This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer File: m4Nem003buarbK0nXiQ89ATBKvQ.cer (raw, json) Hash identifier: sqUg+TBwHbP4+6vsB+TYb58jAD80SrwJlhsPQgxCp2Q= Subject key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB397C5F005A7EEE59716910706D84 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200652 IP: 185.100.60.0/22 IP: 2a06:1740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:39:7c:5f:00:5a:7e:ee:59:71:69:10:70:6d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:82:06:d1:b2:6a:39:b2:a8:21:25:e5:3f: d8:04:7c:6a:3d:fb:e1:01:42:ae:9c:fe:8a:da:f4: 58:b0:1c:27:b1:e1:27:15:83:b8:5d:01:41:1d:87: 5e:42:03:ae:fd:ea:3b:85:67:25:d7:b8:89:cb:01: 86:c0:3e:fe:b6:5c:9f:a1:5f:d5:ba:02:c2:2f:35: 5d:d2:92:fa:93:e2:48:65:7a:ef:71:e8:25:01:3b: 81:3e:1e:35:d6:2f:5f:2b:10:c4:82:b2:df:de:2c: b8:d1:b6:38:e7:0a:14:fe:24:07:05:cf:91:98:82: 01:b7:47:c9:d2:3c:b3:b6:ff:1b:30:8b:a3:46:ad: 82:7c:2c:e5:e9:c8:7c:d1:60:61:52:fb:07:76:ff: ec:00:8b:2f:f3:a6:b8:a0:d1:a1:9d:6c:c2:79:28: fa:13:32:0f:0c:20:61:97:47:62:c7:7e:d2:36:e1: dd:a7:60:5a:5a:8a:bd:b9:4c:3d:53:e9:e1:b9:a0: fc:68:23:a9:13:af:8a:16:97:7c:11:24:80:68:65: a4:9a:cc:af:b3:4b:fa:1f:5d:0c:d2:2c:81:0c:44: 83:b9:7f:5c:84:63:36:e0:7b:f2:ab:f9:22:1c:a1: 24:15:a5:8e:1b:f8:f2:3c:42:c5:e8:17:00:3b:16: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.60.0/22 IPv6: 2a06:1740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200652 Signature Algorithm: sha256WithRSAEncryption 93:f5:47:7f:f7:5b:c2:56:c9:79:56:70:46:87:0a:29:29:71: bf:70:58:55:4d:95:44:82:0b:91:b8:25:65:f3:8c:ed:d4:a4: ab:a0:69:54:83:2d:b2:b0:08:71:8b:d4:b6:b3:ff:53:26:bf: d3:d8:8c:9c:b7:8e:db:b1:9a:5b:45:e7:62:e9:b4:93:73:7c: 4d:ff:03:a9:d0:d2:4b:2f:d1:70:de:69:9a:85:c4:53:3f:85: c8:b7:e6:29:d1:44:11:d9:95:f3:9a:75:f0:ba:15:3c:00:c9: fa:b7:be:59:2f:fa:4a:8b:bb:68:87:2c:37:0a:05:f1:bc:f2: 31:38:72:29:ae:9d:7b:7c:e4:a2:6c:64:90:71:64:da:9f:43: 37:f4:44:ba:40:19:8d:6d:3e:ea:ca:19:c2:97:1e:af:0c:77: 06:14:d5:b9:d1:50:1f:41:38:48:f7:c0:e3:2c:c2:25:52:44: bb:b9:11:6c:4f:6b:6f:9b:a7:d7:f4:dc:68:21:e0:a0:18:ed: d1:7e:28:4d:fa:e1:05:df:7e:11:83:eb:74:d3:3b:41:04:97: 30:7f:c1:da:48:5c:a2:37:e5:3a:32:ff:9f:9b:45:10:22:78: ef:6c:a9:68:43:a2:f2:62:f4:08:83:0c:d5:91:ea:56:21:ac: 76:45:47:28 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yzl8XwBafu5ZcWkQcG2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjgzNWU5YjRkMzc2ZWU2YWI2Y2FkMjc1ZTI0M2NmNDA0YzEyYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquqCBtGyajmyqCEl5T/YBHxqPfvh AUKunP6K2vRYsBwnseEnFYO4XQFBHYdeQgOu/eo7hWcl17iJywGGwD7+tlyfoV/V ugLCLzVd0pL6k+JIZXrvceglATuBPh411i9fKxDEgrLf3iy40bY45woU/iQHBc+R mIIBt0fJ0jyztv8bMIujRq2CfCzl6ch80WBhUvsHdv/sAIsv86a4oNGhnWzCeSj6 EzIPDCBhl0dix37SNuHdp2BaWoq9uUw9U+nhuaD8aCOpE6+KFpd8ESSAaGWkmsyv s0v6H10M0iyBDESDuX9chGM24Hvyq/kiHKEkFaWOG/jyPELF6BcAOxY7CQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJuDXptNN27mq2ytJ14kPPQEwSr0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzBhMzgy Ny1iNmM1LTRjM2EtOTZlNi1lOGRiMDE4YjM2ZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvMGEzODI3 LWI2YzUtNGMzYS05NmU2LWU4ZGIwMThiMzZkZC8xL200TmVtMDAzYnVhcmJLMG5Y aVE4OUFUQkt2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWQ8MA0EAgACMAcDBQMqBhdAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMPzDANBgkqhkiG9w0BAQsFAAOCAQEAk/VHf/dbwlbJ eVZwRocKKSlxv3BYVU2VRIILkbglZfOM7dSkq6BpVIMtsrAIcYvUtrP/Uya/09iM nLeO27GaW0XnYum0k3N8Tf8DqdDSSy/RcN5pmoXEUz+FyLfmKdFEEdmV85p18LoV PADJ+re+WS/6Sou7aIcsNwoF8bzyMThyKa6de3zkomxkkHFk2p9DN/REukAZjW0+ 6soZwpcerwx3BhTVudFQH0E4SPfA4yzCJVJEu7kRbE9rb5un1/TcaCHgoBjt0X4o TfrhBd9+EYPrdNM7QQSXMH/B2khcojflOjL/n5tFECJ472ypaEOi8mL0CIMM1ZHq ViGsdkVHKA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:01 2026 by rpki-client