This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer (raw, json) Hash identifier: BK9bGFiZB8c8SgyeiQbwE/WN8VdjhllHey0KnYQr5oc= Subject key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80678A2C2B2E16CCAF3DF18BD7C00F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.90.162.0/24 IP: 209.145.40.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:67:8a:2c:2b:2e:16:cc:af:3d:f1:8b:d7:c0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=982b5693b8261fb539fea3b13c817115f00c18df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:17:2b:53:7b:e5:2f:68:ee:49:e7:96:86: a8:84:d2:06:d4:27:00:24:bb:e8:33:03:20:ea:ca: 81:25:76:fa:48:98:88:ab:80:cf:df:bd:39:eb:14: 57:6f:d6:39:c0:e1:23:fb:14:b0:8e:70:7a:01:e5: 55:df:6c:78:fb:e8:4e:02:e9:c1:46:9d:0c:b6:74: ef:e4:0c:d6:10:27:11:bc:85:fc:6b:f2:db:e8:72: 34:f6:0d:96:af:11:04:28:b5:66:29:e3:5a:aa:38: c0:b6:91:c6:67:da:17:b8:02:7a:f5:4f:f9:e0:f8: b5:57:63:76:03:d0:02:19:cd:31:21:03:ef:4b:7e: ce:48:59:39:a6:da:58:6c:3a:26:c5:33:cd:42:23: 9e:df:5c:2f:75:31:db:22:35:dc:c6:b2:c8:6b:ea: a6:bd:1c:02:b6:9b:e6:b9:ec:67:bd:3f:e8:c4:c6: 65:2e:a0:5e:0f:6f:2e:7a:e2:0a:28:53:fb:62:5d: 35:a3:71:fc:3f:ea:8d:d7:40:34:a3:9f:78:f3:52: 5f:97:2f:ae:a1:11:60:a4:fb:97:67:01:6d:3b:9e: 91:e6:38:7c:55:d5:bb:73:a4:3b:4b:4d:01:23:73: 2d:73:f7:b4:ab:e2:3b:d5:0b:03:c3:d9:49:d3:dd: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.90.162.0/24 209.145.40.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:a8:49:96:17:e5:86:3c:40:3f:f3:bd:fd:fb:e7:4a:51:8d: 0f:e8:f5:33:5e:95:eb:7e:da:9d:1f:bf:77:56:e8:40:38:04: e3:79:32:48:a2:29:1e:a8:7b:4e:31:36:fb:62:c3:1e:67:cc: b7:17:ec:b5:63:05:48:e5:a6:15:99:8b:d9:7f:85:9b:3a:fb: ab:71:ba:b8:a6:6a:a0:91:4c:05:31:f7:d2:bb:9d:56:de:2f: 0c:6a:c2:fd:87:48:62:64:92:6a:86:a7:ad:b9:e7:ca:75:69: 26:46:22:5c:53:43:2a:e5:53:ac:05:05:3d:58:1a:51:7b:08: 06:4f:1f:2d:30:64:fb:8b:a2:4b:e0:fa:b3:a5:54:56:2c:80: 97:ff:b9:26:f6:3b:8c:aa:75:3d:84:e6:6b:12:eb:d3:55:eb: 80:8a:5d:e2:d7:72:09:b8:d6:9e:49:79:c3:b3:d6:01:f4:0c: 0d:5f:6d:05:04:ed:21:5a:b0:17:c6:93:43:e3:9e:8a:52:8b: b0:28:b8:36:ad:bc:2a:62:29:b9:1b:25:59:08:3c:0b:fd:ff: e3:16:02:f8:e2:7f:c8:ff:9f:78:7e:c1:1c:89:4c:c7:84:f7: 4f:20:c4:98:f1:10:b2:8d:66:62:b9:60:e1:96:0b:7c:a3:cf: 01:88:30:76 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8gGeKLCsuFsyvPfGL18APMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODJiNTY5M2I4MjYxZmI1MzlmZWEzYjEzYzgxNzExNWYwMGMxOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvecXK1N75S9o7knnloaohNIG1CcA JLvoMwMg6sqBJXb6SJiIq4DP37056xRXb9Y5wOEj+xSwjnB6AeVV32x4++hOAunB Rp0MtnTv5AzWECcRvIX8a/Lb6HI09g2WrxEEKLVmKeNaqjjAtpHGZ9oXuAJ69U/5 4Pi1V2N2A9ACGc0xIQPvS37OSFk5ptpYbDomxTPNQiOe31wvdTHbIjXcxrLIa+qm vRwCtpvmuexnvT/oxMZlLqBeD28ueuIKKFP7Yl01o3H8P+qN10A0o59481Jfly+u oRFgpPuXZwFtO56R5jh8VdW7c6Q7S00BI3Mtc/e0q+I71QsDw9lJ091BdQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFJgrVpO4Jh+1Of6jsTyBcRXwDBjfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2Q1MDVl OC0wMmIzLTRkODctOTRjNi0xZGE0YjkyNzk5ZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZDUwNWU4 LTAyYjMtNGQ4Ny05NGM2LTFkYTRiOTI3OTlmNi8xL21DdFdrN2dtSDdVNV9xT3hQ SUZ4RmZBTUdOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW1qiAwQA0ZEoMA0GCSqGSIb3DQEBCwUAA4IB AQCcqEmWF+WGPEA/8739++dKUY0P6PUzXpXrftqdH793VuhAOATjeTJIoikeqHtO MTb7YsMeZ8y3F+y1YwVI5aYVmYvZf4WbOvurcbq4pmqgkUwFMffSu51W3i8MasL9 h0hiZJJqhqetuefKdWkmRiJcU0Mq5VOsBQU9WBpRewgGTx8tMGT7i6JL4PqzpVRW LICX/7km9juMqnU9hOZrEuvTVeuAil3i13IJuNaeSXnDs9YB9AwNX20FBO0hWrAX xpND456KUouwKLg2rbwqYim5GyVZCDwL/f/jFgL44n/I/594fsEciUzHhPdPIMSY 8RCyjWZiuWDhlgt8o88BiDB2 -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:42 2026 by rpki-client