This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer File: qMbzkzUMd1mMEhrNPJL3BIV274k.cer (raw, json) Hash identifier: 2wvKXoLQzcQGgRzeLI5ZFpn9k0BBfRv5FerYRc7DHvs= Subject key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A6D3AD99A01C25C0321E9393E82E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49561 AS: 52119 AS: 57836 AS: 60386 AS: 198088 IP: 31.134.112.0/21 IP: 91.222.152.0/22 IP: 91.231.160.0/24 IP: 91.235.224.0/22 IP: 91.237.107.0/24 IP: 176.121.3.0/24 IP: 193.169.126.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a6:d3:ad:99:a0:1c:25:c0:32:1e:93:93:e8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8c6f393350c77598c121acd3c92f7048576ef89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:9f:f5:30:04:64:97:06:e8:7c:20:16:32: d8:0c:c6:05:92:ed:4f:0f:32:48:79:0f:2b:8b:3f: b0:3f:bd:54:39:5c:c4:a8:56:de:e7:0f:c1:3b:e2: 81:4f:89:b5:f6:05:bc:20:44:9d:1d:63:d6:47:8d: 40:f7:66:11:c8:58:61:fe:16:f7:09:9b:50:8f:e8: 10:1a:d9:aa:2f:4e:7b:73:ae:92:b4:bc:28:ad:ce: 48:ec:a4:31:cd:0c:ec:fb:f1:bd:55:4f:df:3a:65: ec:57:8d:8e:ac:3d:46:ee:b5:30:b7:a8:3f:ea:5c: 15:97:6a:17:a4:d2:27:4b:9d:8c:b2:db:b3:fb:5f: 9a:68:fa:4b:86:84:f7:cd:39:68:23:68:7f:0d:9a: d0:94:9a:49:aa:d1:b1:bc:be:d8:b6:b0:44:a2:c9: 8c:19:dc:b9:99:41:80:56:0e:b0:0d:8e:dc:61:90: 84:d1:2e:b9:db:cf:d4:12:83:5d:cd:87:dd:10:40: 8a:7a:d1:b3:32:38:0b:4b:24:a0:32:c6:a1:d8:42: 6b:17:e3:56:65:35:68:e7:36:2c:b3:27:97:43:66: bb:45:5c:bc:34:7f:26:65:f0:e5:77:ff:7a:12:2e: b4:94:11:9f:0e:24:09:e9:2a:72:c2:59:2a:96:02: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.112.0/21 91.222.152.0/22 91.231.160.0/24 91.235.224.0/22 91.237.107.0/24 176.121.3.0/24 193.169.126.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49561 52119 57836 60386 198088 Signature Algorithm: sha256WithRSAEncryption 70:3f:2b:63:d4:a6:6b:18:0a:fd:fd:1f:f5:8b:f8:69:f2:f9: 2c:95:c8:b6:79:0c:b6:b6:70:27:f4:7e:d0:9e:02:4b:07:35: 73:6e:05:6b:63:52:30:e7:85:e2:66:0e:9a:12:05:07:bf:4c: af:66:45:2c:92:7c:2b:6a:78:99:0a:aa:57:c7:ac:92:29:47: ba:44:d6:cc:26:cb:e1:fd:4c:12:7e:46:56:6e:3d:76:28:cb: 7f:60:b0:eb:d4:54:60:11:9d:46:ed:c2:52:1b:f8:4f:dc:61: 2d:56:95:ff:60:ed:af:f1:90:d5:85:c3:f3:ef:d7:7f:aa:1d: ee:7b:e9:24:a8:49:66:71:b8:dc:49:37:e7:c1:0f:72:b6:1b: a3:ce:cf:f3:d5:76:81:f5:82:04:6d:0b:9a:77:cd:2b:1e:da: d6:60:d9:8b:9b:ac:85:47:97:a9:65:40:bd:db:50:cb:1e:b8: d8:4a:5a:92:73:bd:6b:2d:e3:8c:66:af:1f:28:7a:a5:9e:eb: 69:ba:4d:0d:0e:f2:03:fa:3d:66:bb:e7:28:46:bf:76:e4:81: 87:cc:66:f6:79:34:34:31:17:aa:9e:71:67:70:3f:6f:8c:65: b2:fe:4d:48:11:3e:6f:a8:b4:e5:69:a6:11:ec:d6:0a:bd:f0: 74:05:9b:c0 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt3xqbTrZmgHCXAMh6Tk+guMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGM2ZjM5MzM1MGM3NzU5OGMxMjFhY2QzYzkyZjcwNDg1NzZlZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvyf9TAEZJcG6HwgFjLYDMYFku1P DzJIeQ8riz+wP71UOVzEqFbe5w/BO+KBT4m19gW8IESdHWPWR41A92YRyFhh/hb3 CZtQj+gQGtmqL057c66StLworc5I7KQxzQzs+/G9VU/fOmXsV42OrD1G7rUwt6g/ 6lwVl2oXpNInS52Mstuz+1+aaPpLhoT3zTloI2h/DZrQlJpJqtGxvL7YtrBEosmM Gdy5mUGAVg6wDY7cYZCE0S6528/UEoNdzYfdEECKetGzMjgLSySgMsah2EJrF+NW ZTVo5zYssyeXQ2a7RVy8NH8mZfDld/96Ei60lBGfDiQJ6SpywlkqlgK4VQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFKjG85M1DHdZjBIazTyS9wSFdu+JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzcwOWUw Ny00N2Q1LTQ3MjAtYjc3Ny1jNmJjYTAxYjJmZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvNzA5ZTA3 LTQ3ZDUtNDcyMC1iNzc3LWM2YmNhMDFiMmZmOC8xL3FNYnprelVNZDFtTUVock5Q SkwzQklWMjc0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUF BwEHAQH/BDQwMjAwBAIAATAqAwQDH4ZwAwQCW96YAwQAW+egAwQCW+vgAwQAW+1r AwQAsHkDAwQBwal+MC4GCCsGAQUFBwEIAQH/BB8wHaAbMBkCAwDBmQIDAMuXAgMA 4ewCAwDr4gIDAwXIMA0GCSqGSIb3DQEBCwUAA4IBAQBwPytj1KZrGAr9/R/1i/hp 8vkslci2eQy2tnAn9H7QngJLBzVzbgVrY1Iw54XiZg6aEgUHv0yvZkUsknwraniZ CqpXx6ySKUe6RNbMJsvh/UwSfkZWbj12KMt/YLDr1FRgEZ1G7cJSG/hP3GEtVpX/ YO2v8ZDVhcPz79d/qh3ue+kkqElmcbjcSTfnwQ9ythujzs/z1XaB9YIEbQuad80r HtrWYNmLm6yFR5epZUC921DLHrjYSlqSc71rLeOMZq8fKHqlnutpuk0NDvID+j1m u+coRr925IGHzGb2eTQ0MReqnnFncD9vjGWy/k1IET5vqLTlaaYR7NYKvfB0BZvA -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:20 2026 by rpki-client