This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer File: MJbXr7uKXjFaXEiazqfct1qmXQQ.cer (raw, json) Hash identifier: X8MyXVgRixP3pEhpYhY+KTkTn7a/RpYlAi3BD2gPXJQ= Subject key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15785F9C39846804686CFBBD479983 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16191 AS: 34606 AS: 43817 IP: 77.72.32.0/21 IP: 77.108.0.0/18 IP: 81.30.0.0/20 IP: 82.215.128.0/18 IP: 85.159.176.0/21 IP: 85.208.232.0/22 IP: 88.87.96.0/19 IP: 94.100.34.0/23 IP: 94.100.38.0 -- 94.100.47.255 IP: 95.140.136.0/21 IP: 185.73.244.0/22 IP: 185.117.216.0/22 IP: 185.127.32.0/22 IP: 185.167.20.0/22 IP: 194.116.0.0/18 IP: 194.176.126.0/24 IP: 2a02:260::/32 IP: 2a03:4560::/32 IP: 2a06:8580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:78:5f:9c:39:84:68:04:68:6c:fb:bd:47:99:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:d3:9c:f4:6d:15:5e:c2:ac:4f:a6:67:cf: df:21:cb:5b:c7:19:45:b3:77:c8:ae:af:08:e0:4e: 19:7b:2f:e8:d2:c1:c5:0b:b6:82:85:c7:8f:5c:b0: be:4d:56:bc:35:4b:3a:a1:78:1f:24:38:ba:23:2c: 8f:2b:79:e3:28:b1:42:0c:d2:fb:b4:a1:65:e3:c3: 5a:41:67:25:fc:6d:f7:39:d8:7f:65:97:96:8d:74: 76:9b:a9:4b:93:d9:ed:ae:7d:6c:c8:00:cb:dc:3f: d0:c7:7c:cf:d8:0a:15:19:80:05:3f:98:38:0b:dd: ff:ab:7a:5a:25:39:37:db:a0:43:97:b4:81:f0:64: e2:31:b7:89:ce:e2:48:49:17:56:74:b3:1f:ae:14: de:af:13:ef:f5:0c:0a:ae:35:fc:0d:73:f5:17:ce: b4:4f:f7:e5:52:a8:88:8f:a4:4f:72:91:f9:7c:c6: 59:45:7a:68:ee:6b:6b:bb:dc:90:80:8c:ad:93:10: 68:ec:e3:09:d6:f4:1b:f8:82:f6:99:4d:8f:87:c0: d2:d1:2f:71:b5:4f:d7:93:45:48:6d:b6:22:32:f0: 1f:1d:b6:8c:ef:48:95:4c:ed:0f:a3:4d:66:b5:b3: cf:bd:76:39:19:85:e9:a1:14:da:36:e4:60:0b:0f: 25:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.32.0/21 77.108.0.0/18 81.30.0.0/20 82.215.128.0/18 85.159.176.0/21 85.208.232.0/22 88.87.96.0/19 94.100.34.0/23 94.100.38.0-94.100.47.255 95.140.136.0/21 185.73.244.0/22 185.117.216.0/22 185.127.32.0/22 185.167.20.0/22 194.116.0.0/18 194.176.126.0/24 IPv6: 2a02:260::/32 2a03:4560::/32 2a06:8580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16191 34606 43817 Signature Algorithm: sha256WithRSAEncryption 1c:5b:2b:f8:da:5f:f8:31:fb:95:68:73:a6:dd:b6:54:05:93: 94:e4:d5:36:03:a1:bb:2f:67:d4:aa:48:2f:0f:98:ff:42:77: 3a:3e:ad:bd:d1:98:e9:20:8d:05:bb:d1:7d:51:9f:db:a6:2b: 