This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MBHFvtv0MNvOQcazjxyxJVKrv-k.cer File: MBHFvtv0MNvOQcazjxyxJVKrv-k.cer (raw, json) Hash identifier: HOBNYmPQLckeBr/WkvfYen1FlAn6h55OLuoqqaVLQQA= Subject key identifier: 30:11:C5:BE:DB:F4:30:DB:CE:41:C6:B3:8F:1C:B1:25:52:AB:BF:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910145B893994959724733D79851503 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/80c8cb-bb6f-4d26-aafe-2d83c0800c0b/1/MBHFvtv0MNvOQcazjxyxJVKrv-k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/80c8cb-bb6f-4d26-aafe-2d83c0800c0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212963 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:14:5b:89:39:94:95:97:24:73:3d:79:85:15:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3011c5bedbf430dbce41c6b38f1cb12552abbfe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:cc:34:dc:b1:f4:09:36:93:e0:1f:09:52: 76:af:93:b9:c5:2d:91:ac:30:c0:2f:5e:09:a8:e9: 0d:ed:13:0e:01:a9:fb:d0:fc:53:c9:37:ef:ae:34: 38:35:68:ac:8f:a3:fa:70:d0:1c:04:03:89:e3:b7: c4:06:60:50:60:67:63:ae:c2:35:be:d5:94:f9:0e: de:56:7b:70:1c:0a:89:20:6d:b6:2b:2b:be:ca:4d: cf:98:e7:bc:76:4c:c1:ba:8c:18:72:a6:02:06:17: 96:15:9f:0f:41:5e:45:74:29:8c:fe:e2:dd:7e:2d: 65:d1:fd:e3:6e:3b:d7:70:4f:d9:f5:3c:e9:fa:46: d9:45:23:63:f0:9b:32:87:a9:f5:69:0c:cf:9d:dd: 84:6d:92:a7:5c:92:30:9f:24:c9:c5:c4:eb:89:4b: 37:77:bb:e7:cf:d4:9e:34:d7:34:55:da:fe:73:76: fa:45:a7:47:32:00:ab:89:48:ab:b5:7c:e6:d2:90: 2a:65:2a:1f:4e:c1:10:d8:68:cd:bb:05:36:a1:6c: 93:18:e1:64:fc:58:df:6a:a7:f3:16:31:c9:9b:12: 25:be:f3:39:21:f4:69:f1:a1:77:a1:f5:88:44:1c: 3b:b4:a8:da:13:00:a8:56:b1:44:fa:dc:0d:a4:19: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:11:C5:BE:DB:F4:30:DB:CE:41:C6:B3:8F:1C:B1:25:52:AB:BF:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/80c8cb-bb6f-4d26-aafe-2d83c0800c0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/80c8cb-bb6f-4d26-aafe-2d83c0800c0b/1/MBHFvtv0MNvOQcazjxyxJVKrv-k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212963 Signature Algorithm: sha256WithRSAEncryption 4f:3f:f0:cd:ed:53:af:e1:3a:f2:37:29:8c:44:45:6a:cc:39: 12:f2:62:86:6b:97:48:d3:fc:d3:22:20:55:26:a4:0d:7d:59: 14:a8:da:83:d6:08:52:ba:a7:3a:7b:07:ca:11:3b:e8:2e:96: 83:57:87:68:2f:95:82:08:be:33:2f:1a:aa:f1:18:87:f5:a1: 11:23:3d:66:02:ec:92:9b:01:d0:7a:9a:e4:16:d7:cc:28:64: 69:4b:60:0e:f4:c8:f5:2c:02:4b:8e:33:1b:20:78:47:44:9b: 9f:ad:d7:40:e3:bb:22:50:18:0b:71:f3:de:d9:4e:26:4a:fc: bb:5c:a6:06:e8:fd:16:5c:28:5f:ca:58:dc:c8:95:39:f1:ef: c2:66:3f:c1:26:31:ec:d3:40:be:79:28:7e:3a:b6:7f:c8:4e: 4e:af:30:b1:20:e9:a3:86:8f:00:fa:d1:85:a0:3c:68:04:f0: 3d:4b:9f:68:e1:5b:31:c1:20:72:c4:82:73:62:c3:66:86:ca: 85:61:7f:4d:50:a2:30:24:69:f6:25:a3:52:91:ff:8d:01:fb: 4f:cb:ef:fe:31:0b:05:0a:4c:af:b3:55:27:76:e5:e7:a2:33: ce:0b:77:2e:25:98:2e:ea:04:1a:32:53:42:f7:cd:72:15:19: ec:a3:c4:13 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5EBRbiTmUlZckcz15hRUDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDExYzViZWRiZjQzMGRiY2U0MWM2YjM4ZjFjYjEyNTUyYWJiZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbDMNNyx9Ak2k+AfCVJ2r5O5xS2R rDDAL14JqOkN7RMOAan70PxTyTfvrjQ4NWisj6P6cNAcBAOJ47fEBmBQYGdjrsI1 vtWU+Q7eVntwHAqJIG22Kyu+yk3PmOe8dkzBuowYcqYCBheWFZ8PQV5FdCmM/uLd fi1l0f3jbjvXcE/Z9Tzp+kbZRSNj8Jsyh6n1aQzPnd2EbZKnXJIwnyTJxcTriUs3 d7vnz9SeNNc0Vdr+c3b6RadHMgCriUirtXzm0pAqZSofTsEQ2GjNuwU2oWyTGOFk /FjfaqfzFjHJmxIlvvM5IfRp8aF3ofWIRBw7tKjaEwCoVrFE+twNpBkd3wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDARxb7b9DDbzkHGs48csSVSq7/pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzgwYzhj Yi1iYjZmLTRkMjYtYWFmZS0yZDgzYzA4MDBjMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODBjOGNi LWJiNmYtNGQyNi1hYWZlLTJkODNjMDgwMGMwYi8xL01CSEZ2dHYwTU52T1FjYXpq eHl4SlZLcnYtay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/4zANBgkqhkiG9w0BAQsFAAOCAQEATz/wze1Tr+E6 8jcpjERFasw5EvJihmuXSNP80yIgVSakDX1ZFKjag9YIUrqnOnsHyhE76C6Wg1eH aC+Vggi+My8aqvEYh/WhESM9ZgLskpsB0Hqa5BbXzChkaUtgDvTI9SwCS44zGyB4 R0Sbn63XQOO7IlAYC3Hz3tlOJkr8u1ymBuj9FlwoX8pY3MiVOfHvwmY/wSYx7NNA vnkofjq2f8hOTq8wsSDpo4aPAPrRhaA8aATwPUufaOFbMcEgcsSCc2LDZobKhWF/ TVCiMCRp9iWjUpH/jQH7T8vv/jELBQpMr7NVJ3bl56Izzgt3LiWYLuoEGjJTQvfN chUZ7KPEEw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:02 2026 by rpki-client