This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer File: rmjJUYwq1UwKy4IUaMhuRboWHBg.cer (raw, json) Hash identifier: o2J5Rp2WfsXsVNuyrT/8uzDo+v5qX7Y56CoTedTyB/w= Subject key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D20E35179C4317606F44C5AAA9F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202531 IP: 185.151.219.0/24 IP: 185.206.254.0/24 IP: 2a0f:c680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d2:0e:35:17:9c:43:17:60:6f:44:c5:aa:a9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:81:1b:30:01:58:95:b2:fb:b9:d0:09:7f: 38:12:d2:3b:c9:e4:ca:df:48:78:23:bc:d9:50:67: ad:bc:b9:73:40:26:bf:a3:36:42:ea:4a:b6:0a:29: ed:90:e7:5b:8f:67:75:19:64:c9:eb:5f:37:69:59: d8:1f:d8:58:65:67:5c:76:bb:79:e9:32:c5:08:6a: d6:5b:18:6f:2a:b3:f5:11:2b:22:51:a5:f0:fc:da: e4:a7:fe:11:41:b7:e5:bb:51:b4:12:ed:35:f1:5f: 7b:79:97:d9:61:d5:a4:95:ef:11:d8:9c:ee:45:e5: b2:8a:34:b7:7d:5a:97:24:ed:05:52:58:e3:ac:b6: 64:b7:7a:74:a1:e1:dc:ab:73:3b:da:29:9c:9f:00: ca:81:d2:f3:27:0d:0f:90:31:36:5a:ac:50:4f:75: 47:d0:23:92:a5:26:f1:ba:94:6f:a8:e7:d6:97:17: 8c:02:70:35:fe:73:18:00:7a:66:53:3b:1a:88:3e: a4:02:d6:3c:0e:7e:ab:b6:06:62:8c:3b:ec:bb:2f: 70:37:a9:15:45:c4:10:77:8e:da:4a:9f:4e:39:73: 0d:13:90:51:d0:3f:0a:bc:4d:60:ee:27:fc:b1:6a: 68:9a:11:af:40:67:6b:8f:ec:93:2e:08:74:42:57: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.219.0/24 185.206.254.0/24 IPv6: 2a0f:c680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202531 Signature Algorithm: sha256WithRSAEncryption 8d:d6:88:b0:20:9b:85:da:df:82:e6:7e:df:6d:25:b2:8c:df: 28:20:35:30:f1:ac:a9:b7:80:55:12:73:ce:33:dc:d1:91:d0: cf:e8:1f:c9:28:b4:fb:71:3f:56:49:46:c5:8a:ed:ae:7c:69: 6e:46:22:bb:28:92:b3:db:a5:76:99:9a:ea:92:fb:48:9c:6b: dc:32:fd:74:e0:c2:8b:9a:21:05:df:96:23:d1:4f:69:c8:0a: b6:a3:af:1e:85:50:c8:1d:b1:d8:a3:3a:3a:6d:22:fe:67:9c: 56:ce:d6:f6:4e:7f:a8:de:c7:f9:fa:e9:0d:f8:fe:c3:6e:6b: f4:d2:84:cc:6b:86:a1:6a:93:35:28:45:99:fd:47:4a:42:2e: 0a:18:68:0c:30:e9:fd:36:e3:63:d2:0a:32:46:3f:1b:e7:a7: 55:0c:29:ad:0e:94:1b:36:9f:5e:67:b3:2c:dd:95:72:99:4b: 86:8b:f2:98:ca:ae:63:6c:cf:c1:ce:67:2a:42:94:c7:84:9a: 11:28:93:34:cd:b5:67:7f:9a:0b:79:88:30:21:ca:15:a4:03: de:b0:77:91:02:9e:5f:f8:fb:5c:2c:3e:af:9e:26:dc:b8:56: 1b:9f:5d:29:1e:ec:a2:af:8b:24:21:07:e6:8b:e6:5d:e9:87: 7f:76:dc:cf -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WNIONRecQxdgb0TFqqn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTY4Yzk1MThjMmFkNTRjMGFjYjgyMTQ2OGM4NmU0NWJhMTYxYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kaBGzABWJWy+7nQCX84EtI7yeTK 30h4I7zZUGetvLlzQCa/ozZC6kq2CintkOdbj2d1GWTJ6183aVnYH9hYZWdcdrt5 6TLFCGrWWxhvKrP1ESsiUaXw/Nrkp/4RQbflu1G0Eu018V97eZfZYdWkle8R2Jzu ReWyijS3fVqXJO0FUljjrLZkt3p0oeHcq3M72imcnwDKgdLzJw0PkDE2WqxQT3VH 0COSpSbxupRvqOfWlxeMAnA1/nMYAHpmUzsaiD6kAtY8Dn6rtgZijDvsuy9wN6kV RcQQd47aSp9OOXMNE5BR0D8KvE1g7if8sWpomhGvQGdrj+yTLgh0QlcV1QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFK5oyVGMKtVMCsuCFGjIbkW6FhwYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzdiNDJi NC0xZDEyLTQyY2YtYThmMC0xNmI2YmVkYTg3ZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvN2I0MmI0 LTFkMTItNDJjZi1hOGYwLTE2YjZiZWRhODdkMC8xL3JtakpVWXdxMVV3S3k0SVVh TWh1UmJvV0hCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuZfbAwQAuc7+MA0EAgACMAcDBQMqD8aAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXIzANBgkqhkiG9w0BAQsFAAOCAQEAjdaI sCCbhdrfguZ+320lsozfKCA1MPGsqbeAVRJzzjPc0ZHQz+gfySi0+3E/VklGxYrt rnxpbkYiuyiSs9uldpma6pL7SJxr3DL9dODCi5ohBd+WI9FPacgKtqOvHoVQyB2x 2KM6Om0i/mecVs7W9k5/qN7H+frpDfj+w25r9NKEzGuGoWqTNShFmf1HSkIuChho DDDp/TbjY9IKMkY/G+enVQwprQ6UGzafXmezLN2VcplLhovymMquY2zPwc5nKkKU x4SaESiTNM21Z3+aC3mIMCHKFaQD3rB3kQKeX/j7XCw+r54m3LhWG59dKR7soq+L JCEH5ovmXemHf3bczw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:35 2026 by rpki-client