This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer File: 1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer (raw, json) Hash identifier: z6XiAz7AXIAVXlkxnJCCV3IRTI8B3AVzgz8WreDvDqE= Subject key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB534F8D8F9BBDED73B1C7C8D827F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft caRepository: rsync://rpki.multacom.com/repo/MCOMCA/1/ Notify URL: https://rpki.multacom.com/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.77.224.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:53:4f:8d:8f:9b:bd:ed:73:b1:c7:c8:d8:27:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f827056c07ea5582db063b6af62f8f3076237cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:36:f1:d8:95:d3:a4:17:6b:e5:cb:ae:a3: 28:4c:ed:ee:fe:a6:5f:7a:6c:42:71:06:64:9b:a5: 2d:80:cd:7e:f6:85:ce:34:83:be:75:31:73:ed:24: 07:8a:fe:b3:85:0c:47:2f:48:0b:35:34:55:0b:7a: ee:b7:29:f4:95:b1:12:6b:ea:e7:d8:d7:f3:f7:d3: d6:0b:47:71:3e:d0:52:74:62:57:c4:c2:f2:bf:97: 7a:e5:d7:ee:2f:aa:e5:12:41:0f:eb:c1:e0:36:97: 54:07:e7:26:4e:ae:82:4b:62:f5:27:ed:6a:6a:f8: 68:a2:61:c3:02:71:f9:97:58:9b:bc:66:ee:91:18: d6:d7:33:67:b7:c5:6c:eb:86:14:12:6e:83:79:dd: 55:a2:e5:e7:5b:02:a7:ed:cc:a9:d4:57:e7:b3:5b: 8d:40:71:f6:80:e2:e5:52:e6:2d:08:8b:4c:5d:3b: 79:32:d9:9a:9e:5e:09:f7:c9:36:35:82:55:da:d6: c2:cd:05:f9:fe:33:c3:d3:cf:dd:25:e0:55:8a:8d: 4f:c8:6e:de:87:48:08:54:ab:6b:1b:0b:74:c0:e1: 19:d4:51:5e:5c:ac:9b:fa:65:1d:dc:23:8f:11:5f: 4a:00:b4:a3:a7:78:b9:2e:b9:df:2d:40:24:0e:f4: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/ RPKI Manifest - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft RPKI Notify - URI:https://rpki.multacom.com/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.224.0/22 Signature Algorithm: sha256WithRSAEncryption 11:26:be:45:12:df:d8:54:c4:e0:ea:d9:36:2d:48:e8:fc:01: 7e:f0:72:ca:1d:9a:48:45:b4:b2:02:6e:8c:ac:59:02:53:4d: 48:ef:62:96:e0:59:d0:8a:48:89:5f:b1:1c:ce:44:09:8f:7c: fa:94:4c:c2:f2:03:e2:3a:06:b2:d3:03:10:f3:6c:67:6c:e3: 4f:fb:4f:78:c3:97:43:6d:5a:d6:c0:f8:d8:ad:db:04:10:12: 5b:90:fd:15:25:6a:4a:27:e2:cd:d5:3f:17:4f:09:0c:e2:98: 5c:ac:5c:6c:95:c6:6e:37:89:82:fd:e2:7e:27:21:8b:a3:62: 64:33:81:45:8b:7b:66:d6:12:b9:92:53:af:57:5b:4e:bd:05: 5c:7f:5b:43:f7:8f:b1:fa:3b:ea:93:4c:29:2a:8d:82:d8:53: 75:51:59:82:82:4b:12:c4:54:3f:1a:f8:2b:45:dc:9e:5c:f8: 4d:e8:3d:0a:71:3f:b1:56:fd:da:57:af:6c:35:08:9e:7e:a2: dc:cb:6a:e9:fd:01:7f:db:67:56:92:1d:b6:c2:e0:31:91:bf: 7b:65:6f:40:98:90:57:f7:71:02:e1:75:e9:49:dd:d0:6e:ac: d6:59:a5:e4:4c:a7:21:74:d2:44:0a:1d:31:2b:c1:54:55:ac: d1:61:fb:2d -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt261NPjY+bve1zscfI2Cf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODI3MDU2YzA3ZWE1NTgyZGIwNjNiNmFmNjJmOGYzMDc2MjM3Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw828diV06QXa+XLrqMoTO3u/qZf emxCcQZkm6UtgM1+9oXONIO+dTFz7SQHiv6zhQxHL0gLNTRVC3rutyn0lbESa+rn 2Nfz99PWC0dxPtBSdGJXxMLyv5d65dfuL6rlEkEP68HgNpdUB+cmTq6CS2L1J+1q avhoomHDAnH5l1ibvGbukRjW1zNnt8Vs64YUEm6Ded1VouXnWwKn7cyp1Ffns1uN QHH2gOLlUuYtCItMXTt5Mtmanl4J98k2NYJV2tbCzQX5/jPD08/dJeBVio1PyG7e h0gIVKtrGwt0wOEZ1FFeXKyb+mUd3COPEV9KALSjp3i5LrnfLUAkDvQ0EwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFPgnBWwH6lWC2wY7avYvjzB2I3zXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgeUGCCsGAQUFBwELBIHYMIHVMDQGCCsGAQUFBzAFhihyc3lu YzovL3Jwa2kubXVsdGFjb20uY29tL3JlcG8vTUNPTUNBLzEvMGAGCCsGAQUFBzAK hlRyc3luYzovL3Jwa2kubXVsdGFjb20uY29tL3JlcG8vTUNPTUNBLzEvRjgyNzA1 NkMwN0VBNTU4MkRCMDYzQjZBRjYyRjhGMzA3NjIzN0NENy5tZnQwOwYIKwYBBQUH MA2GL2h0dHBzOi8vcnBraS5tdWx0YWNvbS5jb20vcnJkcC9ub3RpZmljYXRpb24u eG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCuU3gMA0GCSqGSIb3DQEBCwUAA4IBAQARJr5FEt/YVMTg6tk2LUjo/AF+ 8HLKHZpIRbSyAm6MrFkCU01I72KW4FnQikiJX7EczkQJj3z6lEzC8gPiOgay0wMQ 82xnbONP+094w5dDbVrWwPjYrdsEEBJbkP0VJWpKJ+LN1T8XTwkM4phcrFxslcZu N4mC/eJ+JyGLo2JkM4FFi3tm1hK5klOvV1tOvQVcf1tD94+x+jvqk0wpKo2C2FN1 UVmCgksSxFQ/GvgrRdyeXPhN6D0KcT+xVv3aV69sNQiefqLcy2rp/QF/22dWkh22 wuAxkb97ZW9AmJBX93EC4XXpSd3QbqzWWaXkTKchdNJECh0xK8FUVazRYfst -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:49 2026 by rpki-client