This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer (raw, json) Hash identifier: UT4Q3jjClSIjmbMrNERILR6bU/8hcUv/g9OcN5rIo58= Subject key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED195B8E8E109EA39DC59FC9C93C4F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.219.236.0/22 IP: 2a0b:eb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:19:5b:8e:8e:10:9e:a3:9d:c5:9f:c9:c9:3c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30aee11b2943572d11becc425c684b48bbb2cbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:bc:92:6d:2f:46:62:03:20:0a:12:11:5d: d4:c4:3a:83:db:d7:e0:9f:25:4d:2c:de:13:9a:a5: f3:ce:3e:91:d3:8e:2e:1f:44:89:68:73:ff:92:e5: 94:02:3f:d9:ab:43:a8:69:7f:3f:d2:0a:11:fb:6f: 8f:f9:c6:b1:1f:c1:dc:93:c2:06:66:0b:a8:33:0a: de:3d:49:fc:09:a0:ed:25:3b:c4:4d:ea:72:86:5c: 8f:9b:b2:3a:18:e7:76:06:78:cc:38:bf:fc:a1:57: ec:0e:3e:5e:70:d2:9d:4e:fc:af:76:54:40:a1:be: f4:f7:93:f8:99:40:f8:61:6b:68:b7:7e:4d:e9:ac: f0:35:08:b8:20:9c:23:35:b5:e1:ed:cf:c8:65:65: 69:fe:2d:11:82:e8:9e:7d:62:89:fd:4e:10:27:92: fd:c0:76:bc:cd:73:30:d5:1e:79:a6:ef:93:c0:ad: 79:6c:67:61:2a:e8:56:80:0d:c2:3d:98:17:1a:76: 0c:96:20:f3:a9:ff:a5:ab:0f:ca:9c:a3:f2:3d:a3: b8:e0:85:71:1d:25:17:5b:87:74:c7:49:d0:fc:1a: 51:66:68:85:30:d7:d8:6e:ba:c1:57:ad:57:1e:a9: c0:40:c5:0f:cc:cf:2d:c3:e9:ea:6b:ca:04:50:e5: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.236.0/22 IPv6: 2a0b:eb40::/29 Signature Algorithm: sha256WithRSAEncryption 85:ec:95:ba:5a:02:67:ff:0d:f4:5e:11:c0:8f:17:f5:60:be: c1:c3:8a:70:a1:80:75:50:58:dd:14:9b:fa:8b:68:06:6c:d6: 90:b1:03:ce:57:70:1e:b5:ee:bb:af:c5:1b:ce:10:eb:87:ba: c0:e0:cd:a2:9e:4c:dd:b4:fb:f5:ed:2b:ea:2c:5c:88:fe:71: c4:a9:90:27:11:7d:98:3c:2e:2e:89:8c:5b:a3:ee:95:bc:dd: 8d:a0:c8:00:f7:7e:49:bd:f5:fd:b1:9f:f6:d6:54:97:e2:12: 58:10:33:77:07:de:b0:4f:0e:10:f3:7a:de:d9:2c:3e:d1:80: 7e:55:b1:4a:5b:60:cc:b5:70:e7:96:52:89:5e:2e:d9:24:0b: 54:6e:c9:55:ff:ad:98:ee:11:82:f6:47:23:b2:bd:0b:b4:0a: e5:9c:c3:ed:54:3c:05:61:c8:75:49:4b:4c:b7:27:3b:2f:24: 5d:84:0b:d8:b7:b8:ba:69:8f:9d:97:a3:0b:a6:ad:7b:46:af: 37:fb:2a:92:cb:c4:56:ef:dc:9a:b3:6d:d6:7a:3c:1e:ea:b1: 10:d6:9b:92:a1:a0:47:5e:a4:30:54:01:77:d9:9c:ef:68:9a: 82:ae:7a:95:1d:1b:51:9c:6f:47:4a:3a:15:0e:db:d1:f9:d6: 31:41:66:d8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57Rlbjo4QnqOdxZ/JyTxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGFlZTExYjI5NDM1NzJkMTFiZWNjNDI1YzY4NGI0OGJiYjJjYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pC8km0vRmIDIAoSEV3UxDqD29fg nyVNLN4TmqXzzj6R044uH0SJaHP/kuWUAj/Zq0OoaX8/0goR+2+P+caxH8Hck8IG ZguoMwrePUn8CaDtJTvETepyhlyPm7I6GOd2BnjMOL/8oVfsDj5ecNKdTvyvdlRA ob7095P4mUD4YWtot35N6azwNQi4IJwjNbXh7c/IZWVp/i0RguiefWKJ/U4QJ5L9 wHa8zXMw1R55pu+TwK15bGdhKuhWgA3CPZgXGnYMliDzqf+lqw/KnKPyPaO44IVx HSUXW4d0x0nQ/BpRZmiFMNfYbrrBV61XHqnAQMUPzM8tw+nqa8oEUOUxBwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFDCu4RspQ1ctEb7MQlxoS0i7ssvUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzZmYWUw Mi0wYzM3LTRmMDUtODFiYS0xYjQ2ZDJlYjU0MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNmZhZTAy LTBjMzctNGYwNS04MWJhLTFiNDZkMmViNTQxMi8xL01LN2hHeWxEVnkwUnZzeENY R2hMU0x1eXk5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudvsMA0EAgACMAcDBQMqC+tAMA0GCSqGSIb3 DQEBCwUAA4IBAQCF7JW6WgJn/w30XhHAjxf1YL7Bw4pwoYB1UFjdFJv6i2gGbNaQ sQPOV3Aete67r8UbzhDrh7rA4M2inkzdtPv17SvqLFyI/nHEqZAnEX2YPC4uiYxb o+6VvN2NoMgA935JvfX9sZ/21lSX4hJYEDN3B96wTw4Q83re2Sw+0YB+VbFKW2DM tXDnllKJXi7ZJAtUbslV/62Y7hGC9kcjsr0LtArlnMPtVDwFYch1SUtMtyc7LyRd hAvYt7i6aY+dl6MLpq17Rq83+yqSy8RW79yas23Wejwe6rEQ1puSoaBHXqQwVAF3 2ZzvaJqCrnqVHRtRnG9HSjoVDtvR+dYxQWbY -----END CERTIFICATE-----Generated at Wed Feb 4 08:27:51 2026 by rpki-client