This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer File: 99MudSlBh9Rujq4Pj-crX9er-IY.cer (raw, json) Hash identifier: Lx8HqCA9CogPK2+RYyFBcS5pSq/Et1wUn0/zr6MjGbo= Subject key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78343B0D51A44E6BA6BD566C450477A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6895 AS: 215424 IP: 45.14.76.0/22 IP: 185.79.172.0/22 IP: 193.149.0.0/23 IP: 195.95.153.0/24 IP: 2001:7f8:f::/48 IP: 2a03:5e60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3b:0d:51:a4:4e:6b:a6:bd:56:6c:45:04:77:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:5e:93:84:82:ca:a9:21:30:ed:d9:22:68: 4d:8a:5e:52:d6:52:77:59:ec:2b:c7:85:07:d3:cf: 1a:80:22:0a:6c:df:60:9c:01:59:4f:fe:e7:c3:60: 19:bd:66:f0:1e:37:50:2c:0c:9c:96:b6:75:7f:91: d0:5d:e8:a8:b2:0f:2b:84:14:d5:3f:d0:a6:7b:b8: 26:02:66:a5:24:29:b7:c9:a1:c9:ce:2d:86:16:d9: 8f:51:cb:6f:2a:7b:71:b9:96:d1:6e:e8:9a:a5:4a: 5b:bc:e7:64:f7:42:33:74:d3:78:01:ed:30:de:7c: 78:fa:40:24:41:bf:18:98:71:08:38:4e:8f:c4:38: a7:a2:f7:b2:45:0f:78:c8:48:f4:a3:c6:c2:bf:ed: 90:04:f6:1f:45:a6:18:69:0f:9f:2f:6b:e7:8b:d3: 00:36:14:88:f2:31:25:58:4f:ef:33:db:35:6d:18: de:86:ac:31:c9:32:b8:1f:df:ad:62:a9:4f:80:87: af:cd:6b:86:e5:11:b3:5b:3c:e3:43:53:a1:46:69: c6:16:45:01:05:d4:b6:2b:7b:04:91:1b:0e:b1:75: 7a:a7:47:fe:ab:db:c2:41:dc:ee:84:a1:fc:d4:2f: 0a:4c:b8:4f:63:56:71:09:74:ab:92:fe:35:c8:a9: 90:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.76.0/22 185.79.172.0/22 193.149.0.0/23 195.95.153.0/24 IPv6: 2001:7f8:f::/48 2a03:5e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6895 215424 Signature Algorithm: sha256WithRSAEncryption 71:40:32:0a:ca:a6:ef:83:35:5f:fd:cf:d6:83:44:cf:65:61: 84:13:bf:14:93:f2:72:ff:b8:d0:6e:bd:15:f2:fa:6a:e6:19: 17:1e:c3:f7:c9:d9:81:ca:75:25:da:7c:74:f3:68:af:32:d5: ff:7a:3a:a5:28:c2:b4:26:68:92:59:ea:82:69:32:56:e9:fb: 35:d3:80:56:55:b8:08:4b:9a:e9:ed:f1:ad:63:f0:3a:f3:2e: de:60:b9:79:1b:1f:ff:f9:9a:f9:60:8b:06:d3:35:08:01:1e: 88:80:ff:e0:cf:dc:30:b2:f0:e1:97:f2:f2:eb:45:c5:82:4a: c4:11:09:29:5a:3d:b3:7d:c8:7d:d2:44:75:4e:e9:bd:80:e1: dd:7d:66:c5:cd:23:88:36:06:15:27:42:50:4c:a9:4d:50:67: 87:8f:03:e1:b8:c5:17:78:c1:ab:fa:da:e9:d6:d6:bf:8e:f1: 09:2c:36:5d:77:1f:00:b8:c5:7f:99:08:4f:89:e5:86:8d:3e: ec:09:10:8b:19:41:23:62:a0:7b:33:ed:ca:d8:a6:19:5a:f6: 37:f7:af:8f:3a:9e:9e:8a:27:f6:58:7f:61:36:31:a7:d9:c1: 14:5c:05:be:5f:c9:a6:4d:6e:84:a0:f7:c5:6f:8a:a1:95:b5: 48:f1:6a:65 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt4NDsNUaROa6a9VmxFBHekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2QzMmU3NTI5NDE4N2Q0NmU4ZWFlMGY4ZmU3MmI1ZmQ3YWJmODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeBek4SCyqkhMO3ZImhNil5S1lJ3 Wewrx4UH088agCIKbN9gnAFZT/7nw2AZvWbwHjdQLAyclrZ1f5HQXeiosg8rhBTV P9Cme7gmAmalJCm3yaHJzi2GFtmPUctvKntxuZbRbuiapUpbvOdk90IzdNN4Ae0w 3nx4+kAkQb8YmHEIOE6PxDinoveyRQ94yEj0o8bCv+2QBPYfRaYYaQ+fL2vni9MA NhSI8jElWE/vM9s1bRjehqwxyTK4H9+tYqlPgIevzWuG5RGzWzzjQ1OhRmnGFkUB BdS2K3sEkRsOsXV6p0f+q9vCQdzuhKH81C8KTLhPY1ZxCXSrkv41yKmQ8wIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFPfTLnUpQYfUbo6uD4/nK1/Xq/iGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjL2QwY2M0 MS1jOGYxLTRhNDQtOTFmMC1kMWE0NTk5Y2IwZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvZDBjYzQx LWM4ZjEtNGE0NC05MWYwLWQxYTQ1OTljYjBlNS8xLzk5TXVkU2xCaDlSdWpxNFBq LWNyWDllci1JWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF BwEHAQH/BDowODAeBAIAATAYAwQCLQ5MAwQCuU+sAwQBwZUAAwQAw1+ZMBYEAgAC MBADBwAgAQf4AA8DBQAqA15gMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAhrvAgMD SYAwDQYJKoZIhvcNAQELBQADggEBAHFAMgrKpu+DNV/9z9aDRM9lYYQTvxST8nL/ uNBuvRXy+mrmGRcew/fJ2YHKdSXafHTzaK8y1f96OqUowrQmaJJZ6oJpMlbp+zXT gFZVuAhLmunt8a1j8DrzLt5guXkbH//5mvlgiwbTNQgBHoiA/+DP3DCy8OGX8vLr RcWCSsQRCSlaPbN9yH3SRHVO6b2A4d19ZsXNI4g2BhUnQlBMqU1QZ4ePA+G4xRd4 wav62unW1r+O8QksNl13HwC4xX+ZCE+J5YaNPuwJEIsZQSNioHsz7crYphla9jf3 r486np6KJ/ZYf2E2MafZwRRcBb5fyaZNboSg98VviqGVtUjxamU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:19 2026 by rpki-client