This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer File: mM0-vWXtPZquB5oOJNcTLZpxqrg.cer (raw, json) Hash identifier: BMh623yty94yxtyFd2PNnr/SQ5jSAYeSZ4X8Y8weoMQ= Subject key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE01A37257231076F61A1B02D81D99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25220 AS: 50189 IP: 46.182.248.0/21 IP: 62.102.192.0/19 IP: 82.145.192.0/20 IP: 85.197.64.0/18 IP: 185.56.228.0/22 IP: 193.106.16.0/22 IP: 193.254.212.0/23 IP: 195.135.224.0/22 IP: 2001:4b38::/29 IP: 2a00:9e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:01:a3:72:57:23:10:76:f6:1a:1b:02:d8:1d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:4f:a6:ef:7c:3a:40:9c:db:c1:c9:23:51: 96:91:e8:26:98:a7:04:d0:0f:a5:ca:a9:2b:25:ed: c5:b2:2b:21:50:d1:58:30:2a:11:00:7b:43:75:b8: 76:d9:b1:73:f4:2b:4a:a9:53:4a:31:8a:6d:03:4d: 87:c1:27:01:35:7f:fa:81:91:63:ad:27:7d:91:7b: ca:dd:13:fd:84:d3:f2:84:fc:e4:19:7a:e5:ce:73: 92:b1:f4:0d:e6:88:97:2e:bd:12:01:6d:d3:6b:1e: 05:43:a8:bb:80:02:45:5d:7c:3a:33:5b:8a:72:d2: b7:8c:63:fe:13:7d:ed:12:01:04:74:88:f6:d8:73: c0:27:96:86:a8:60:5f:53:5e:eb:45:3c:8e:93:dc: 57:5e:4f:22:ad:c3:87:5a:fe:ac:02:be:21:a0:15: 83:e8:92:30:f4:54:7d:4c:27:b4:53:32:ba:e5:e7: 9e:90:69:bf:c1:b2:ad:9c:56:aa:b4:3e:d6:0c:07: ac:73:01:ec:cf:ed:85:31:9c:23:47:f8:03:af:06: 39:09:98:bf:b5:19:e5:35:cd:c2:2c:7a:b6:00:0c: d8:7c:38:cb:55:11:e9:6a:93:ef:3b:bb:0e:53:f9: 54:14:9f:dd:83:71:09:53:51:4a:2c:94:ff:e2:10: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.248.0/21 62.102.192.0/19 82.145.192.0/20 85.197.64.0/18 185.56.228.0/22 193.106.16.0/22 193.254.212.0/23 195.135.224.0/22 IPv6: 2001:4b38::/29 2a00:9e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25220 50189 Signature Algorithm: sha256WithRSAEncryption 40:2d:81:3d:bd:c7:77:64:fc:51:d4:09:63:30:01:41:88:b5: df:53:b8:3f:99:62:8e:ff:ed:e9:62:9f:7a:35:19:36:2a:0f: 6f:02:5a:31:bd:76:54:75:2b:35:ee:60:e4:b5:ff:84:8a:17: 8e:69:10:f3:5e:60:6e:7f:e9:b9:92:0c:67:b9:d0:dd:ec:4d: 40:8b:ed:53:98:f7:19:fb:04:56:01:4f:d4:a6:ed:81:7a:f2: e3:84:b1:ab:a2:ae:ba:e9:59:8b:d8:05:02:55:fa:ef:d7:15: 60:45:35:43:af:22:92:39:38:b2:ac:a3:be:b5:4f:08:85:dd: 5b:cb:34:f9:2a:c5:ef:e4:2c:35:d5:bb:cf:12:c1:53:df:b1: d8:75:de:98:a2:90:dc:b1:00:0a:dd:d3:96:07:aa:83:2a:9f: af:d7:40:c8:f0:a2:12:bb:e5:ee:35:91:27:0b:8b:eb:c7:eb: a3:06:72:ca:e1:65:ae:25:c8:55:e5:b3:c9:60:2e:cc:d9:26: 83:3b:b4:48:8a:29:e2:0d:fb:40:b4:24:a7:15:08:b7:aa:c5: 49:94:7f:44:df:09:52:83:9d:bf:ac:cd:1e:f4:0d:da:67:0b: 56:98:1f:c0:53:5a:ad:a5:50:e0:37:4d:f6:2d:41:1a:bf:9f: aa:6f:8e:9f -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt87gGjclcjEHb2GhsC2B2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGNkM2ViZDY1ZWQzZDlhYWUwNzlhMGUyNGQ3MTMyZDlhNzFhYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz1Ppu98OkCc28HJI1GWkegmmKcE 0A+lyqkrJe3FsishUNFYMCoRAHtDdbh22bFz9CtKqVNKMYptA02HwScBNX/6gZFj rSd9kXvK3RP9hNPyhPzkGXrlznOSsfQN5oiXLr0SAW3Tax4FQ6i7gAJFXXw6M1uK ctK3jGP+E33tEgEEdIj22HPAJ5aGqGBfU17rRTyOk9xXXk8ircOHWv6sAr4hoBWD 6JIw9FR9TCe0UzK65eeekGm/wbKtnFaqtD7WDAescwHsz+2FMZwjR/gDrwY5CZi/ tRnlNc3CLHq2AAzYfDjLVRHpapPvO7sOU/lUFJ/dg3EJU1FKLJT/4hAwNQIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFJjNPr1l7T2argeaDiTXEy2acaq4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlL2NjYzY0 NS01MzIzLTRiMjAtYjQ3NS1mMzc3MDUzNjFjZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvY2NjNjQ1 LTUzMjMtNGIyMC1iNDc1LWYzNzcwNTM2MWNmOC8xL21NMC12V1h0UFpxdUI1b09K TmNUTFpweHFyZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQDLrb4AwQFPmbAAwQEUpHAAwQGVcVAAwQCuTjk AwQCwWoQAwQBwf7UAwQCw4fgMBQEAgACMA4DBQMgAUs4AwUDKgCeADAeBggrBgEF BQcBCAEB/wQPMA2gCzAJAgJihAIDAMQNMA0GCSqGSIb3DQEBCwUAA4IBAQBALYE9 vcd3ZPxR1AljMAFBiLXfU7g/mWKO/+3pYp96NRk2Kg9vAloxvXZUdSs17mDktf+E iheOaRDzXmBuf+m5kgxnudDd7E1Ai+1TmPcZ+wRWAU/Upu2BevLjhLGroq666VmL 2AUCVfrv1xVgRTVDryKSOTiyrKO+tU8Ihd1byzT5KsXv5Cw11bvPEsFT37HYdd6Y opDcsQAK3dOWB6qDKp+v10DI8KISu+XuNZEnC4vrx+ujBnLK4WWuJchV5bPJYC7M 2SaDO7RIiiniDftAtCSnFQi3qsVJlH9E3wlSg52/rM0e9A3aZwtWmB/AU1qtpVDg N032LUEav5+qb46f -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:08 2026 by rpki-client