This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer File: MBpkhyXuJqRgy5scvNnJyDLESa8.cer (raw, json) Hash identifier: JklVbqwy6j95ZnHDh0KfFB1RNQGxR++Lw5URejaqS0M= Subject key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B79F33D832F94532A60B653AD8A34 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51671 AS: 57395 AS: 209044 AS: 212148 IP: 5.183.48.0/22 IP: 89.207.153.0/24 IP: 91.212.156.0/24 IP: 176.98.160.0/21 IP: 185.181.168.0/22 IP: 185.254.0.0/22 IP: 193.150.64.0/24 IP: 2001:67c:2520::/48 IP: 2a07:b280::/29 IP: 2a0b:33c0::/29 IP: 2a0e:d200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:79:f3:3d:83:2f:94:53:2a:60:b6:53:ad:8a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:eb:39:03:b0:9e:7d:68:46:05:25:a7:1f: 90:2e:67:70:be:6e:53:31:b2:06:94:eb:04:f4:a8: f4:e8:d4:08:2d:74:07:a1:09:a7:f9:0b:ab:d9:94: 0c:bc:31:1d:71:3e:49:97:a9:8b:c0:ee:8f:27:68: 2a:23:f2:82:a3:44:70:3f:f5:f3:7b:e5:82:4d:58: f9:63:e2:8c:ff:f1:47:58:9b:78:e9:de:dc:4b:c3: 04:07:f4:6d:37:9e:32:84:b2:33:65:29:4a:a3:34: 27:eb:fd:ce:7f:fa:66:62:5b:1e:6a:e4:a4:86:b0: da:a2:d2:58:91:d2:d9:cd:d7:4f:56:63:e3:7a:f6: ff:26:5c:7a:0c:fa:bb:f5:d2:74:db:c3:9f:95:47: 1e:d3:f2:61:b6:c8:1e:66:b9:26:b2:bb:43:f4:73: a3:19:60:65:8d:cf:6d:3e:cc:79:d3:4b:54:db:e8: 7a:09:f8:01:d3:9c:a4:8b:6d:12:b8:82:61:24:6c: 7a:f0:b7:bd:57:5c:80:78:9e:ca:a6:2d:b0:b4:79: 67:b2:0f:41:3d:fd:50:1b:bd:28:81:fb:b7:cb:5f: a6:23:49:b3:d2:7b:5f:10:07:75:fd:8d:57:b6:73: ba:b2:b5:0d:44:40:06:64:07:98:55:66:a6:db:6a: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.48.0/22 89.207.153.0/24 91.212.156.0/24 176.98.160.0/21 185.181.168.0/22 185.254.0.0/22 193.150.64.0/24 IPv6: 2001:67c:2520::/48 2a07:b280::/29 2a0b:33c0::/29 2a0e:d200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51671 57395 209044 212148 Signature Algorithm: sha256WithRSAEncryption ab:d3:19:01:8d:7f:59:42:0b:90:3c:b5:15:d9:a3:b5:a1:0b: 8d:e4:28:14:48:d8:32:e1:c6:b0:39:3e:03:d7:98:ab:a1:96: 1f:7b:b5:d7:24:e4:8a:2d:07:6c:56:6e:55:71:db:5e:8e:ee: cd:35:38:1e:74:02:d7:b7:47:5a:f9:11:e6:3c:f3:d6:02:72: 6d:32:e1:f5:a7:72:71:28:c1:be:d7:6d:c1:5e:33:a3:04:c7: a0:4d:fa:a7:c5:84:72:3a:85:a9:78:bd:69:5a:77:9d:02:1a: 13:5c:a2:b3:02:6b:78:9c:f3:fb:3c:22:47:7f:85:b9:6f:f0: 51:bc:05:a4:8e:ef:ec:0a:74:6d:a6:d4:a8:1d:90:31:b7:c8: 0b:ee:95:c7:a3:18:03:e5:5e:1d:30:aa:ac:a1:1b:45:e4:9e: 31:65:8e:55:33:83:c5:1f:30:ff:1d:e3:11:c8:46:2b:a0:62: 91:ee:6d:7b:bc:49:7f:dc:1c:a4:e0:8d:d3:75:74:cc:3f:de: c9:41:22:be:16:f0:ee:99:08:a7:52:c6:b0:eb:e9:b8:de:7b: b9:70:4d:f7:77:8f:de:ca:ea:9f:18:2d:c9:91:b1:27:a7:24: dd:d6:38:88:26:1f:cc:f6:65:7c:45:ad:c2:0e:c6:11:ac:2f: 71:4b:89:68 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt6W3nzPYMvlFMqYLZTrYo0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDFhNjQ4NzI1ZWUyNmE0NjBjYjliMWNiY2Q5YzljODMyYzQ0OWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbTrOQOwnn1oRgUlpx+QLmdwvm5T MbIGlOsE9Kj06NQILXQHoQmn+Qur2ZQMvDEdcT5Jl6mLwO6PJ2gqI/KCo0RwP/Xz e+WCTVj5Y+KM//FHWJt46d7cS8MEB/RtN54yhLIzZSlKozQn6/3Of/pmYlseauSk hrDaotJYkdLZzddPVmPjevb/Jlx6DPq79dJ028OflUce0/JhtsgeZrkmsrtD9HOj GWBljc9tPsx500tU2+h6CfgB05yki20SuIJhJGx68Le9V1yAeJ7Kpi2wtHlnsg9B Pf1QG70ogfu3y1+mI0mz0ntfEAd1/Y1XtnO6srUNREAGZAeYVWam22oNHQIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFDAaZIcl7iakYMubHLzZycgyxEmvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzAyNGYw Zi0yMGM1LTQ4MjgtYjMzMi1hNWIyZDA5ZTA1Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMDI0ZjBm LTIwYzUtNDgyOC1iMzMyLWE1YjJkMDllMDVjZi8xL01CcGtoeVh1SnFSZ3k1c2N2 Tm5KeURMRVNhOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGkGCCsGAQUF BwEHAQH/BFowWDAwBAIAATAqAwQCBbcwAwQAWc+ZAwQAW9ScAwQDsGKgAwQCubWo AwQCuf4AAwQAwZZAMCQEAgACMB4DBwAgAQZ8JSADBQMqB7KAAwUDKgszwAMFAyoO 0gAwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAIDAMnXAgMA4DMCAwMwlAIDAzy0MA0G CSqGSIb3DQEBCwUAA4IBAQCr0xkBjX9ZQguQPLUV2aO1oQuN5CgUSNgy4cawOT4D 15iroZYfe7XXJOSKLQdsVm5Vcdteju7NNTgedALXt0da+RHmPPPWAnJtMuH1p3Jx KMG+123BXjOjBMegTfqnxYRyOoWpeL1pWnedAhoTXKKzAmt4nPP7PCJHf4W5b/BR vAWkju/sCnRtptSoHZAxt8gL7pXHoxgD5V4dMKqsoRtF5J4xZY5VM4PFHzD/HeMR yEYroGKR7m17vEl/3Byk4I3TdXTMP97JQSK+FvDumQinUsaw6+m43nu5cE33d4/e yuqfGC3JkbEnpyTd1jiIJh/M9mV8Ra3CDsYRrC9xS4lo -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:57 2026 by rpki-client