This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer (raw, json) Hash identifier: aep1ORgb+aVjTo1Ry2u/PTufPC1FrZleu5ESo31VbDk= Subject key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED550327A5FF435DF3903B36F9E36E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210879 IP: 31.216.61.0/24 IP: 2a11:4980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:55:03:27:a5:ff:43:5d:f3:90:3b:36:f9:e3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3025fd339aa64504f289a00c4173c55a0002eb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:36:4d:0d:97:f2:29:88:be:af:e4:34:6e: 50:b5:80:84:52:62:05:ca:79:26:45:7d:ff:94:e9: d4:d0:23:96:d7:93:9b:86:88:9e:45:86:fc:09:d7: 82:b9:e5:74:1b:c4:a0:73:fc:2b:ed:d1:72:62:ba: 9c:ea:99:8c:66:a4:dd:b8:74:c0:73:3d:57:af:8d: 0b:4e:1c:48:f0:a8:12:e0:8b:cb:a6:17:fc:4e:e3: 5f:6b:7b:e0:b2:50:ba:77:42:be:4d:93:91:40:4a: 7f:8b:66:69:32:39:a9:78:0c:5f:1a:fa:78:02:2f: 39:a9:d5:3f:a3:f6:4e:59:60:b3:11:6f:b0:bc:ed: 2d:47:2c:9c:95:2f:cc:c8:08:85:6f:c9:2c:6e:f1: 96:79:1a:7b:40:5e:54:59:97:46:52:56:6f:af:15: 97:c9:97:ef:0f:57:80:ef:fe:07:2c:72:54:fd:c0: de:98:c6:65:3a:72:5f:0d:ab:7d:94:05:4c:c5:02: 3c:52:f8:36:e9:77:83:34:9f:9b:dd:18:42:79:43: bd:7b:69:49:9a:db:cf:0a:3e:27:43:c7:98:f7:95: 0c:79:6b:87:dd:77:93:2d:7f:59:15:b0:63:56:b7: 45:ec:7f:a7:d8:98:8a:b0:bc:e3:b4:7e:c4:d9:c8: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.61.0/24 IPv6: 2a11:4980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210879 Signature Algorithm: sha256WithRSAEncryption 70:0a:68:e9:f8:8f:13:39:a9:8f:c6:72:51:06:6d:11:df:35: fa:f8:a4:2f:45:dc:ac:b5:ff:63:ce:30:ba:cf:4d:38:7f:20: d6:0b:b2:95:a5:95:d2:09:f6:f1:01:18:39:20:3d:fa:2f:9e: 5d:5e:55:0b:81:61:56:31:51:34:9c:5a:f6:fa:71:b6:d5:e9: 81:8c:54:01:98:8d:81:17:72:17:39:13:87:93:f9:1a:a1:6b: d7:38:01:79:01:da:be:91:9a:9d:0d:dd:b3:31:8c:40:e4:2d: 97:47:05:bf:ff:f7:91:96:25:5d:31:50:8f:91:18:51:63:40: 10:93:cc:65:67:fb:57:f0:7f:80:4e:55:26:bb:52:25:17:dc: 25:93:a2:64:63:b3:2a:7a:8f:e5:87:de:ef:2f:a8:fc:a7:c4: b9:eb:b4:b6:42:d4:42:35:d9:71:fe:a1:c0:ba:c4:cd:e0:2f: b6:48:c3:dd:7f:02:9d:fa:2d:dd:e5:7f:41:39:72:ee:99:45: 46:d0:4d:6b:45:8f:4b:95:c4:6d:ef:3a:fd:b4:9c:27:5a:6d: 02:2d:fe:79:e5:5e:12:fc:a6:8a:6a:58:e6:c0:8b:36:00:24: 56:9a:c6:cf:cb:57:3d:67:81:d5:10:6a:e6:38:da:a2:3c:a9: 63:1a:a7:cc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87VUDJ6X/Q13zkDs2+eNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDI1ZmQzMzlhYTY0NTA0ZjI4OWEwMGM0MTczYzU1YTAwMDJlYjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq82TQ2X8imIvq/kNG5QtYCEUmIF ynkmRX3/lOnU0COW15ObhoieRYb8CdeCueV0G8Sgc/wr7dFyYrqc6pmMZqTduHTA cz1Xr40LThxI8KgS4IvLphf8TuNfa3vgslC6d0K+TZORQEp/i2ZpMjmpeAxfGvp4 Ai85qdU/o/ZOWWCzEW+wvO0tRyyclS/MyAiFb8ksbvGWeRp7QF5UWZdGUlZvrxWX yZfvD1eA7/4HLHJU/cDemMZlOnJfDat9lAVMxQI8Uvg26XeDNJ+b3RhCeUO9e2lJ mtvPCj4nQ8eY95UMeWuH3XeTLX9ZFbBjVrdF7H+n2JiKsLzjtH7E2cjxvQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDAl/TOapkUE8omgDEFzxVoAAutEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjLzRhNTIz Yi03MjQ0LTQyMmQtOTAwNC1jNGFhOWRiMWFiYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNGE1MjNi LTcyNDQtNDIyZC05MDA0LWM0YWE5ZGIxYWJiNS8xL01DWDlNNXFtUlFUeWlhQU1R WFBGV2dBQzYwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAH9g9MA0EAgACMAcDBQMqEUmAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3vzANBgkqhkiG9w0BAQsFAAOCAQEAcApo6fiPEzmp j8ZyUQZtEd81+vikL0XcrLX/Y84wus9NOH8g1guylaWV0gn28QEYOSA9+i+eXV5V C4FhVjFRNJxa9vpxttXpgYxUAZiNgRdyFzkTh5P5GqFr1zgBeQHavpGanQ3dszGM QOQtl0cFv//3kZYlXTFQj5EYUWNAEJPMZWf7V/B/gE5VJrtSJRfcJZOiZGOzKnqP 5Yfe7y+o/KfEueu0tkLUQjXZcf6hwLrEzeAvtkjD3X8Cnfot3eV/QTly7plFRtBN a0WPS5XEbe86/bScJ1ptAi3+eeVeEvymimpY5sCLNgAkVprGz8tXPWeB1RBq5jja ojypYxqnzA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:09 2026 by rpki-client