31:14:8d:49:48:f9:e8:db:b0:91:59:57:4f:b3:3f:ce:e5:d4: 1b:ef:58:bf:0b:2d:67:e4:f2:20:ab:6d:4c:61:f9:c2:56:20: af:11:7d:60:cd:ca:35:fb:99:00:eb:1b:61:82:29:a6:f3:6d: 50:92:06:34:07:a6:89:bb:44:97:3d:5a:52:4c:97:d7:1d:cb: 0e:b9:99:6e:c2:7b:66:97:24:e0:cb:b2:ba:04:8c:ca:a4:a1: d3:7e:b9:03:30:45:21:4c:f6:8e:69:da:df:82:7c:09:8c:9b: 4a:ec:77:08:6d:7e:20:15:04:a9:5c:a0:43:82:3d:f1:7a:77: 76:5d:50:80:e5:f8:f0:8f:0c:35:9e:dc:e0:4a:ee:50:8a:30: bc:e2:2b:7d:a0:ab:52:1a:7e:6f:94:a1:bf:2f:66:54:5a:f3: dd:af:e2:58:f4:8a:60:20:79:25:05:b4:73:28:47:ba:38:df: 8d:d0:38:d5:76:6b:94:9c:be:09:83:66:dd:e8:e7:b4:ff:4d: 6e:74:d0:0b -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgISAZt/FXhfnDmEaARobPu9R5mDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDk2ZDdhZmJiOGE1ZTMxNWE1YzQ4OWFjZWE3ZGNiNzVhYTY1ZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwjTnPRtFV7CrE+mZ8/fIctbxxlF s3fIrq8I4E4Zey/o0sHFC7aChcePXLC+TVa8NUs6oXgfJDi6IyyPK3njKLFCDNL7 tKFl48NaQWcl/G33Odh/ZZeWjXR2m6lLk9ntrn1syADL3D/Qx3zP2AoVGYAFP5g4 C93/q3paJTk326BDl7SB8GTiMbeJzuJISRdWdLMfrhTerxPv9QwKrjX8DXP1F860 T/flUqiIj6RPcpH5fMZZRXpo7mtru9yQgIytkxBo7OMJ1vQb+IL2mU2Ph8DS0S9x tU/Xk0VIbbYiMvAfHbaM70iVTO0Po01mtbPPvXY5GYXpoRTaNuRgCw8lUQIDAQAB o4IDKzCCAycwHQYDVR0OBBYEFDCW16+7il4xWlxIms6n3Ldapl0EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2NmOGY5 OS1lNTgxLTRmNWYtODc1Zi1kZjRlOGM3MzY0ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvY2Y4Zjk5 LWU1ODEtNGY1Zi04NzVmLWRmNGU4YzczNjRmZS8xL01KYlhyN3VLWGpGYVhFaWF6 cWZjdDFxbVhRUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGgBggrBgEF BQcBBwEB/wSBkDCBjTBuBAIAATBoAwQDTUggAwQGTWwAAwQEUR4AAwQGUteAAwQD VZ+wAwQCVdDoAwQFWFdgAwQBXmQiMAwDBAFeZCYDBAReZCADBANfjIgDBAK5SfQD BAK5ddgDBAK5fyADBAK5pxQDBAbCdAADBADCsH4wGwQCAAIwFQMFACoCAmADBQAq A0VgAwUDKgaFgDAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgI/PwIDAIcuAgMAqykw DQYJKoZIhvcNAQELBQADggEBABxbK/jaX/gx+5Voc6bdtlQFk5Tk1TYDobsvZ9Sq SC8PmP9Cdzo+rb3RmOkgjQW70X1Rn9umKzEUjUlI+ejbsJFZV0+zP87l1BvvWL8L LWfk8iCrbUxh+cJWIK8RfWDNyjX7mQDrG2GCKabzbVCSBjQHpom7RJc9WlJMl9cd yw65mW7Ce2aXJODLsroEjMqkodN+uQMwRSFM9o5p2t+CfAmMm0rsdwhtfiAVBKlc oEOCPfF6d3ZdUIDl+PCPDDWe3OBK7lCKMLziK32gq1Iafm+Uob8vZlRa892v4lj0 imAgeSUFtHMoR7o4343QONV2a5ScvgmDZt3o57T/TW500As= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:05 2026 by rpki-client