This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer File: mEL3HQwjZ4gu9HCLIGtLbimjezM.cer (raw, json) Hash identifier: 2mggkdYUmizmV0pRvfydFPCqHkrLUp8UlKhdpZ4dx9g= Subject key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B366C20C56B1FCABA5FD9B2F57CEB07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48528 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6c:20:c5:6b:1f:ca:ba:5f:d9:b2:f5:7c:eb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:97:da:1d:34:d3:64:a4:19:bc:47:9d:c0: e3:1d:be:9e:c5:7d:f8:03:f8:c1:d8:f3:ef:53:5b: f5:63:67:6a:04:99:e7:90:13:10:d3:49:4d:47:07: cc:70:fe:87:f2:f7:1a:b0:fd:b7:46:5f:82:9c:dc: 04:e1:7f:14:5f:60:bf:b5:78:bd:19:b6:b9:58:69: 1b:9b:44:30:c9:3d:3b:b5:30:d1:ce:68:2b:17:88: 27:b8:2d:e7:e2:cb:14:f6:f0:4d:c9:26:d7:e6:42: a0:c1:2f:e7:5d:63:96:18:8c:93:1d:e3:97:b4:e2: 57:db:51:4d:30:69:fc:38:a2:28:d1:dd:53:86:aa: c7:ad:56:dd:ec:18:fd:90:7d:b7:9b:fb:7e:5c:06: b9:7f:10:05:95:71:62:af:3f:ad:aa:e1:dc:88:0e: 97:04:2c:d5:86:2c:db:2b:d1:6b:42:e0:5e:f0:7d: b1:f7:46:1e:d7:21:78:84:d7:df:4f:b8:2a:46:ef: d0:ba:88:40:8b:75:36:26:1d:28:da:3a:c5:28:c3: ba:75:18:97:87:5b:9c:16:10:da:d5:c6:61:3b:45: 90:b6:61:19:5c:ab:20:14:a6:1f:8d:fb:72:43:5b: 14:82:41:41:89:94:58:ce:15:ab:f5:b5:32:93:61: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48528 Signature Algorithm: sha256WithRSAEncryption 01:4b:f0:5f:0c:f8:b2:e1:1e:35:10:5a:d8:d5:19:c9:80:fa: 19:0b:cf:ad:7e:d8:ce:d4:7d:c6:5a:c0:c4:9c:04:a4:68:d2: ad:de:ed:6d:9a:8f:40:76:bf:67:b8:8d:3b:af:a9:14:28:5c: bb:ba:d6:57:03:7a:f4:61:e8:e6:13:40:62:4f:d3:70:24:16: 06:bc:90:b7:7b:a4:01:2e:37:73:e1:6c:9b:a0:e1:2c:ff:79: be:fe:f7:a5:1e:df:5e:c2:fe:f4:5d:5d:24:8b:fd:d4:78:f7: 0f:c1:11:41:7a:9d:e8:8b:be:39:d9:46:fa:78:3f:24:0b:9a: f3:34:21:f7:7f:cf:5b:10:50:1d:82:7f:d3:fe:70:99:83:db: 5e:e5:e0:43:7f:e2:f0:b7:79:51:f3:9c:88:e1:7d:5a:74:cc: ab:8a:e8:31:58:bc:5f:ee:1a:3e:dd:e8:92:9f:05:4b:b5:6e: 07:4a:66:c8:c7:1d:e5:9b:7a:05:b0:e1:26:8d:bc:0e:b0:55: 54:8d:00:bf:14:40:be:4a:67:c3:3d:22:57:54:dc:db:dd:cf: 7d:26:67:8b:a4:10:6a:7d:09:de:43:6d:33:e8:47:13:e0:48: f2:46:a0:1f:d8:a8:ca:06:18:79:a1:56:c2:bf:50:0c:a1:db: 59:71:c8:88 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7NmwgxWsfyrpf2bL1fOsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODQyZjcxZDBjMjM2Nzg4MmVmNDcwOGIyMDZiNGI2ZTI5YTM3YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0aX2h0002SkGbxHncDjHb6exX34 A/jB2PPvU1v1Y2dqBJnnkBMQ00lNRwfMcP6H8vcasP23Rl+CnNwE4X8UX2C/tXi9 Gba5WGkbm0QwyT07tTDRzmgrF4gnuC3n4ssU9vBNySbX5kKgwS/nXWOWGIyTHeOX tOJX21FNMGn8OKIo0d1ThqrHrVbd7Bj9kH23m/t+XAa5fxAFlXFirz+tquHciA6X BCzVhizbK9FrQuBe8H2x90Ye1yF4hNffT7gqRu/QuohAi3U2Jh0o2jrFKMO6dRiX h1ucFhDa1cZhO0WQtmEZXKsgFKYfjftyQ1sUgkFBiZRYzhWr9bUyk2HVSwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJhC9x0MI2eILvRwiyBrS24po3szMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzI1Yzk0 Ny04NTM0LTQzNDEtYWQ2ZS03ZGE4ZGJhZWE5NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvMjVjOTQ3 LTg1MzQtNDM0MS1hZDZlLTdkYThkYmFlYTk0YS8xL21FTDNIUXdqWjRndTlIQ0xJ R3RMYmltamV6TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC9kDANBgkqhkiG9w0BAQsFAAOCAQEAAUvwXwz4suEe NRBa2NUZyYD6GQvPrX7YztR9xlrAxJwEpGjSrd7tbZqPQHa/Z7iNO6+pFChcu7rW VwN69GHo5hNAYk/TcCQWBryQt3ukAS43c+Fsm6DhLP95vv73pR7fXsL+9F1dJIv9 1Hj3D8ERQXqd6Iu+OdlG+ng/JAua8zQh93/PWxBQHYJ/0/5wmYPbXuXgQ3/i8Ld5 UfOciOF9WnTMq4roMVi8X+4aPt3okp8FS7VuB0pmyMcd5Zt6BbDhJo28DrBVVI0A vxRAvkpnwz0iV1Tc293PfSZni6QQan0J3kNtM+hHE+BI8kagH9ioygYYeaFWwr9Q DKHbWXHIiA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:49 2026 by rpki-client