This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer File: MFMuPcNxjy4bVWppRwsec53TkCI.cer (raw, json) Hash identifier: hcasHXhFKMCN3/0znoyGFgHVCwn7ro40OOrJVoy+Vlg= Subject key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E377CE24C57909BB52FBB3368455F72 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39376 IP: 62.148.0.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:7c:e2:4c:57:90:9b:b5:2f:bb:33:68:45:5f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30532e3dc3718f2e1b556a69470b1e739dd39022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:a6:75:e6:6c:48:fa:02:c8:01:1f:10:b0: 9a:9a:bb:3b:ee:19:ff:80:b8:b3:43:35:59:3d:b3: 4a:63:17:03:eb:e7:d3:85:20:8c:e7:a4:83:65:72: 48:2f:05:b6:82:53:1c:3c:b0:fc:14:82:ac:10:2e: 12:16:ec:73:a7:6a:51:70:dd:a3:0b:1c:93:32:cb: e6:03:6c:0e:ea:91:10:60:b4:4d:30:d2:ab:c6:7b: 60:1f:5d:45:82:7c:92:43:68:ba:30:0d:cf:f2:9f: a9:34:8c:04:3c:ba:82:ce:8a:c8:d7:1d:72:dc:29: 21:8f:4e:0e:fd:09:12:4e:31:f6:aa:5f:a9:38:c7: 39:31:04:5e:57:43:82:11:9e:0a:ab:1a:40:60:6d: 67:ee:bf:b0:91:07:38:77:fe:e8:d1:14:dd:6b:c5: 06:ac:98:de:84:ee:75:5b:0d:96:a9:b7:cf:aa:71: bf:89:28:7f:29:dc:ff:da:30:b3:c2:20:ed:fb:50: 3b:83:be:29:28:ad:5b:02:66:26:26:77:e7:43:af: 73:60:5e:5f:e3:82:8a:42:66:13:28:0b:b6:00:54: f7:07:b2:1e:bf:1b:93:70:3e:2c:a7:47:7d:36:02: 76:fd:6b:c2:10:dd:1d:87:8c:38:8a:7c:53:29:bd: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.148.0.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39376 Signature Algorithm: sha256WithRSAEncryption 98:17:cf:95:95:16:3f:62:b4:c2:98:e6:58:9d:bb:d5:72:34: 61:8c:a2:97:af:8f:56:83:40:48:a3:05:4a:36:c7:31:ea:b7: 81:c4:60:71:6c:f3:de:63:57:6e:37:6a:1e:18:a6:ab:72:ae: 30:8c:d6:ab:cb:9c:20:d3:1d:dd:ff:3b:76:13:d0:f9:e9:57: 4d:50:c6:5e:15:b0:8b:87:aa:10:2e:cb:67:05:cd:ff:2a:a6: 2a:c4:2f:63:93:d8:b4:70:11:c9:61:64:fe:9b:61:e9:0f:27: 84:f8:78:09:07:01:d0:c5:53:45:f2:01:86:1d:ff:a2:5f:5e: a9:75:40:3c:e9:b6:26:aa:2c:ed:67:4f:29:5e:ea:8a:39:a6: 0b:16:53:48:3a:34:f0:9b:7d:fc:63:6f:63:46:c1:b4:35:ee: 48:94:14:f4:3f:79:16:67:e4:0e:0d:dc:e0:a5:40:e3:55:7d: fb:cc:44:87:49:2b:14:39:3a:a1:e1:17:87:6d:9f:1d:40:cf: 0f:56:10:09:d3:5f:c3:32:3b:3a:ee:ce:96:54:74:77:dd:6e: 88:25:a0:c9:3b:ed:33:15:a6:6b:15:01:f3:ed:7a:d6:50:97: dc:bf:b5:b5:b6:90:c5:6c:cd:29:a5:c0:b0:5c:c1:83:1c:4f: 60:db:88:ca -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+N3ziTFeQm7UvuzNoRV9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDUzMmUzZGMzNzE4ZjJlMWI1NTZhNjk0NzBiMWU3MzlkZDM5MDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkCmdeZsSPoCyAEfELCamrs77hn/ gLizQzVZPbNKYxcD6+fThSCM56SDZXJILwW2glMcPLD8FIKsEC4SFuxzp2pRcN2j CxyTMsvmA2wO6pEQYLRNMNKrxntgH11FgnySQ2i6MA3P8p+pNIwEPLqCzorI1x1y 3Ckhj04O/QkSTjH2ql+pOMc5MQReV0OCEZ4KqxpAYG1n7r+wkQc4d/7o0RTda8UG rJjehO51Ww2WqbfPqnG/iSh/Kdz/2jCzwiDt+1A7g74pKK1bAmYmJnfnQ69zYF5f 44KKQmYTKAu2AFT3B7IevxuTcD4sp0d9NgJ2/WvCEN0dh4w4inxTKb3lQwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDBTLj3DcY8uG1VqaUcLHnOd05AiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3Lzk3MmQ3 MS01ZTdmLTRjYzktYWY4Ny02NmFkMWRjODczNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvOTcyZDcx LTVlN2YtNGNjOS1hZjg3LTY2YWQxZGM4NzM2My8xL01GTXVQY054ank0YlZXcHBS d3NlYzUzVGtDSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQFPpQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCZ0DANBgkqhkiG9w0BAQsFAAOCAQEAmBfPlZUWP2K0wpjmWJ271XI0YYyil6+P VoNASKMFSjbHMeq3gcRgcWzz3mNXbjdqHhimq3KuMIzWq8ucINMd3f87dhPQ+elX TVDGXhWwi4eqEC7LZwXN/yqmKsQvY5PYtHARyWFk/pth6Q8nhPh4CQcB0MVTRfIB hh3/ol9eqXVAPOm2Jqos7WdPKV7qijmmCxZTSDo08Jt9/GNvY0bBtDXuSJQU9D95 FmfkDg3c4KVA41V9+8xEh0krFDk6oeEXh22fHUDPD1YQCdNfwzI7Ou7OllR0d91u iCWgyTvtMxWmaxUB8+161lCX3L+1tbaQxWzNKaXAsFzBgxxPYNuIyg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:54 2026 by rpki-client