This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer File: m3RNp58FMac61vS68IN-k-toAbE.cer (raw, json) Hash identifier: trN+nU8ci4bfMdTZbt5P/SbYEs8a40bWYjHvUh7P2gk= Subject key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6FE015AE065FC53398F566C1933F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a0a:d680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fe:01:5a:e0:65:fc:53:39:8f:56:6c:19:33:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:04:0e:d9:03:cd:20:82:94:b1:c6:68:c2: 47:c2:d2:b7:a8:e4:7b:83:96:37:5e:2a:b9:fd:96: ea:51:4f:a9:cb:3b:d5:50:51:37:18:02:98:6b:4f: 3d:fb:93:b1:7f:3d:ac:a1:0b:fe:91:67:ae:31:8a: d5:67:5c:1f:87:a4:2d:c0:d2:45:70:c8:76:72:e9: 2a:02:5c:c3:0b:f2:bf:a9:8a:6e:7a:13:37:53:6f: b4:68:db:6f:84:01:47:81:d2:27:2d:bf:df:34:9e: 49:62:2d:74:87:58:fc:48:b5:9d:e6:5a:fd:8b:1e: 99:2a:25:33:22:52:c7:00:8d:2d:ba:74:93:55:5a: 48:b9:da:a0:01:65:9e:27:28:74:1f:7a:57:a3:df: 8a:a3:eb:f4:f5:57:63:b4:5e:9d:18:a4:3a:df:a6: 39:8a:98:ed:b4:63:f3:3a:10:5e:8a:cd:6f:a3:23: 18:5b:88:1e:14:26:83:01:93:e5:31:b8:9e:6f:da: 6c:e9:fe:65:64:54:7f:fd:98:c9:23:90:a6:bb:26: 65:e5:97:85:ff:9e:83:43:1d:cf:6a:fe:c1:f5:1b: 3f:58:52:2d:18:ae:63:5a:37:6d:61:5b:0d:74:03: 03:29:ab:7f:ac:1f:5b:58:56:52:86:bf:2a:95:e2: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d680::/29 Signature Algorithm: sha256WithRSAEncryption 41:28:09:61:12:48:e9:dd:b7:b1:1d:61:19:0c:92:0d:8b:dc: b1:e9:05:16:bc:15:ac:d0:f2:96:ca:f5:cd:8e:be:12:39:89: 9d:31:9e:18:87:e8:95:f5:7d:f3:8e:e2:48:e4:ea:9d:51:a8: 35:ed:cf:44:ad:5c:1b:c2:d7:4c:62:20:90:e0:1d:d4:a7:ab: 5c:04:1c:cd:fa:8e:c4:35:91:82:a3:15:84:27:73:1d:7e:44: 74:1e:0e:6f:1b:60:bc:2e:b1:31:55:f8:df:55:fa:99:20:f9: 4c:ca:ba:cb:b5:3c:ec:0b:08:12:52:6f:a0:12:e8:ea:37:6a: 2b:73:00:fd:8d:aa:99:7e:53:07:be:0d:9d:8a:02:46:c9:7a: 1a:22:af:6d:e7:a2:40:5a:3b:9d:66:7c:c4:51:ce:c0:5f:07: 35:49:f5:97:c1:77:3c:b4:35:46:8d:b7:f0:14:57:2f:ea:a4: 76:a6:78:eb:a0:3d:be:7b:c1:36:7c:6e:99:7d:28:c7:a2:6f: 85:f4:a9:25:8f:65:05:ce:df:ad:21:49:01:c9:6f:a3:d5:70: c3:67:08:c8:6b:05:b3:01:90:46:e9:65:f7:8b:fb:be:f5:44: f7:3a:78:55:4c:2d:7a:4e:9b:75:41:d9:0f:18:50:6f:71:a6: 70:00:4f:e1 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt3xv4BWuBl/FM5j1ZsGTPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc0NGRhNzlmMDUzMWE3M2FkNmY0YmFmMDgzN2U5M2ViNjgwMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CYEDtkDzSCClLHGaMJHwtK3qOR7 g5Y3Xiq5/ZbqUU+pyzvVUFE3GAKYa089+5Oxfz2soQv+kWeuMYrVZ1wfh6QtwNJF cMh2cukqAlzDC/K/qYpuehM3U2+0aNtvhAFHgdInLb/fNJ5JYi10h1j8SLWd5lr9 ix6ZKiUzIlLHAI0tunSTVVpIudqgAWWeJyh0H3pXo9+Ko+v09VdjtF6dGKQ636Y5 ipjttGPzOhBeis1voyMYW4geFCaDAZPlMbieb9ps6f5lZFR//ZjJI5CmuyZl5ZeF /56DQx3Pav7B9Rs/WFItGK5jWjdtYVsNdAMDKat/rB9bWFZShr8qleJH5wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFJt0TaefBTGnOtb0uvCDfpPraAGxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzNiMTc0 Mi0zMDc1LTRjYzktOGU4ZS05MmFiODBlMmVmZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvM2IxNzQy LTMwNzUtNGNjOS04ZThlLTkyYWI4MGUyZWZkNS8xL20zUk5wNThGTWFjNjF2UzY4 SU4tay10b0FiRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgrWgDANBgkqhkiG9w0BAQsFAAOCAQEAQSgJ YRJI6d23sR1hGQySDYvcsekFFrwVrNDylsr1zY6+EjmJnTGeGIfolfV9847iSOTq nVGoNe3PRK1cG8LXTGIgkOAd1KerXAQczfqOxDWRgqMVhCdzHX5EdB4ObxtgvC6x MVX431X6mSD5TMq6y7U87AsIElJvoBLo6jdqK3MA/Y2qmX5TB74NnYoCRsl6GiKv beeiQFo7nWZ8xFHOwF8HNUn1l8F3PLQ1Ro238BRXL+qkdqZ466A9vnvBNnxumX0o x6JvhfSpJY9lBc7frSFJAclvo9Vww2cIyGsFswGQRull94v7vvVE9zp4VUwtek6b dUHZDxhQb3GmcABP4Q== -----END CERTIFICATE-----Generated at Thu Jan 22 10:41:04 2026 by rpki-client