This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer File: rmRaywIXx0oP004XpT297lbwEeU.cer (raw, json) Hash identifier: OTy1iOWJh+ezdZmwrDRVbmARVw/+OQSFks684khacqU= Subject key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D81861BB67C547077066ADB11C9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208887 IP: 185.242.192.0/22 IP: 2a0c:e380::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d8:18:61:bb:67:c5:47:07:70:66:ad:b1:1c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:9b:71:cc:8b:0d:b4:61:c4:88:e8:ef:db: a5:d9:14:29:8d:e2:fb:8d:11:e2:9b:6e:65:23:f9: 52:ad:c4:16:48:61:17:b1:de:a0:87:99:40:f5:a4: 27:37:f7:a8:9b:1d:d9:88:42:6a:b0:ec:ca:2f:84: ee:4f:c8:d6:bd:2f:db:5f:93:d6:7a:42:12:52:3c: d1:06:dc:81:76:ed:02:c3:b1:b7:b0:dd:33:d2:a1: 93:12:cb:5a:df:86:4d:73:69:79:3b:b9:34:37:72: d3:55:b1:4b:7d:12:a3:d6:ca:aa:b8:15:01:65:65: 32:a3:4e:df:72:77:75:d3:94:ae:d8:a4:7b:35:dd: 9f:64:18:42:91:53:f9:0d:71:82:a2:dd:93:31:f5: d8:f9:50:3c:62:43:d0:9e:b6:31:c9:15:56:55:3e: 95:c6:e6:84:82:05:5a:9f:a5:8e:0b:75:04:c9:75: 98:7b:13:13:01:79:ba:30:66:aa:68:8e:e3:d6:9f: 33:75:8f:cb:dc:72:41:ee:1b:70:a7:f0:ff:3d:09: fb:b6:9d:31:3e:e1:a6:80:6c:a7:d8:84:c1:14:d7: 27:ab:c3:fb:ba:5c:5a:61:85:d4:7a:24:49:af:af: 34:c3:e3:9c:0c:d2:c3:90:db:5b:8e:2a:14:50:ad: 37:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.192.0/22 IPv6: 2a0c:e380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208887 Signature Algorithm: sha256WithRSAEncryption 78:77:26:3a:5b:da:56:83:dd:bf:14:d4:ec:a4:e8:f5:c3:33: 1a:7d:6f:8a:d7:77:7b:95:15:0b:9a:f2:49:66:ab:56:e8:05: a4:70:9c:84:24:65:f5:c2:11:e4:a6:7d:58:5e:fd:88:d1:58: 60:08:8c:ec:07:ce:0d:82:0c:76:df:dc:8c:b6:8f:98:85:14: 82:b2:39:2d:63:c0:c7:da:f0:6f:a5:92:ca:fb:f4:62:ec:be: 83:ec:b4:e0:9d:5e:37:7e:14:96:e8:4c:d1:b2:08:b8:d8:50: 6b:e4:c4:2e:3a:a3:40:87:77:14:6e:0d:f4:a0:16:73:f1:6d: 68:61:49:fa:ce:b3:57:9f:88:79:a3:a3:64:48:8e:73:1e:d5: c3:39:5c:5a:87:ab:57:8f:9c:9f:11:b5:0b:8d:69:29:d3:61: a5:64:14:7a:d7:23:ac:b7:0f:ce:d2:6a:d1:d7:01:76:1c:98: 25:39:fe:1d:ba:2e:7a:3c:cc:3b:dc:65:33:ef:59:df:98:77: 40:1f:92:83:44:b6:c3:79:1e:bd:9f:d0:63:fa:8b:61:5e:f6: 67:3c:f9:dd:13:81:91:5e:9a:7c:54:69:38:70:01:87:21:4c: 57:f6:66:14:61:d9:b7:0b:c6:45:7e:d0:c5:77:62:cf:cd:35: 1b:18:f3:03 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FdgYYbtnxUcHcGatsRydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTY0NWFjYjAyMTdjNzRhMGZkMzRlMTdhNTNkYmRlZTU2ZjAxMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTqbccyLDbRhxIjo79ul2RQpjeL7 jRHim25lI/lSrcQWSGEXsd6gh5lA9aQnN/eomx3ZiEJqsOzKL4TuT8jWvS/bX5PW ekISUjzRBtyBdu0Cw7G3sN0z0qGTEsta34ZNc2l5O7k0N3LTVbFLfRKj1sqquBUB ZWUyo07fcnd105Su2KR7Nd2fZBhCkVP5DXGCot2TMfXY+VA8YkPQnrYxyRVWVT6V xuaEggVan6WOC3UEyXWYexMTAXm6MGaqaI7j1p8zdY/L3HJB7htwp/D/PQn7tp0x PuGmgGyn2ITBFNcnq8P7ulxaYYXUeiRJr680w+OcDNLDkNtbjioUUK03oQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK5kWssCF8dKD9NOF6U9ve5W8BHlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzBlZDMz YS0xZjFkLTQyODEtYWIzOS00MDg5MDEzMGRkMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMGVkMzNh LTFmMWQtNDI4MS1hYjM5LTQwODkwMTMwZGQxOC8xL3JtUmF5d0lYeDBvUDAwNFhw VDI5N2xid0VlVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufLAMA0EAgACMAcDBQAqDOOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMv9zANBgkqhkiG9w0BAQsFAAOCAQEAeHcmOlvaVoPd vxTU7KTo9cMzGn1vitd3e5UVC5rySWarVugFpHCchCRl9cIR5KZ9WF79iNFYYAiM 7AfODYIMdt/cjLaPmIUUgrI5LWPAx9rwb6WSyvv0Yuy+g+y04J1eN34UluhM0bII uNhQa+TELjqjQId3FG4N9KAWc/FtaGFJ+s6zV5+IeaOjZEiOcx7VwzlcWoerV4+c nxG1C41pKdNhpWQUetcjrLcPztJq0dcBdhyYJTn+HbouejzMO9xlM+9Z35h3QB+S g0S2w3kevZ/QY/qLYV72Zzz53ROBkV6afFRpOHABhyFMV/ZmFGHZtwvGRX7QxXdi z801GxjzAw== -----END CERTIFICATE-----Generated at Sat Jan 3 02:32:01 2026 by rpki-client