This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer File: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer (raw, json) Hash identifier: 41sEE1NYhkLu48Hy4AHkSKBqS70xzaiHnvEWsEbrkqo= Subject key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAAEF045A670D2521A1DDD45CC86F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199208 AS: 199210 IP: 185.165.180.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ae:f0:45:a6:70:d2:52:1a:1d:dd:45:cc:86:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:a6:5a:38:39:97:e8:1e:03:78:c1:05:df: ab:9c:af:dc:4e:43:18:ab:35:3b:b7:b1:99:e7:7c: 4a:77:59:b1:4c:36:9a:4d:1a:db:75:90:88:d7:d9: 41:6c:51:89:9d:95:b5:87:bc:86:ac:80:d4:fc:c0: 98:ef:a6:c4:91:79:b2:07:ac:c6:a1:cd:45:24:ef: d5:ee:a4:f2:ba:3f:a3:da:d5:09:ad:0d:fb:0c:cf: 4a:a6:dd:16:08:94:8c:50:0c:20:ae:0d:59:a2:cd: 7e:a0:01:bb:29:90:1a:a9:52:e4:0d:23:b4:6f:f4: 85:1d:f9:f2:f8:5c:f7:7f:ad:82:53:74:8e:ff:77: 2e:dc:6d:c7:06:55:0e:eb:db:4b:41:12:e0:25:8e: 7f:c7:0d:4a:6a:ad:25:39:e5:6a:6a:72:81:04:4c: 14:7d:ee:80:06:92:63:cc:8c:41:7f:c6:09:d1:00: 1c:a0:e3:2f:4c:60:66:d3:76:7b:26:2b:7f:65:4a: fa:24:52:dd:ec:8f:08:5e:71:c0:64:23:57:28:41: 76:93:9e:3a:a5:8a:f9:e8:f9:0c:67:df:8e:ac:92: dc:74:6d:d5:f4:9f:62:29:14:9b:87:f4:9c:c1:f5: ac:27:96:cf:22:9d:2f:ec:db:91:ad:63:12:2b:51: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.180.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199208 199210 Signature Algorithm: sha256WithRSAEncryption 41:08:1d:cb:f2:4e:0e:76:de:d0:35:2e:ed:25:18:b1:73:08: 77:fa:83:b3:00:ba:f2:ea:23:68:72:54:ec:86:14:4d:32:88: c6:e6:88:2d:2e:61:47:86:da:b0:27:38:ce:36:89:96:19:be: d4:52:f0:7f:29:9a:41:79:9d:2c:35:12:25:15:c5:12:d0:08: 20:32:29:68:8c:ae:df:86:12:41:da:82:67:1d:22:d4:4d:fe: 2b:d2:ae:8f:26:63:67:30:18:a2:c4:89:3e:7d:3b:42:52:7d: 81:a8:bb:cb:af:23:cc:f6:41:6b:76:67:ad:13:1d:a8:85:f7: 84:a1:d0:1c:f1:49:19:fc:b9:b3:6f:31:1f:bc:eb:64:ff:15: 84:4c:49:d2:e6:4f:f6:34:75:2e:ea:46:49:cf:fb:1c:bb:ed: ea:1c:5c:b6:d4:a8:d3:75:69:d3:72:79:d2:c8:ce:88:46:39: 69:a8:b9:53:f6:cc:c2:8d:80:38:8d:e4:f4:c5:58:69:a4:0b: 3c:78:a2:f9:6d:32:e8:cd:b3:81:7b:78:98:78:a5:ff:9e:d6: d0:d7:96:e4:04:a6:30:47:38:48:28:85:e7:bb:66:13:16:05: b7:ed:8a:c1:7f:61:64:f5:c6:e7:95:43:6d:e4:e8:5a:51:00: 52:40:a2:39 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt26q7wRaZw0lIaHd1FzIb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGEyNDJjZjZjMTUyOWFhYTA2OTMzNjdlNDRjODRhMDdkOGIwYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6mWjg5l+geA3jBBd+rnK/cTkMY qzU7t7GZ53xKd1mxTDaaTRrbdZCI19lBbFGJnZW1h7yGrIDU/MCY76bEkXmyB6zG oc1FJO/V7qTyuj+j2tUJrQ37DM9Kpt0WCJSMUAwgrg1Zos1+oAG7KZAaqVLkDSO0 b/SFHfny+Fz3f62CU3SO/3cu3G3HBlUO69tLQRLgJY5/xw1Kaq0lOeVqanKBBEwU fe6ABpJjzIxBf8YJ0QAcoOMvTGBm03Z7Jit/ZUr6JFLd7I8IXnHAZCNXKEF2k546 pYr56PkMZ9+OrJLcdG3V9J9iKRSbh/ScwfWsJ5bPIp0v7NuRrWMSK1FknQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFDCiQs9sFSmqoGkzZ+RMhKB9iwyfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzE3Y2Q4 Ni03ZmJiLTQwOGYtYTI4Yy1mYTI2NzZmZTM4ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvMTdjZDg2 LTdmYmItNDA4Zi1hMjhjLWZhMjY3NmZlMzhmZC8xL01LSkN6MndWS2FxZ2FUTm41 RXlFb0gyTERKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuaW0MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC AwMKKAIDAwoqMA0GCSqGSIb3DQEBCwUAA4IBAQBBCB3L8k4Odt7QNS7tJRixcwh3 +oOzALry6iNoclTshhRNMojG5ogtLmFHhtqwJzjONomWGb7UUvB/KZpBeZ0sNRIl FcUS0AggMilojK7fhhJB2oJnHSLUTf4r0q6PJmNnMBiixIk+fTtCUn2BqLvLryPM 9kFrdmetEx2ohfeEodAc8UkZ/LmzbzEfvOtk/xWETEnS5k/2NHUu6kZJz/scu+3q HFy21KjTdWnTcnnSyM6IRjlpqLlT9szCjYA4jeT0xVhppAs8eKL5bTLozbOBe3iY eKX/ntbQ15bkBKYwRzhIKIXnu2YTFgW37YrBf2Fk9cbnlUNt5OhaUQBSQKI5 -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:51 2026 by rpki-client