This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer File: rgMnvx57e_vdLyFMjvYpqink1m8.cer (raw, json) Hash identifier: kPe1phmciptQ7X3I1JoyYISRdNnqFdP/oTxUDtPlHNU= Subject key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6FFB34347AC8ADB52F0AC607898BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50402 IP: 195.47.214.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ff:b3:43:47:ac:8a:db:52:f0:ac:60:78:98:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:51:81:1d:65:fa:23:5a:85:21:4b:3f:06: 21:77:59:cf:8c:4a:ec:3f:de:19:b2:1e:3b:a6:a7: f1:58:5a:9c:67:45:e0:15:69:44:6c:ec:2f:19:47: 05:d5:df:b3:d2:f2:90:bc:a7:55:85:c8:71:03:e5: 13:1a:56:46:58:a4:36:a5:14:32:c8:d7:80:80:15: 1c:91:96:36:63:76:ae:48:3c:b9:a2:24:cd:bf:93: 1e:39:a4:4c:3f:c4:fd:d9:79:4d:57:14:99:59:bf: fb:40:8c:40:07:ff:e9:1b:9f:e3:90:3d:02:9f:6b: 88:c5:fd:21:cc:c3:ca:aa:7d:15:9e:41:58:8d:20: 57:5b:20:5d:1a:00:be:e4:ce:35:3a:47:f1:a3:1d: 7a:ef:29:82:0a:de:97:e0:c9:a8:d7:c1:d1:6b:1b: 7a:44:98:66:a9:f2:2b:b6:00:d8:82:a8:c8:7c:73: 1e:d0:0c:85:eb:b8:fd:21:7f:16:84:fb:69:3b:65: a3:55:d7:2a:53:c6:d0:63:6b:31:68:ee:f1:31:20: be:22:5f:5b:e3:3c:a8:0c:d8:54:b3:13:50:02:87: c3:1a:a7:ea:d2:8d:7d:05:a1:c3:d9:8b:e8:61:08: 5f:91:fa:93:54:f3:ff:94:e4:ca:3a:eb:f5:f7:da: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.214.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50402 Signature Algorithm: sha256WithRSAEncryption 29:a7:d6:ba:d1:98:26:90:37:32:b9:99:0e:23:ae:39:1c:52: ea:c4:5d:01:2b:8b:ba:37:d1:0c:cf:72:01:38:1c:fd:60:6f: 9b:d8:66:d0:f5:5a:42:58:b7:77:88:db:45:4f:72:e2:2f:92: a7:33:26:07:48:16:f2:0a:63:ff:18:fa:5d:b9:da:15:50:cf: e8:96:0d:8e:24:d6:14:07:63:54:87:aa:24:6d:7d:d7:ce:5e: ad:c2:ec:f9:31:30:ee:8f:95:27:ae:e8:a4:8c:16:01:f6:d4: d6:f6:17:ef:5b:0f:e0:cb:52:6f:3d:8f:51:d6:19:6c:80:15: bb:bc:4c:a5:3d:49:3e:09:6d:66:b6:c4:0c:5b:54:36:a8:f0: 7c:33:87:7f:e9:dd:93:20:30:8c:2a:99:ee:9a:9e:6e:eb:f1: e6:f1:42:9d:ff:13:c9:16:de:88:ce:76:43:3d:04:d0:f0:c0: 9d:a0:a3:7b:c4:8c:39:2a:1a:d2:ac:9b:02:94:5b:63:b2:98: 3e:e9:5c:3f:99:6e:0e:cd:b9:7a:4f:c0:54:56:37:4f:de:de: 1b:dc:61:e2:dc:7d:bf:12:32:04:e5:cc:4b:c2:cf:d0:5d:c6: 85:91:be:eb:c1:c5:04:3c:89:99:73:e3:a0:7c:42:a3:b4:01: 50:f3:71:3a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pv+zQ0esittS8KxgeJi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTAzMjdiZjFlN2I3YmZiZGQyZjIxNGM4ZWY2MjlhYTI5ZTRkNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T9RgR1l+iNahSFLPwYhd1nPjErs P94Zsh47pqfxWFqcZ0XgFWlEbOwvGUcF1d+z0vKQvKdVhchxA+UTGlZGWKQ2pRQy yNeAgBUckZY2Y3auSDy5oiTNv5MeOaRMP8T92XlNVxSZWb/7QIxAB//pG5/jkD0C n2uIxf0hzMPKqn0VnkFYjSBXWyBdGgC+5M41Okfxox167ymCCt6X4Mmo18HRaxt6 RJhmqfIrtgDYgqjIfHMe0AyF67j9IX8WhPtpO2WjVdcqU8bQY2sxaO7xMSC+Il9b 4zyoDNhUsxNQAofDGqfq0o19BaHD2YvoYQhfkfqTVPP/lOTKOuv199rgIQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK4DJ78ee3v73S8hTI72Kaop5NZvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2YwOTBi ZS00MjJiLTRmMmEtODY0Zi05ZmNhMjlkZWNkYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZjA5MGJl LTQyMmItNGYyYS04NjRmLTlmY2EyOWRlY2RhOC8xL3JnTW52eDU3ZV92ZEx5Rk1q dllwcWluazFtOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwy/WMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDE4jANBgkqhkiG9w0BAQsFAAOCAQEAKafWutGYJpA3MrmZDiOuORxS6sRdASuL ujfRDM9yATgc/WBvm9hm0PVaQli3d4jbRU9y4i+SpzMmB0gW8gpj/xj6XbnaFVDP 6JYNjiTWFAdjVIeqJG19185ercLs+TEw7o+VJ67opIwWAfbU1vYX71sP4MtSbz2P UdYZbIAVu7xMpT1JPgltZrbEDFtUNqjwfDOHf+ndkyAwjCqZ7pqebuvx5vFCnf8T yRbeiM52Qz0E0PDAnaCje8SMOSoa0qybApRbY7KYPulcP5luDs25ek/AVFY3T97e G9xh4tx9vxIyBOXMS8LP0F3GhZG+68HFBDyJmXPjoHxCo7QBUPNxOg== -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:05 2026 by rpki-client