This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer (raw, json) Hash identifier: qYmNhGG3+cBqGt4mz3G1wrk2HoeEqSpI3OmLN0DxlVE= Subject key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC148BC54D76EC27E7E0D93B5CCED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.157.236.0/22 IP: 2a0f:4e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c1:48:bc:54:d7:6e:c2:7e:7e:0d:93:b5:cc:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a4:20:c6:e5:61:66:09:7c:42:83:86:a9:d1: 01:26:2c:49:25:5b:20:cd:93:b8:00:52:8b:52:a2: f9:b3:2d:04:73:17:7c:6b:e9:57:8e:f8:bf:a3:ff: 74:34:15:9a:c6:6a:47:6e:17:e7:74:f5:97:c8:f5: 88:7e:46:17:5e:96:43:92:51:68:7e:c2:25:19:cb: 44:35:dc:f5:b8:97:8a:8f:8f:d5:9a:5b:c3:df:ad: ad:57:f4:22:bf:a4:83:9b:b1:14:cf:da:bc:3a:c3: 66:bc:01:f2:49:f6:29:55:f2:dd:85:c1:fd:a9:e6: 86:4c:c1:c3:0f:10:71:85:87:8d:e3:14:3c:4a:ee: c9:32:2f:01:91:88:de:b1:c2:98:cf:da:b2:57:aa: 13:84:8c:e4:28:07:c9:a0:00:a5:f7:25:d6:91:3e: ba:ec:0e:34:fd:00:0f:9c:b3:45:b3:f2:66:2e:04: 4a:7b:32:12:c3:8d:bc:44:05:49:69:ac:ee:5d:a0: 74:35:76:ee:01:9d:7f:68:7a:0f:a4:01:3c:a3:54: 78:06:f3:c3:7a:fb:23:26:cc:c8:16:01:fc:a4:a2: 22:55:75:78:55:42:62:3b:fc:89:b0:64:b1:c8:a1: f4:61:20:5a:93:64:ae:39:9a:e2:9b:52:1c:d8:68: 9d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.236.0/22 IPv6: 2a0f:4e80::/29 Signature Algorithm: sha256WithRSAEncryption 92:a8:ff:24:b7:08:54:1a:32:34:c8:51:8b:4e:64:6d:ea:1a: 72:01:39:00:71:14:f3:b8:8c:98:f9:77:6f:69:4c:ba:44:ac: 91:6d:1e:47:9f:70:c4:44:20:b1:17:ab:10:f2:95:45:09:c0: 83:b0:95:84:70:83:74:1c:37:18:80:ef:1c:be:5b:31:39:29: 3f:58:d8:9a:63:19:e5:ad:2c:9b:10:97:f5:fa:27:53:b2:19: 52:97:2b:8c:7a:8e:ed:88:7a:ef:0f:61:e6:a8:f8:54:50:fe: fe:a6:b0:25:a8:31:43:8e:a6:bf:0f:4c:ca:31:13:33:d6:e8: 63:2d:ce:14:18:e3:73:94:d1:1e:8c:33:3d:7d:d7:ae:a8:67: 7a:04:25:4a:d4:6e:a7:66:af:e3:82:f9:31:48:a9:8f:58:5a: 8b:37:a6:df:e0:99:95:3b:67:01:a9:06:a0:5c:b6:4c:32:a8: 77:4a:1e:0e:6d:f4:5c:f2:28:49:29:01:72:50:ca:80:c1:ad: b4:d4:ea:59:37:48:2f:b3:f1:55:a0:b6:50:fd:36:a5:18:4f: 63:dd:18:9b:57:88:f3:96:4b:f3:d4:7c:c2:6d:3d:09:02:5e: 41:bb:43:68:79:d4:0c:a5:c3:a6:62:90:ac:99:07:0f:97:36: c1:14:c8:eb -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57MFIvFTXbsJ+fg2TtcztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGNkOTZiMjdlODg0MzUwNGJiNWJkNTVjMzI5ZWMwMmRiOWYwZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6QgxuVhZgl8QoOGqdEBJixJJVsg zZO4AFKLUqL5sy0Ecxd8a+lXjvi/o/90NBWaxmpHbhfndPWXyPWIfkYXXpZDklFo fsIlGctENdz1uJeKj4/VmlvD362tV/Qiv6SDm7EUz9q8OsNmvAHySfYpVfLdhcH9 qeaGTMHDDxBxhYeN4xQ8Su7JMi8BkYjescKYz9qyV6oThIzkKAfJoACl9yXWkT66 7A40/QAPnLNFs/JmLgRKezISw428RAVJaazuXaB0NXbuAZ1/aHoPpAE8o1R4BvPD evsjJszIFgH8pKIiVXV4VUJiO/yJsGSxyKH0YSBak2SuOZrim1Ic2GidiQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLTNlrJ+iENQS7W9VcMp7ALbnw/9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzE5ZGRh ZC1jNDU4LTQ0MWUtOTg0ZS01NzNmMTdkMmFlZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvMTlkZGFk LWM0NTgtNDQxZS05ODRlLTU3M2YxN2QyYWVmMy8xL3RNMldzbjZJUTFCTHRiMVZ3 eW5zQXR1ZkRfMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ3sMA0EAgACMAcDBQMqD06AMA0GCSqGSIb3 DQEBCwUAA4IBAQCSqP8ktwhUGjI0yFGLTmRt6hpyATkAcRTzuIyY+XdvaUy6RKyR bR5Hn3DERCCxF6sQ8pVFCcCDsJWEcIN0HDcYgO8cvlsxOSk/WNiaYxnlrSybEJf1 +idTshlSlyuMeo7tiHrvD2HmqPhUUP7+prAlqDFDjqa/D0zKMRMz1uhjLc4UGONz lNEejDM9fdeuqGd6BCVK1G6nZq/jgvkxSKmPWFqLN6bf4JmVO2cBqQagXLZMMqh3 Sh4ObfRc8ihJKQFyUMqAwa201OpZN0gvs/FVoLZQ/TalGE9j3RibV4jzlkvz1HzC bT0JAl5Bu0NoedQMpcOmYpCsmQcPlzbBFMjr -----END CERTIFICATE-----Generated at Mon Jan 26 17:48:13 2026 by rpki-client