This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer File: mXyCWBNDX7ARVDjuP2B2N869jo4.cer (raw, json) Hash identifier: jc2diksO5YU9MZTD3mfySLh0Knr9a7qSVmXoDq6bqnQ= Subject key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7D2EB9CDDF30F58E2BB3C42360308 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a0f:9640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d2:eb:9c:dd:f3:0f:58:e2:bb:3c:42:36:03:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=997c825813435fb0115438ee3f607637cebd8e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:3b:74:74:c6:bc:0b:32:71:77:fd:37:1c: 1a:4b:73:86:0b:dd:d1:e3:a3:29:cf:fd:22:49:f9: 8a:6c:34:20:28:07:5e:ff:d9:9e:4a:cf:ad:08:5c: c2:9c:53:5d:07:34:3d:3d:25:43:2a:7b:c1:b1:2f: 26:97:c0:05:71:fa:0d:6f:f8:64:46:2a:a7:e3:9c: e7:7d:51:83:75:e7:06:6e:d9:08:49:1c:81:6a:39: 77:9e:d0:58:10:bc:9b:c0:78:66:b3:65:bc:56:7a: f4:95:c9:0a:bb:0c:93:5d:f8:41:74:ee:64:2d:21: cf:a6:e0:bd:8d:ec:00:58:bf:cc:76:b7:9f:e3:41: e7:0b:de:53:26:7f:83:2f:02:60:84:32:94:2a:65: aa:d0:cd:18:d8:57:ed:00:b0:b9:81:7f:f9:7d:aa: 12:f5:a6:41:57:1b:34:3b:15:0c:a5:fb:e5:95:4f: 09:4b:b4:38:fb:0d:1b:a9:68:d1:d8:e2:c8:34:55: 8d:7f:43:c2:40:40:6f:b8:f4:48:da:2b:a5:cc:75: 3a:cd:e2:0c:17:80:f0:e0:19:e3:f7:f0:c6:de:32: 04:8d:d7:7e:24:e2:71:dc:b4:74:52:74:50:de:70: 82:70:f4:da:5c:52:6c:03:7a:0c:64:fe:b5:f5:f1: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:9640::/29 Signature Algorithm: sha256WithRSAEncryption 57:89:c6:58:b5:b8:b9:39:db:7d:28:cc:dc:04:21:ec:06:a6: f8:37:c5:d9:3d:67:d0:05:7a:71:e3:de:4b:9e:af:95:18:94: 31:7f:23:59:40:61:55:89:18:64:d5:49:e9:c7:c3:f6:07:49: 1f:bc:b4:27:93:d3:c1:ab:54:b3:f1:08:d7:22:68:21:c0:c5: 5d:6b:5b:d0:80:df:20:e7:99:0a:fe:ad:c7:b5:d6:eb:fe:d8: 08:e6:15:9d:9f:d2:94:00:cd:92:e6:f5:d8:4c:12:03:aa:a6: 13:61:da:4a:f6:1f:5d:c7:ff:ba:a9:fc:93:87:c2:21:b8:08: d7:53:60:76:74:3a:b4:b9:f2:4b:cb:1f:cb:2b:b8:32:a1:6a: b3:4e:d1:ef:99:16:91:df:fc:94:b8:6f:2e:26:1e:a0:d0:5f: c2:85:ac:4f:62:44:dd:64:dd:b7:58:5f:61:25:32:46:80:62: 84:67:09:ca:ad:9d:d9:a2:8f:64:19:22:44:02:ed:7b:23:8f: a3:2e:c9:af:70:2a:d1:71:84:d1:ef:e0:e8:9b:ae:84:96:34: b0:ac:c7:9b:58:55:83:a7:62:0d:e1:86:5b:23:b8:08:4e:28: 40:e4:f8:18:e9:ea:36:57:b2:83:65:5c:cf:12:1b:05:7c:3b: ea:5b:92:3c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt6x9LrnN3zD1jiuzxCNgMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTdjODI1ODEzNDM1ZmIwMTE1NDM4ZWUzZjYwNzYzN2NlYmQ4ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVg7dHTGvAsycXf9NxwaS3OGC93R 46Mpz/0iSfmKbDQgKAde/9meSs+tCFzCnFNdBzQ9PSVDKnvBsS8ml8AFcfoNb/hk Riqn45znfVGDdecGbtkISRyBajl3ntBYELybwHhms2W8Vnr0lckKuwyTXfhBdO5k LSHPpuC9jewAWL/Mdref40HnC95TJn+DLwJghDKUKmWq0M0Y2FftALC5gX/5faoS 9aZBVxs0OxUMpfvllU8JS7Q4+w0bqWjR2OLINFWNf0PCQEBvuPRI2iulzHU6zeIM F4Dw4Bnj9/DG3jIEjdd+JOJx3LR0UnRQ3nCCcPTaXFJsA3oMZP619fEL7wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFJl8glgTQ1+wEVQ47j9gdjfOvY6OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzJmNTUw Mi0wMDdhLTQ2ODMtOTg3Mi0yOGY3MWFiYmEwM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMmY1NTAy LTAwN2EtNDY4My05ODcyLTI4ZjcxYWJiYTAzYS8xL21YeUNXQk5EWDdBUlZEanVQ MkIyTjg2OWpvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg+WQDANBgkqhkiG9w0BAQsFAAOCAQEAV4nG WLW4uTnbfSjM3AQh7Aam+DfF2T1n0AV6cePeS56vlRiUMX8jWUBhVYkYZNVJ6cfD 9gdJH7y0J5PTwatUs/EI1yJoIcDFXWtb0IDfIOeZCv6tx7XW6/7YCOYVnZ/SlADN kub12EwSA6qmE2HaSvYfXcf/uqn8k4fCIbgI11NgdnQ6tLnyS8sfyyu4MqFqs07R 75kWkd/8lLhvLiYeoNBfwoWsT2JE3WTdt1hfYSUyRoBihGcJyq2d2aKPZBkiRALt eyOPoy7Jr3Aq0XGE0e/g6JuuhJY0sKzHm1hVg6diDeGGWyO4CE4oQOT4GOnqNley g2VczxIbBXw76luSPA== -----END CERTIFICATE-----Generated at Sun Jan 18 14:17:21 2026 by rpki-client