This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer File: m1GT2EOvGT4kh1aGZzyViW6uNJc.cer (raw, json) Hash identifier: /pkhZRmW3BvYgYtFWtfyR7rUYk45urSk/Xn8CAf3fr4= Subject key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2D6FB9250C9D815C5536312F578C6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50117 IP: 193.104.61.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d6:fb:92:50:c9:d8:15:c5:53:63:12:f5:78:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b5193d843af193e24875686673c95896eae3497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:be:50:48:09:ef:0c:0a:4f:d5:7f:97:ba: 7a:d1:52:c4:d2:4f:4c:94:eb:d4:3d:a6:29:d9:bf: ec:46:7f:8a:59:00:6b:26:59:1b:a5:1e:7e:f8:58: d8:25:3b:a4:e9:87:f9:18:9d:7a:b8:16:12:c7:a2: f5:a4:7c:6a:6a:7a:49:db:3d:95:ce:09:1b:db:bb: 7a:27:ae:16:e2:dd:3a:5d:94:74:2d:17:b3:e1:21: 87:69:74:be:50:d0:7e:cc:c3:11:37:90:f3:03:04: 88:a2:94:45:fd:fe:5b:b7:9c:67:18:0d:b7:24:04: e5:80:ee:a3:a4:6c:97:e2:8b:ae:6e:e9:90:2f:62: 16:c9:67:9d:70:06:23:eb:d3:53:fd:c8:f9:9f:34: 7c:ea:65:ab:66:f6:e2:51:8d:aa:e9:ee:c7:e8:53: bd:6c:4e:c5:ea:df:c7:8b:18:00:23:2f:75:49:c0: bd:1a:a2:dd:b3:f9:f1:60:cc:9f:03:d1:5b:9e:02: 05:10:72:6e:4d:f4:79:4b:cd:39:dc:b1:05:33:e1: aa:3b:8f:9a:82:82:82:08:bf:57:a3:6a:d6:d6:2c: 45:d1:64:e0:60:44:de:3a:8f:9e:73:56:30:6e:fa: 5a:ed:aa:9d:1c:46:44:c1:ab:7d:4e:1d:42:f1:29: a1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.61.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50117 Signature Algorithm: sha256WithRSAEncryption 8f:25:41:10:c9:8b:1c:cc:e1:87:2e:29:ec:f0:2f:2b:27:34: d5:2a:b2:b9:b3:27:e2:5f:15:02:8e:c3:58:04:45:cd:4f:67: 11:f5:ec:00:84:42:4f:9c:a1:e2:33:e3:04:7d:d2:c9:34:60: 43:df:b8:05:ef:c4:22:a5:ce:df:10:a8:cb:c3:ea:ce:9c:5b: 73:50:b2:58:4a:03:79:13:9a:16:56:7a:e9:a3:e3:69:ce:97: 29:cf:d3:f7:d6:16:8a:b0:7e:12:4f:f7:e8:a8:34:07:65:d6: af:b7:c7:46:5b:cf:54:c6:84:5e:56:7a:ab:cf:0b:c0:0a:ec: 52:d2:2d:b6:91:1c:26:ca:81:83:ab:03:76:cd:01:d4:b8:7f: 3e:a2:83:f1:bf:af:9a:b7:19:09:5d:8a:0d:4b:07:2c:e8:d9: df:26:8e:47:94:a2:2d:b7:cf:d2:38:f2:db:dd:2b:b9:49:85: b5:df:05:1a:1b:98:25:6b:2b:4c:f2:a3:ff:dc:96:b6:d5:94: 52:ce:90:1d:32:c3:34:68:02:9c:2e:dd:6b:06:18:56:dc:a1: fb:94:d3:64:24:ce:1a:9e:c4:2b:35:80:ed:1c:8f:66:a6:bf: de:4b:0e:ec:1b:80:c2:78:05:10:aa:d6:cf:73:e5:3a:57:ea: 2d:c3:e3:2c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4otb7klDJ2BXFU2MS9XjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjUxOTNkODQzYWYxOTNlMjQ4NzU2ODY2NzNjOTU4OTZlYWUzNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXu+UEgJ7wwKT9V/l7p60VLE0k9M lOvUPaYp2b/sRn+KWQBrJlkbpR5++FjYJTuk6Yf5GJ16uBYSx6L1pHxqanpJ2z2V zgkb27t6J64W4t06XZR0LRez4SGHaXS+UNB+zMMRN5DzAwSIopRF/f5bt5xnGA23 JATlgO6jpGyX4ouubumQL2IWyWedcAYj69NT/cj5nzR86mWrZvbiUY2q6e7H6FO9 bE7F6t/HixgAIy91ScC9GqLds/nxYMyfA9FbngIFEHJuTfR5S8053LEFM+GqO4+a goKCCL9Xo2rW1ixF0WTgYETeOo+ec1Ywbvpa7aqdHEZEwat9Th1C8SmhKQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJtRk9hDrxk+JIdWhmc8lYlurjSXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2I1ZTk0 MC02NTExLTQ4MDUtOGQwYy0wMDBlYWQzOTc2NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYjVlOTQw LTY1MTEtNDgwNS04ZDBjLTAwMGVhZDM5NzY1YS8xL20xR1QyRU92R1Q0a2gxYUda enlWaVc2dU5KYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWg9MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDDxTANBgkqhkiG9w0BAQsFAAOCAQEAjyVBEMmLHMzhhy4p7PAvKyc01SqyubMn 4l8VAo7DWARFzU9nEfXsAIRCT5yh4jPjBH3SyTRgQ9+4Be/EIqXO3xCoy8Pqzpxb c1CyWEoDeROaFlZ66aPjac6XKc/T99YWirB+Ek/36Kg0B2XWr7fHRlvPVMaEXlZ6 q88LwArsUtIttpEcJsqBg6sDds0B1Lh/PqKD8b+vmrcZCV2KDUsHLOjZ3yaOR5Si LbfP0jjy290ruUmFtd8FGhuYJWsrTPKj/9yWttWUUs6QHTLDNGgCnC7dawYYVtyh +5TTZCTOGp7EKzWA7RyPZqa/3ksO7BuAwngFEKrWz3PlOlfqLcPjLA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:04 2026 by rpki-client