This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer File: v1M926H4p23i70lx_NUvlEHOCYk.cer (raw, json) Hash identifier: KhxdsvCVdASO64M66x5Laa2aqEFc8aAFY3u/QIVK/Jw= Subject key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E14710851EF416C1841C05FDE3503 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.31.67.0/24 IP: 92.255.73.0 -- 92.255.75.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:14:71:08:51:ef:41:6c:18:41:c0:5f:de:35:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:64:54:7f:ca:52:42:57:3e:ee:d0:6d:c7: c6:bb:97:40:50:17:c9:fe:a6:82:9a:7f:07:85:02: 27:be:f9:e1:fc:d5:26:ca:28:64:e7:b5:4d:43:7e: fe:85:6c:96:bf:1c:6a:d4:55:dd:be:74:9e:4b:71: 32:55:7c:d8:37:14:56:c6:c4:32:66:86:07:4c:43: 69:ea:88:88:2e:6c:11:ce:0b:bd:bb:e0:e1:e0:1f: 30:d7:73:09:7a:c6:3b:dd:64:e8:3d:ce:bc:db:b1: dc:6e:d1:42:83:d3:25:8a:76:fe:0b:c2:77:2a:52: dd:7a:85:24:01:11:5a:37:f4:89:6e:08:71:3d:18: bd:c4:6b:d9:fc:4d:19:53:6f:3e:89:08:eb:f6:62: b5:42:64:fd:de:8d:77:ad:a1:74:b9:12:35:3f:a0: 03:37:1b:30:ce:5e:c1:b8:02:d0:f9:d9:e2:c4:cc: 8b:4c:3a:88:4a:e3:50:07:d6:88:6b:b6:68:8a:74: 1f:e8:8d:17:1a:7b:91:db:74:e0:e9:73:ab:63:c8: 9c:2a:72:84:cd:0d:b7:6b:0b:df:9e:ad:50:d1:75: 6d:ae:a8:2e:30:46:3f:95:9a:5d:f7:8d:9d:ff:80: 28:3c:ba:ff:e9:66:0e:a9:b9:cc:6c:63:8c:44:47: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.67.0/24 92.255.73.0-92.255.75.255 Signature Algorithm: sha256WithRSAEncryption 61:8a:db:80:e5:fd:84:b4:90:49:9e:f4:ce:ad:a7:b8:5e:28: da:aa:3e:d8:ff:65:20:52:fc:44:10:34:62:84:48:93:71:8d: 03:b1:56:aa:45:66:47:11:af:6a:0a:57:de:54:37:c5:bb:55: 5f:e8:d1:5e:75:bd:30:2c:62:4b:9e:2a:92:12:74:2c:a0:54: 67:90:f6:8c:b4:55:dd:51:c9:1d:0e:4f:e0:f1:6c:cf:8a:f6: 92:94:c4:ee:97:55:98:d5:87:57:ef:da:0d:e5:ae:5d:e4:90: 4c:bd:f0:5a:9d:31:b3:f6:d6:f3:9a:53:83:d8:75:04:f9:7b: 62:36:b8:5a:97:9e:85:81:2b:24:98:99:98:b2:35:8a:88:7c: 23:e0:a8:46:65:8a:3d:8f:63:32:08:d8:26:5f:fc:66:fd:5b: fb:ed:86:f8:ff:3f:86:48:fc:0c:ee:97:5d:88:f6:fe:c0:08: ae:27:09:7d:48:7d:2f:27:bb:dd:c4:68:f8:35:e6:5d:97:e3: 88:d3:50:04:06:53:8a:f4:57:a9:71:49:6d:3e:da:47:71:48: 82:13:01:a2:5f:59:a8:99:23:16:54:b4:ed:e2:f6:fe:33:37: 0e:99:44:da:a2:a1:10:f7:d2:71:2a:90:f1:6d:6d:3a:82:d2: d7:33:08:ec -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt5fhRxCFHvQWwYQcBf3jUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjUzM2RkYmExZjhhNzZkZTJlZjQ5NzFmY2Q1MmY5NDQxY2UwOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUVkVH/KUkJXPu7QbcfGu5dAUBfJ /qaCmn8HhQInvvnh/NUmyihk57VNQ37+hWyWvxxq1FXdvnSeS3EyVXzYNxRWxsQy ZoYHTENp6oiILmwRzgu9u+Dh4B8w13MJesY73WToPc6827HcbtFCg9Mlinb+C8J3 KlLdeoUkARFaN/SJbghxPRi9xGvZ/E0ZU28+iQjr9mK1QmT93o13raF0uRI1P6AD Nxswzl7BuALQ+dnixMyLTDqISuNQB9aIa7ZoinQf6I0XGnuR23Tg6XOrY8icKnKE zQ23awvfnq1Q0XVtrqguMEY/lZpd942d/4AoPLr/6WYOqbnMbGOMREezeQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFL9TPduh+Kdt4u9JcfzVL5RBzgmJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzczZDlh NS0xYzRmLTQ0ZTAtYTk1OC0xNjcxOTFhMTE3ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvNzNkOWE1 LTFjNGYtNDRlMC1hOTU4LTE2NzE5MWExMTdlZS8xL3YxTTkyNkg0cDIzaTcwbHhf TlV2bEVIT0NZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUAwQALh9DMAwDBABc/0kDBAJc/0gwDQYJKoZIhvcN AQELBQADggEBAGGK24Dl/YS0kEme9M6tp7heKNqqPtj/ZSBS/EQQNGKESJNxjQOx VqpFZkcRr2oKV95UN8W7VV/o0V51vTAsYkueKpISdCygVGeQ9oy0Vd1RyR0OT+Dx bM+K9pKUxO6XVZjVh1fv2g3lrl3kkEy98FqdMbP21vOaU4PYdQT5e2I2uFqXnoWB KySYmZiyNYqIfCPgqEZlij2PYzII2CZf/Gb9W/vthvj/P4ZI/Azul12I9v7ACK4n CX1IfS8nu93EaPg15l2X44jTUAQGU4r0V6lxSW0+2kdxSIITAaJfWaiZIxZUtO3i 9v4zNw6ZRNqioRD30nEqkPFtbTqC0tczCOw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:10 2026 by rpki-client