This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer (raw, json) Hash identifier: vUliNZ9sb+00JHl9XiZjuJbLbz++49HfQIq3DtZ7U8c= Subject key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EBA24A77149B76A084F99673D459BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58350 IP: 176.115.0.0/19 IP: 2001:678:258::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a2:4a:77:14:9b:76:a0:84:f9:96:73:d4:59:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30c45fc3147102824f9d2d547766a809aeaf245a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:b6:74:69:19:eb:3f:52:6a:d5:a6:ea:55: 4c:ed:c6:10:65:47:f0:1a:1c:a3:b3:1d:cc:a4:20: e7:db:15:fd:be:c8:59:c5:65:7c:db:1f:24:32:97: 4e:78:cf:09:26:33:25:8c:74:30:ae:d2:28:dd:4c: 13:0a:6d:a7:c6:e2:bd:b4:33:21:9e:1a:56:32:5b: bf:fa:f2:53:ab:4f:17:b1:e3:db:e5:47:83:29:1d: 78:9e:ea:f2:09:43:a5:48:47:0b:97:15:29:72:12: f0:6c:20:b7:a7:42:b7:22:c8:5d:ae:01:c3:e1:ab: 96:de:0c:b6:74:85:3c:f7:42:f2:54:d4:dd:24:72: 1d:67:0b:8b:d9:10:4f:ed:d4:4f:dc:de:1d:c0:bd: 11:58:b9:08:df:01:98:0e:41:03:60:36:4e:c7:6f: 06:bb:ac:ad:7d:56:47:2b:7c:85:31:f5:54:fa:1e: 8a:89:d2:cf:bf:7c:d3:cc:9f:c6:93:e6:0d:46:00: bc:be:d2:ea:78:2c:62:42:f9:ca:0c:6a:96:f0:d9: 96:71:26:89:6f:54:b9:71:ec:6a:6f:80:f2:e1:02: 1e:7c:dc:34:e0:b0:d9:45:87:2d:8a:d5:5f:16:50: d4:50:71:47:82:79:00:6e:ea:17:fa:3c:20:1a:60: 55:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.115.0.0/19 IPv6: 2001:678:258::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58350 Signature Algorithm: sha256WithRSAEncryption 9a:4b:d9:17:c9:d2:d6:8f:a5:b9:95:4a:79:99:29:18:2a:bc: d9:5e:dd:b0:b9:12:9a:9c:96:87:e9:1f:fa:5e:6b:84:f2:5d: 18:96:fd:c5:2a:e9:28:9d:85:2b:1f:80:d1:b0:bf:ce:6c:df: ce:a6:f6:95:10:38:41:d3:64:87:38:d1:0b:64:ef:b6:84:12: 19:21:2b:41:f3:70:4c:7d:1e:27:0c:d7:34:06:74:67:9e:b8: 7a:21:f4:0a:17:a4:77:f8:17:40:7d:d8:61:3b:ae:8d:09:4d: 92:dc:58:81:28:48:1e:2d:bd:92:af:96:98:9c:24:f7:8e:c0: 75:16:08:ed:25:f6:ae:92:92:6e:1c:a6:cb:20:10:bc:fe:54: 20:18:8e:b0:5d:89:40:97:de:14:18:10:e3:39:cb:59:b3:83: 2e:e5:6a:98:0d:fa:46:e7:af:b8:8a:47:16:4a:cb:bc:88:96: 66:65:5b:a3:00:23:06:55:d7:37:9a:0e:3d:50:03:00:e7:7e: d0:09:39:b6:0e:e5:c1:51:90:fd:73:f2:ce:a1:7c:1f:ad:22: 7d:3f:fc:6f:6e:95:bb:9a:cf:b8:3a:02:a3:b8:56:36:f1:15: cc:75:09:11:ad:36:75:bb:34:bf:38:5f:e3:99:e2:6f:1f:17: 69:0c:9b:1c -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt266JKdxSbdqCE+ZZz1Fm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGM0NWZjMzE0NzEwMjgyNGY5ZDJkNTQ3NzY2YTgwOWFlYWYyNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f62dGkZ6z9SatWm6lVM7cYQZUfw Ghyjsx3MpCDn2xX9vshZxWV82x8kMpdOeM8JJjMljHQwrtIo3UwTCm2nxuK9tDMh nhpWMlu/+vJTq08XsePb5UeDKR14nuryCUOlSEcLlxUpchLwbCC3p0K3IshdrgHD 4auW3gy2dIU890LyVNTdJHIdZwuL2RBP7dRP3N4dwL0RWLkI3wGYDkEDYDZOx28G u6ytfVZHK3yFMfVU+h6KidLPv3zTzJ/Gk+YNRgC8vtLqeCxiQvnKDGqW8NmWcSaJ b1S5cexqb4Dy4QIefNw04LDZRYctitVfFlDUUHFHgnkAbuoX+jwgGmBVwwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFDDEX8MUcQKCT50tVHdmqAmuryRaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzIyYWQ0 Yy0wYjA1LTQ3NGQtOTE5Zi0zYjU0MGE2YmMzZGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvMjJhZDRj LTBiMDUtNDc0ZC05MTlmLTNiNTQwYTZiYzNkYy8xL01NUmZ3eFJ4QW9KUG5TMVVk MmFvQ2E2dkpGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQFsHMAMA8EAgACMAkDBwAgAQZ4AlgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAOPuMA0GCSqGSIb3DQEBCwUAA4IBAQCaS9kXydLW j6W5lUp5mSkYKrzZXt2wuRKanJaH6R/6XmuE8l0Ylv3FKukonYUrH4DRsL/ObN/O pvaVEDhB02SHONELZO+2hBIZIStB83BMfR4nDNc0BnRnnrh6IfQKF6R3+BdAfdhh O66NCU2S3FiBKEgeLb2Sr5aYnCT3jsB1FgjtJfaukpJuHKbLIBC8/lQgGI6wXYlA l94UGBDjOctZs4Mu5WqYDfpG56+4ikcWSsu8iJZmZVujACMGVdc3mg49UAMA537Q CTm2DuXBUZD9c/LOoXwfrSJ9P/xvbpW7ms+4OgKjuFY28RXMdQkRrTZ1uzS/OF/j meJvHxdpDJsc -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:10 2026 by rpki-client