This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer File: m2JkjpE6NkDwMbY6a9krDijhOfs.cer (raw, json) Hash identifier: XsB3voU0pxeNHcSU9I29ioYu35Sr2UzgWixf5xMzXVw= Subject key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B11B6EACEFBB761154F4A52642DA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210615 IP: 87.236.145.0/24 IP: 2a14:9a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:11:b6:ea:ce:fb:b7:61:15:4f:4a:52:64:2d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:87:07:ca:34:2b:4e:5c:db:59:f0:c4:53: 8d:c8:5f:a3:86:cf:34:ff:8d:06:4e:5c:41:c4:90: 07:43:e0:f8:0d:15:bd:7f:c3:1b:31:69:6d:80:9a: 93:d3:fd:75:13:43:33:7d:fc:6b:a7:99:6d:40:cb: a0:47:cc:b3:55:54:07:90:63:29:09:af:b9:e8:cb: 73:1d:1d:ea:bc:69:63:24:57:93:3f:83:42:be:5e: ca:c4:82:2b:b9:e2:d3:c6:8a:07:1e:c0:1b:5f:41: 3c:37:9f:de:b0:0d:04:1f:e9:d7:73:23:ed:6c:56: 80:16:81:1a:b2:09:2c:71:ed:d5:c4:b9:c4:3b:89: cb:7a:7b:c1:36:6a:8e:8b:ee:80:d7:ac:de:59:9e: 31:27:54:ae:99:c6:ac:d2:ca:93:55:f5:1d:e8:c2: ad:db:3f:b3:4b:42:1b:39:0a:21:d9:74:e4:ea:1c: ba:b4:34:06:d2:3d:01:95:4f:de:41:81:6c:12:44: 68:9b:d6:26:ff:2a:6a:7d:bc:b4:4c:16:5e:ed:c7: 50:ec:ad:61:5b:b4:78:29:84:56:cb:a3:3f:7b:e3: c9:bc:ed:51:53:de:85:bf:3f:6e:f3:95:4b:a4:1e: 92:1e:37:93:df:27:9b:5a:99:2d:58:ec:5b:ad:24: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.145.0/24 IPv6: 2a14:9a80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210615 Signature Algorithm: sha256WithRSAEncryption 02:4e:4c:9f:3f:cf:4f:5d:63:ea:d1:c6:e4:a1:6e:44:2a:eb: 52:b6:34:41:db:fd:78:e9:d9:1d:10:0b:ea:a5:5f:9a:26:0a: 7f:e2:68:1d:c4:5c:38:08:e5:68:3c:75:1b:95:ad:1d:fd:b3: cc:56:89:54:fe:e9:c2:23:7a:31:50:f1:3f:d6:d8:72:18:9d: 1f:73:ce:6f:d7:d7:ea:31:73:49:bd:8b:78:7f:5c:c5:e0:ee: 56:0e:f6:aa:e9:dc:e7:74:bd:6e:52:a2:f6:71:1a:7a:c7:bd: 6c:0f:45:ff:c6:68:4d:65:18:34:38:9c:ee:f7:4f:43:18:3b: 56:13:a3:9d:af:a2:99:ed:dc:a3:f2:8f:78:95:62:b1:5e:ff: 60:94:9e:d8:bd:63:2e:32:55:36:5f:0a:74:a2:87:f1:27:1d: 02:1e:f6:83:14:33:e4:35:87:1b:e3:bd:63:2a:82:e1:a2:9d: d9:b0:6e:b6:f4:13:00:b8:9d:dd:3c:75:f8:43:5a:a9:bf:e4: d3:3b:66:e6:5a:f6:42:c9:ae:9b:a5:a6:d7:cb:43:51:e2:b3: d1:06:14:d6:58:f5:a1:89:22:93:d0:ee:ec:e9:88:fe:b1:c5: 21:71:16:fe:0c:6c:b4:d6:60:38:60:73:fc:33:97:d4:b6:5a: fc:4d:1b:a1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9WxG26s77t2EVT0pSZC2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjYyNjQ4ZTkxM2EzNjQwZjAzMWI2M2E2YmQ5MmIwZTI4ZTEzOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/KHB8o0K05c21nwxFONyF+jhs80 /40GTlxBxJAHQ+D4DRW9f8MbMWltgJqT0/11E0Mzffxrp5ltQMugR8yzVVQHkGMp Ca+56MtzHR3qvGljJFeTP4NCvl7KxIIrueLTxooHHsAbX0E8N5/esA0EH+nXcyPt bFaAFoEasgksce3VxLnEO4nLenvBNmqOi+6A16zeWZ4xJ1Sumcas0sqTVfUd6MKt 2z+zS0IbOQoh2XTk6hy6tDQG0j0BlU/eQYFsEkRom9Ym/ypqfby0TBZe7cdQ7K1h W7R4KYRWy6M/e+PJvO1RU96Fvz9u85VLpB6SHjeT3yebWpktWOxbrSQ/SQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJtiZI6ROjZA8DG2OmvZKw4o4Tn7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzg4NjVk Ny05ZmVhLTQ3ZjYtYTNmYy05OGJkMTU2MDI5YzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvODg2NWQ3 LTlmZWEtNDdmNi1hM2ZjLTk4YmQxNTYwMjljMC8xL20ySmtqcEU2TmtEd01iWTZh OWtyRGlqaE9mcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAV+yRMA0EAgACMAcDBQMqFJqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM2tzANBgkqhkiG9w0BAQsFAAOCAQEAAk5Mnz/PT11j 6tHG5KFuRCrrUrY0Qdv9eOnZHRAL6qVfmiYKf+JoHcRcOAjlaDx1G5WtHf2zzFaJ VP7pwiN6MVDxP9bYchidH3POb9fX6jFzSb2LeH9cxeDuVg72qunc53S9blKi9nEa ese9bA9F/8ZoTWUYNDic7vdPQxg7VhOjna+ime3co/KPeJVisV7/YJSe2L1jLjJV Nl8KdKKH8ScdAh72gxQz5DWHG+O9YyqC4aKd2bButvQTALid3Tx1+ENaqb/k0ztm 5lr2Qsmum6Wm18tDUeKz0QYU1lj1oYkik9Du7OmI/rHFIXEW/gxstNZgOGBz/DOX 1LZa/E0boQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:34 2026 by rpki-client