This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer File: MK7HNts6BEOzui_FtKQkWG-0zhU.cer (raw, json) Hash identifier: jH0W6AOR/C9kFqpMDpYtS2bGhzVlCSArfy+lBuPDBhU= Subject key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783553078D5A722601352269BBECE75F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44885 IP: 80.83.32.0/19 IP: 83.68.192.0/19 IP: 88.85.0.0/19 IP: 109.237.48.0 -- 109.237.59.255 IP: 2a0f:cd00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:53:07:8d:5a:72:26:01:35:22:69:bb:ec:e7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dc:2d:b5:63:25:67:cb:2b:58:a0:be:fc:8b: f3:50:1b:0e:e7:fe:8f:e1:30:47:09:f2:d0:c6:a4: 9d:e4:0c:87:48:cf:e5:dc:c2:ca:49:6c:35:3e:02: f3:d4:30:e3:08:f3:2b:e7:ae:9f:2a:6b:70:59:e9: 07:53:20:56:78:f8:97:69:e8:f6:77:b9:84:fc:be: 73:b9:f0:e4:45:ff:66:0d:b6:b2:05:44:fc:3a:6c: bf:e1:ba:15:e5:ae:66:95:26:3f:7e:8b:6c:c7:03: 5f:9b:aa:82:9b:58:f1:e0:12:33:f9:5a:f1:04:72: 78:f1:df:09:16:6c:c4:08:87:10:ce:22:06:08:3a: fa:c6:ea:b6:c0:4f:37:19:95:ec:9d:85:84:7e:f0: 82:d5:44:87:ce:08:40:5d:5c:5e:d8:70:69:e8:d7: 53:92:0e:06:3b:1a:a0:fb:06:4c:33:a7:b3:17:cc: f7:ab:df:bb:9b:74:55:a7:c9:d4:17:02:59:d2:4a: 9f:9d:3b:4e:ac:d7:a5:f1:e3:22:f0:7f:f0:5c:ca: 7c:ff:bd:0d:05:fb:10:26:34:9a:25:cc:9c:77:08: b9:95:8f:4f:69:c8:9e:bf:53:71:9b:4c:78:8d:a7: 82:e7:7e:60:92:1f:d5:eb:2b:8e:68:54:01:91:11: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.32.0/19 83.68.192.0/19 88.85.0.0/19 109.237.48.0-109.237.59.255 IPv6: 2a0f:cd00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44885 Signature Algorithm: sha256WithRSAEncryption 09:68:58:27:8c:6f:0f:4f:5b:fe:99:40:6a:e1:af:62:a6:f2: 0c:de:93:9a:b7:0c:0c:17:be:30:ac:e0:1b:df:ff:c5:c4:f5: 13:14:4b:c0:69:fd:c7:d8:c8:0f:a5:24:83:a4:12:f6:35:e0: d5:a9:46:61:51:6e:65:42:09:b7:53:0a:5f:12:74:e3:36:c9: f5:f3:bd:f8:a1:ba:63:c9:88:2b:10:b3:41:31:30:c7:7e:4c: 28:f1:71:90:e2:80:1c:44:e4:a3:d7:d0:0f:26:64:16:b6:f1: 49:b6:b0:61:7e:26:8f:e5:86:20:ba:1c:9f:d0:0a:e8:e5:18: 85:a0:d4:4e:7d:79:8d:1a:b2:d0:de:1c:e5:b8:a0:7d:17:6b: f0:21:0a:f8:a2:bb:a7:89:1e:6a:cf:d2:df:d6:1c:6a:e1:cf: 93:75:23:17:07:07:6e:a4:1c:4c:23:3f:ea:87:28:cf:41:f0: 9d:85:ed:20:f5:25:e6:e5:75:a6:9a:d8:50:e6:e5:d8:6c:cd: c1:42:6a:3d:c0:bb:6b:bd:fc:26:46:3e:af:28:ee:36:86:54: 69:db:82:2c:eb:c0:f5:56:46:00:d6:84:19:b8:25:f9:1b:c5: b0:7a:65:c0:dd:ec:38:fa:56:57:a8:47:85:ea:72:e6:b4:12: dd:59:31:ad -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt4NVMHjVpyJgE1Imm77OdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGFlYzczNmRiM2EwNDQzYjNiYTJmYzViNGE0MjQ1ODZmYjRjZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dwttWMlZ8srWKC+/IvzUBsO5/6P 4TBHCfLQxqSd5AyHSM/l3MLKSWw1PgLz1DDjCPMr566fKmtwWekHUyBWePiXaej2 d7mE/L5zufDkRf9mDbayBUT8Omy/4boV5a5mlSY/fotsxwNfm6qCm1jx4BIz+Vrx BHJ48d8JFmzECIcQziIGCDr6xuq2wE83GZXsnYWEfvCC1USHzghAXVxe2HBp6NdT kg4GOxqg+wZMM6ezF8z3q9+7m3RVp8nUFwJZ0kqfnTtOrNel8eMi8H/wXMp8/70N BfsQJjSaJcycdwi5lY9Paciev1Nxm0x4jaeC535gkh/V6yuOaFQBkRGpVwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFDCuxzbbOgRDs7ovxbSkJFhvtM4VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2QzN2Ji Zi0wNTZkLTQ4ZjAtOTBlNy1iMzc5ZWEwM2ZiYWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvZDM3YmJm LTA1NmQtNDhmMC05MGU3LWIzNzllYTAzZmJhYS8xL01LN0hOdHM2QkVPenVpX0Z0 S1FrV0ctMHpoVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQFUFMgAwQFU0TAAwQFWFUAMAwDBARt7TADBAJt 7TgwDQQCAAIwBwMFAyoPzQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAK9VMA0G CSqGSIb3DQEBCwUAA4IBAQAJaFgnjG8PT1v+mUBq4a9ipvIM3pOatwwMF74wrOAb 3//FxPUTFEvAaf3H2MgPpSSDpBL2NeDVqUZhUW5lQgm3UwpfEnTjNsn18734obpj yYgrELNBMTDHfkwo8XGQ4oAcROSj19APJmQWtvFJtrBhfiaP5YYguhyf0Aro5RiF oNROfXmNGrLQ3hzluKB9F2vwIQr4oruniR5qz9Lf1hxq4c+TdSMXBwdupBxMIz/q hyjPQfCdhe0g9SXm5XWmmthQ5uXYbM3BQmo9wLtrvfwmRj6vKO42hlRp24Is68D1 VkYA1oQZuCX5G8WwemXA3ew4+lZXqEeF6nLmtBLdWTGt -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:45 2026 by rpki-client