This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer File: rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer (raw, json) Hash identifier: WkhCU6dzuoEFKbBBjhsyuj9ODOHX3mVSjyP6+4mUVb4= Subject key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAB4FE4D7D63886D908217818DCF7C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 139.50.0.0/16 IP: 185.224.148.0/22 IP: 193.57.97.0/24 IP: 193.103.192.0/20 IP: 193.218.73.0/24 IP: 2a02:e440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b4:fe:4d:7d:63:88:6d:90:82:17:81:8d:cf:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:06:6b:d2:50:45:14:b1:c3:d5:b4:8a:3f: 9a:13:2b:d8:97:7d:25:c3:8f:e2:ff:45:4b:54:88: 42:36:9f:f2:a1:47:8f:52:8d:70:bd:e8:3c:08:6c: 48:0f:bc:7c:cb:63:c8:cd:a5:17:4b:d4:61:48:0c: 0e:15:9a:be:0f:e1:bf:ca:9f:f9:7f:24:ec:0d:14: 93:94:f7:5a:cf:3f:d5:5d:d0:7d:d3:78:91:86:e4: 88:8f:af:46:8b:0c:6c:2f:2d:00:9f:28:03:f8:e1: 14:06:6a:a5:5b:02:4a:b2:ad:9e:e6:c1:9b:e1:62: 97:28:47:d7:a5:64:d1:40:57:33:7c:4e:07:64:f2: e3:85:25:c7:55:4f:0e:b5:b2:e7:e2:14:29:19:aa: 3e:23:57:52:85:79:25:40:4a:48:24:b4:ae:0e:c1: 36:2d:89:1b:66:7c:bb:08:1c:f8:77:68:0a:b7:0f: bc:b3:a9:b7:93:a9:97:1d:04:39:cf:31:b7:d9:8f: 08:f5:0e:0b:90:86:ba:f9:3c:ca:03:75:8f:b8:40: 60:39:3c:1f:f2:bd:36:10:ef:a1:bc:ab:3c:8d:de: e2:64:68:9c:39:07:ac:5e:58:1a:86:93:c3:75:5d: 4d:f7:7d:32:6d:a0:30:9b:90:b5:4f:d0:7c:a1:92: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.50.0.0/16 185.224.148.0/22 193.57.97.0/24 193.103.192.0/20 193.218.73.0/24 IPv6: 2a02:e440::/29 Signature Algorithm: sha256WithRSAEncryption 2a:c8:97:df:25:30:9e:64:df:f7:6a:ef:d8:ba:ad:43:a2:33: 18:5d:1a:71:97:fe:40:5a:fa:09:ad:0a:c4:2e:df:67:0d:fb: 86:c7:12:ee:9d:4e:cd:98:3c:2f:c0:f6:1b:da:99:1a:8f:d1: dc:41:d8:4c:90:2e:82:d0:27:1d:30:e7:9a:33:6c:44:c9:ba: c5:78:85:5e:a7:af:b7:8f:43:77:e0:ed:7e:e4:80:f7:1c:49: b1:e4:02:e8:ec:1f:f2:e4:1e:34:f8:ed:b5:21:80:f9:d1:84: 8c:eb:af:bb:72:3e:b5:d6:6a:2d:85:04:5b:5a:53:40:d2:05: 30:ae:db:1b:5e:23:f5:bb:34:f8:d1:eb:e0:db:0d:55:74:ea: 1b:08:76:fe:0d:76:8b:ed:80:e0:5f:2e:93:d1:cf:95:cb:7c: dc:25:e9:0b:cf:81:9b:63:4d:e0:0b:18:27:71:cd:50:c3:b4: 3b:31:62:db:9b:94:12:c4:94:c8:8a:8c:75:ee:f0:b6:a7:35: 3b:dc:d9:33:f2:89:4c:7f:00:41:19:0d:39:7b:13:54:20:41: 60:35:34:d0:ac:87:d0:62:fd:63:f5:0f:cd:33:e0:94:83:5a: 8c:d9:c7:da:82:5e:c0:ca:59:08:99:68:6e:d0:6c:a5:b5:98: be:72:98:75 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZt9yrT+TX1jiG2QgheBjc98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTY2NGI5MjRlNGVhMDI3YzFjM2EwNzcwZGYxZmY4MGIxZDU2OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgcGa9JQRRSxw9W0ij+aEyvYl30l w4/i/0VLVIhCNp/yoUePUo1wveg8CGxID7x8y2PIzaUXS9RhSAwOFZq+D+G/yp/5 fyTsDRSTlPdazz/VXdB903iRhuSIj69GiwxsLy0AnygD+OEUBmqlWwJKsq2e5sGb 4WKXKEfXpWTRQFczfE4HZPLjhSXHVU8OtbLn4hQpGao+I1dShXklQEpIJLSuDsE2 LYkbZny7CBz4d2gKtw+8s6m3k6mXHQQ5zzG32Y8I9Q4LkIa6+TzKA3WPuEBgOTwf 8r02EO+hvKs8jd7iZGicOQesXlgahpPDdV1N930ybaAwm5C1T9B8oZIU2QIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2UyZjg0 Ni04NTgyLTQwOTMtYWU5My0wNGM1Mzk3ZmU1ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvZTJmODQ2 LTg1ODItNDA5My1hZTkzLTA0YzUzOTdmZTVmOC8xL3JtWkxrazVPb0NmQnc2QjNE ZkhfZ0xIVmFQby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF BwEHAQH/BDYwNDAjBAIAATAdAwMAizIDBAK54JQDBADBOWEDBATBZ8ADBADB2kkw DQQCAAIwBwMFAyoC5EAwDQYJKoZIhvcNAQELBQADggEBACrIl98lMJ5k3/dq79i6 rUOiMxhdGnGX/kBa+gmtCsQu32cN+4bHEu6dTs2YPC/A9hvamRqP0dxB2EyQLoLQ Jx0w55ozbETJusV4hV6nr7ePQ3fg7X7kgPccSbHkAujsH/LkHjT47bUhgPnRhIzr r7tyPrXWai2FBFtaU0DSBTCu2xteI/W7NPjR6+DbDVV06hsIdv4NdovtgOBfLpPR z5XLfNwl6QvPgZtjTeALGCdxzVDDtDsxYtublBLElMiKjHXu8LanNTvc2TPyiUx/ AEEZDTl7E1QgQWA1NNCsh9Bi/WP1D80z4JSDWozZx9qCXsDKWQiZaG7QbKW1mL5y mHU= -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:30 2026 by rpki-client