP: 5.133.224.0/20 IP: 109.235.192.0/21 IP: 131.117.128.0/20 IP: 134.19.208.0/20 IP: 149.126.112.0/20 IP: 185.138.12.0/22 IP: 2a00:9100::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ca:cc:1d:b5:66:f7:3d:16:a4:43:0b:0e:08:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bed36af13da482fdf79fb5403e5074860eecd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:27:8d:e2:8d:02:0b:5f:33:a0:94:f2:a0: 1c:84:f5:1a:58:c3:f9:6a:3f:64:35:0f:57:a3:f0: e4:4d:69:9b:e2:e2:07:4f:aa:73:11:8e:38:c5:9b: 54:6a:02:64:5c:3f:77:aa:61:70:db:19:89:b7:f8: e8:05:ef:95:a7:08:12:4f:3e:e8:3b:37:b1:1e:48: b9:90:bf:e9:1e:c7:c5:68:99:6b:09:a2:7a:db:1d: 81:8f:e1:ea:96:76:1d:ac:82:1a:af:e2:9b:0f:f8: 08:b2:22:20:03:35:dd:34:91:76:3f:cf:68:3c:d1: 11:3c:f1:a0:fc:11:30:01:cd:0a:0c:1b:75:9b:7d: 66:cf:53:38:cb:fc:eb:77:0a:7f:53:db:7e:36:83: d8:78:92:a7:61:dc:d9:60:ef:32:8e:f6:c8:ea:ea: 69:66:0b:6e:aa:d5:1d:f5:f7:69:d8:14:43:bc:7b: 6c:90:2b:16:99:72:2d:d7:6c:ce:6c:67:74:c6:96: 2f:1c:3c:7b:ab:7a:81:d1:c7:7d:d6:76:53:67:21: 25:89:70:04:c1:03:14:a1:77:7b:b4:ca:ef:c2:f7: cb:90:3a:61:a1:7c:25:8a:3a:e9:60:9a:e4:ff:c4: 80:4f:7c:c3:c7:67:d4:52:de:e0:89:eb:8f:a2:94: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.224.0/20 109.235.192.0/21 131.117.128.0/20 134.19.208.0/20 149.126.112.0/20 185.138.12.0/22 IPv6: 2a00:9100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196925 199311 Signature Algorithm: sha256WithRSAEncryption 81:6f:cf:70:91:0f:bb:d8:74:e6:96:77:f0:42:e8:39:2c:46: e7:a4:e3:7f:27:ca:ec:98:84:c6:93:88:82:66:e8:f6:2d:dd: f3:e5:8b:6c:f4:9c:59:f6:cb:85:d8:16:a8:55:69:86:d2:52: da:3c:60:58:22:09:72:27:73:30:cd:84:13:e4:c3:08:7c:88: 43:f8:67:8e:61:25:28:ce:98:65:4f:f9:d5:58:a2:0b:22:9b: ea:ea:2a:f8:d2:cb:3e:8b:77:b3:0b:bf:cf:d8:3b:21:87:61: 37:e2:80:32:88:d0:04:c7:36:45:2d:3e:90:a6:3c:a8:a0:4f: 67:87:09:a1:38:76:bf:e1:20:ea:2f:02:ab:64:b4:a0:83:d5: 77:ae:8a:5d:14:d9:5d:f7:d6:35:ff:68:a6:fb:31:6c:ee:48: f4:65:b2:06:33:cc:66:c2:67:b3:ff:82:ec:1c:4d:6e:fa:d2: 87:cc:4f:37:d5:aa:be:ec:b1:7e:67:c0:71:e2:07:04:96:fb: 06:3c:4d:33:be:5b:86:8b:d5:cb:46:28:12:69:6d:02:59:aa: 16:1e:23:91:19:26:06:c5:fa:5b:f5:3e:b0:6c:5f:c6:39:08: 4a:6d:65:c8:b0:64:51:2d:d1:e8:97:72:93:ec:ee:ab:65:f0: 2f:e7:3e:59 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt6WsrMHbVm9z0WpEMLDgj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmVkMzZhZjEzZGE0ODJmZGY3OWZiNTQwM2U1MDc0ODYwZWVjZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhAnjeKNAgtfM6CU8qAchPUaWMP5 aj9kNQ9Xo/DkTWmb4uIHT6pzEY44xZtUagJkXD93qmFw2xmJt/joBe+VpwgSTz7o OzexHki5kL/pHsfFaJlrCaJ62x2Bj+HqlnYdrIIar+KbD/gIsiIgAzXdNJF2P89o PNERPPGg/BEwAc0KDBt1m31mz1M4y/zrdwp/U9t+NoPYeJKnYdzZYO8yjvbI6upp ZgtuqtUd9fdp2BRDvHtskCsWmXIt12zObGd0xpYvHDx7q3qB0cd91nZTZyEliXAE wQMUoXd7tMrvwvfLkDphoXwlijrpYJrk/8SAT3zDx2fUUt7gieuPopSXWQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFJvtNq8T2kgv33n7VAPlB0hg7s0NMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzRiMDI4 My1hOTBjLTRkNjQtODMwMS1kMjIxZWJkMDgxOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNGIwMjgz LWE5MGMtNGQ2NC04MzAxLWQyMjFlYmQwODE4ZC8xL20tMDJyeFBhU0NfZmVmdFVB LVVIU0dEdXpRMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQEBYXgAwQDbevAAwQEg3WAAwQEhhPQAwQElX5w AwQCuYoMMA0EAgACMAcDBQAqAJEAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMB PQIDAwqPMA0GCSqGSIb3DQEBCwUAA4IBAQCBb89wkQ+72HTmlnfwQug5LEbnpON/ J8rsmITGk4iCZuj2Ld3z5Yts9JxZ9suF2BaoVWmG0lLaPGBYIglyJ3MwzYQT5MMI fIhD+GeOYSUozphlT/nVWKILIpvq6ir40ss+i3ezC7/P2Dshh2E34oAyiNAExzZF LT6QpjyooE9nhwmhOHa/4SDqLwKrZLSgg9V3ropdFNld99Y1/2im+zFs7kj0ZbIG M8xmwmez/4LsHE1u+tKHzE831aq+7LF+Z8Bx4gcElvsGPE0zvluGi9XLRigSaW0C WaoWHiORGSYGxfpb9T6wbF/GOQhKbWXIsGRRLdHol3KT7O6rZfAv5z5Z -----END CERTIFICATE-----Generated at Tue Feb 3 07:15:57 2026 by rpki-client