This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer File: MHFOgRmzE03MBg_lkAp82Gj8WXM.cer (raw, json) Hash identifier: gCdsoGCnLaepNIMXwX+qOjLgv+BfLzosAm7b/PunZsc= Subject key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDB7E46B1B14E0E9B4D2C87EB0BB5CA2C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 13:00:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214588 IP: 194.99.72.0/24 IP: 212.47.37.0/24 IP: 2a14:7340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:7e:46:b1:b1:4e:0e:9b:4d:2c:87:eb:0b:b5:ca:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 13:00:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:d1:5b:fa:ec:70:ff:fb:06:69:7e:48:46: a2:43:af:19:f0:57:17:f3:bb:8a:35:8c:a9:28:26: b9:71:2e:5a:61:ea:70:96:7d:bf:f1:c9:46:b9:3b: 2f:31:e8:8b:e9:f8:88:54:9f:20:c7:5f:cf:5a:b2: 9e:e1:20:6c:9a:73:15:a8:5f:94:74:ae:ae:3d:64: 15:51:9d:07:e4:bf:9d:cb:76:4e:5d:36:59:d8:99: 30:ca:7e:d9:8e:51:96:f6:4f:d0:1c:4b:5e:fc:8f: ad:bd:c0:f4:72:04:e4:f5:30:7c:6f:cd:33:19:f8: 86:94:b8:c2:cd:4e:46:07:dd:92:01:d0:93:07:14: 26:42:88:ef:4f:ec:fa:7a:d3:0b:70:b7:02:8b:dc: 34:c4:3c:22:b8:61:13:11:a5:81:e8:d4:33:42:ff: b5:84:62:7e:28:95:63:32:68:f9:e7:90:14:8d:4e: 86:1c:f5:44:dd:04:0a:cd:ec:8f:2e:ea:7b:5b:a3: 97:34:81:d7:4e:16:8e:62:43:7d:ad:9c:23:ba:e8: b1:f7:c4:b9:e5:99:aa:71:f4:94:d2:d7:07:0c:2f: 37:fc:a1:f1:db:a4:af:a6:44:18:a0:81:09:a3:8e: d7:50:4b:d0:7c:ad:5b:9b:5d:9a:d4:58:49:da:41: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.72.0/24 212.47.37.0/24 IPv6: 2a14:7340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214588 Signature Algorithm: sha256WithRSAEncryption 28:25:f1:e4:4b:22:af:75:4a:c4:5d:24:79:c6:53:9e:30:65: ba:fb:dd:b9:7e:7f:8c:30:e2:cc:22:05:d2:9f:39:ac:f4:ab: 5b:d7:7b:1b:b9:08:dd:71:9c:ad:6b:02:04:08:c2:bf:a2:42: 98:44:d3:7f:75:ff:89:99:d5:50:d2:1b:28:2b:4b:cf:62:13: bd:cc:bd:c3:e3:7e:3f:1e:85:05:0a:83:19:78:0b:e5:2b:42: b8:91:d7:28:28:0c:de:a6:cd:9e:4f:94:dd:96:38:be:a6:41: 98:95:17:1e:db:c7:5f:fa:ad:d4:2d:bc:93:22:fa:5a:8c:b5: b4:25:88:42:b9:c5:cd:3e:c0:cb:e6:b9:5a:d5:93:51:82:43: e9:53:fe:f5:8b:8d:b9:e1:ac:fb:39:29:36:de:55:c5:3e:02: 0b:18:85:28:54:41:8a:66:a7:b9:0a:80:d5:b7:0e:5e:41:72: 73:13:47:b5:27:cf:e8:3c:27:5a:44:c6:47:63:64:28:5c:6d: 31:3e:35:49:a3:db:fb:5c:24:fa:ab:47:d1:fa:fe:21:22:be: b4:95:5c:16:0a:f5:16:85:53:2e:df:17:46:2a:18:69:09:65: f3:0e:4c:3c:f1:c7:a9:ae:43:0b:f7:e8:85:b1:88:d2:ef:7e: ca:49:2d:2a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZvbfkaxsU4Om00sh+sLtcosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTMwMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDcxNGU4MTE5YjMxMzRkY2MwNjBmZTU5MDBhN2NkODY4ZmM1OTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bHRW/rscP/7Bml+SEaiQ68Z8FcX 87uKNYypKCa5cS5aYepwln2/8clGuTsvMeiL6fiIVJ8gx1/PWrKe4SBsmnMVqF+U dK6uPWQVUZ0H5L+dy3ZOXTZZ2Jkwyn7ZjlGW9k/QHEte/I+tvcD0cgTk9TB8b80z GfiGlLjCzU5GB92SAdCTBxQmQojvT+z6etMLcLcCi9w0xDwiuGETEaWB6NQzQv+1 hGJ+KJVjMmj555AUjU6GHPVE3QQKzeyPLup7W6OXNIHXThaOYkN9rZwjuuix98S5 5ZmqcfSU0tcHDC83/KHx26SvpkQYoIEJo47XUEvQfK1bm12a1FhJ2kGqoQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFDBxToEZsxNNzAYP5ZAKfNho/FlzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzc0ZmEx My0yY2IzLTQyN2EtYTQ1YS04ZjM0NzBkODIwNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvNzRmYTEz LTJjYjMtNDI3YS1hNDVhLThmMzQ3MGQ4MjA1Ny8xL01IRk9nUm16RTAzTUJnX2xr QXA4MkdqOFdYTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwmNIAwQA1C8lMA0EAgACMAcDBQMqFHNAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNGPDANBgkqhkiG9w0BAQsFAAOCAQEAKCXx 5Esir3VKxF0kecZTnjBluvvduX5/jDDizCIF0p85rPSrW9d7G7kI3XGcrWsCBAjC v6JCmETTf3X/iZnVUNIbKCtLz2ITvcy9w+N+Px6FBQqDGXgL5StCuJHXKCgM3qbN nk+U3ZY4vqZBmJUXHtvHX/qt1C28kyL6Woy1tCWIQrnFzT7Ay+a5WtWTUYJD6VP+ 9YuNueGs+zkpNt5VxT4CCxiFKFRBimanuQqA1bcOXkFycxNHtSfP6DwnWkTGR2Nk KFxtMT41SaPb+1wk+qtH0fr+ISK+tJVcFgr1FoVTLt8XRioYaQll8w5MPPHHqa5D C/fohbGI0u9+ykktKg== -----END CERTIFICATE-----Generated at Wed Jan 21 17:35:55 2026 by rpki-client