This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer File: mur6lsnVY-ZQulkv-wbizutqCFk.cer (raw, json) Hash identifier: OpYaete3pIRfSSZPR6fDYOG+FBgM0rqWcFaH5DsU32g= Subject key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C74A0E095111F68387CEA7CE178337 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44951 IP: 195.230.114.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4a:0e:09:51:11:f6:83:87:ce:a7:ce:17:83:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:f7:24:e7:46:df:18:6a:c7:d1:9b:8f:0e: 45:ab:b7:2e:a0:86:2f:ea:80:2f:75:e4:1b:71:95: d2:00:3b:16:a5:59:7d:46:6b:8b:42:c2:bb:53:28: 1a:bd:d7:32:ab:50:4b:a4:61:a4:ac:37:16:83:b0: 13:f4:8b:60:d9:92:ee:6a:02:3d:9b:52:04:06:99: 33:d6:e0:1c:15:00:3f:80:90:25:09:4c:14:ae:56: 6d:69:7e:ee:eb:3f:7e:33:9f:c9:52:88:4e:26:31: 53:93:d3:a3:07:1f:9f:f4:2b:8b:82:2f:17:b8:0b: da:81:54:25:71:81:02:b8:c7:2b:84:c0:f4:7e:8c: a4:bf:18:11:29:0e:61:87:6e:6a:0d:5e:bd:d9:97: f3:6e:78:2e:69:77:2c:c7:e2:35:76:e1:14:3a:bc: 71:58:c1:1b:1b:af:dd:40:96:65:2a:ba:96:c7:6f: 03:08:4b:9e:f9:71:2c:5c:1d:09:a8:fb:b7:a5:4a: 9a:1e:13:3c:76:07:e6:f2:e2:1f:7c:dc:14:b8:d1: 2a:37:ec:be:b6:af:93:f6:b0:cd:e8:ce:96:0f:93: 9a:63:76:ae:c0:f9:b8:31:c4:8e:e9:f2:15:bb:72: e3:da:77:f1:f7:92:3e:5a:0c:72:6d:11:23:b0:a1: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.230.114.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44951 Signature Algorithm: sha256WithRSAEncryption 3a:d5:a2:52:a6:70:f2:d5:52:45:bc:bc:de:28:51:a1:41:0e: 64:ce:64:e5:d6:bf:d7:e5:cf:51:e0:33:a8:93:4f:08:38:c7: 08:2d:88:93:f9:3d:34:49:c4:db:d6:eb:40:bb:c1:93:44:d6: a2:b1:c5:b1:79:26:a5:85:24:ae:ed:47:f2:56:ca:7b:18:14: 35:ef:64:d3:cb:3c:8b:06:d8:ca:7a:e6:18:39:55:a7:c9:5b: 08:93:10:3a:a4:a2:97:c4:59:d7:04:97:19:a5:af:75:51:08: 6c:60:10:0a:fa:ea:a9:8b:ed:32:bc:58:0d:aa:3f:2e:50:ef: 7a:fb:0e:a3:dd:60:da:22:09:92:6b:86:65:33:d1:06:bd:b5: a7:c4:fb:ab:b3:02:52:19:4b:ed:7e:7c:87:37:92:fa:77:70: a9:f2:f7:57:f6:ea:b3:f9:22:72:52:68:a1:3c:9f:ad:73:80: 0d:55:93:9f:9c:43:cf:5c:dc:b8:0a:32:17:aa:10:ab:ac:82: d4:58:90:60:5f:7b:3e:f8:cf:35:4f:b1:3c:05:32:e3:a5:a5: 94:74:09:f1:d8:b4:ea:28:7c:f4:97:30:b8:bc:5b:44:d8:c0: 96:0f:92:c1:21:aa:b9:7d:80:61:92:43:1c:86:13:32:da:7e: f5:e7:86:5e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3x0oOCVER9oOHzqfOF4M3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWVhZmE5NmM5ZDU2M2U2NTBiYTU5MmZmYjA2ZTJjZWViNmEwODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0173JOdG3xhqx9Gbjw5Fq7cuoIYv 6oAvdeQbcZXSADsWpVl9RmuLQsK7Uygavdcyq1BLpGGkrDcWg7AT9Itg2ZLuagI9 m1IEBpkz1uAcFQA/gJAlCUwUrlZtaX7u6z9+M5/JUohOJjFTk9OjBx+f9CuLgi8X uAvagVQlcYECuMcrhMD0foykvxgRKQ5hh25qDV692ZfzbnguaXcsx+I1duEUOrxx WMEbG6/dQJZlKrqWx28DCEue+XEsXB0JqPu3pUqaHhM8dgfm8uIffNwUuNEqN+y+ tq+T9rDN6M6WD5OaY3auwPm4McSO6fIVu3Lj2nfx95I+WgxybREjsKGxswIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJrq+pbJ1WPmULpZL/sG4s7raghZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzQ3Mjc1 ZC01ZmE3LTRiYjItOTllYi0xZjAwNzM3Y2IyYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNDcyNzVk LTVmYTctNGJiMi05OWViLTFmMDA3MzdjYjJhMi8xL211cjZsc25WWS1aUXVsa3Yt d2JpenV0cUNGay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw+ZyMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCvlzANBgkqhkiG9w0BAQsFAAOCAQEAOtWiUqZw8tVSRby83ihRoUEOZM5k5da/ 1+XPUeAzqJNPCDjHCC2Ik/k9NEnE29brQLvBk0TWorHFsXkmpYUkru1H8lbKexgU Ne9k08s8iwbYynrmGDlVp8lbCJMQOqSil8RZ1wSXGaWvdVEIbGAQCvrqqYvtMrxY Dao/LlDvevsOo91g2iIJkmuGZTPRBr21p8T7q7MCUhlL7X58hzeS+ndwqfL3V/bq s/kiclJooTyfrXOADVWTn5xDz1zcuAoyF6oQq6yC1FiQYF97PvjPNU+xPAUy46Wl lHQJ8di06ih89JcwuLxbRNjAlg+SwSGquX2AYZJDHIYTMtp+9eeGXg== -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:08 2026 by rpki-client