This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer File: MN0LcIUOH5iVZY7avii52NnqAXw.cer (raw, json) Hash identifier: nGP4oDVY5BvA/twWVy1j+jRg/NzgrnGdOS9QaRo9Zx0= Subject key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAE060A9DA846C0B8221FF4406B62C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.37.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e0:60:a9:da:84:6c:0b:82:21:ff:44:06:b6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:05:aa:66:b8:cc:d9:4d:5c:0d:c7:0a:d1: f5:b8:d9:65:f9:8b:1f:54:3f:c2:7f:f3:71:a3:86: f3:44:5b:4a:7d:75:dd:c7:4c:75:56:22:59:63:97: 6c:ee:54:13:52:74:70:48:87:66:69:47:83:46:22: 02:a2:7f:a8:33:0a:2e:10:6b:1e:1e:bd:ab:0d:ef: 8d:d6:5d:7a:61:6f:f9:75:4c:2b:16:31:79:93:ec: da:af:a1:c8:fe:e0:f4:58:ff:3a:84:88:c5:c0:e7: 7c:fb:ac:45:92:1d:62:f3:f1:d4:7f:bf:a8:89:f1: 2b:3b:3e:86:f4:74:19:9a:f6:52:7f:3c:b7:02:18: e5:de:aa:f7:5b:a3:33:2f:2a:17:2d:6b:18:69:04: 21:3f:1b:a8:eb:4e:a4:bb:28:66:5d:0b:38:46:cd: b5:cf:d8:d3:14:21:e6:48:17:b4:89:d9:b8:eb:20: 01:47:5d:83:13:ab:1b:9d:b4:81:76:d6:87:f7:6f: a3:58:e4:1d:2b:31:4a:ad:43:ad:d2:53:90:d6:3d: 31:21:7d:31:36:9b:1a:59:18:eb:30:89:b1:3c:14: 51:3a:40:63:89:82:dc:57:ad:b9:20:56:88:7d:3f: a9:9f:84:a8:de:03:32:88:59:b5:08:b8:a2:74:f7: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.37.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:bb:45:b0:aa:16:10:8d:04:e8:1c:1e:93:41:e1:93:2b:3d: 32:7b:bb:08:b0:ee:fb:6e:26:d5:fd:e8:3d:dd:06:40:24:5a: 4b:82:65:0c:fe:f5:2c:28:cf:cd:4c:ba:ee:9a:2d:49:c8:e1: eb:ad:85:ce:07:a5:31:c4:d3:37:4b:f4:be:75:72:0c:1d:e8: 93:d0:2a:6e:bc:fc:91:e8:eb:61:02:9d:67:26:36:fd:cb:16: 3d:2e:d0:4b:84:8d:7e:a3:4e:34:7c:dd:f9:04:81:d8:46:d2: 8c:90:36:e1:b0:c7:49:e6:77:26:e2:5a:f8:43:4c:75:d9:a4: 09:0f:38:73:3a:6a:f4:eb:98:e7:fe:81:04:9d:65:a6:1a:30: f2:16:fc:9a:a3:32:c8:47:1d:f5:a9:66:a8:9d:e0:21:6e:a7: 09:42:9e:5a:bb:8d:e3:0f:a1:33:ad:e1:8c:f7:48:92:cf:7b: 6f:4c:4a:89:47:b0:a1:c8:9a:95:8c:62:4b:bd:0e:e2:7d:22: 17:20:88:45:50:f8:db:de:12:d6:77:b0:99:21:b5:69:9b:c7: 35:0e:25:a8:ba:59:b0:71:ed:72:cd:4b:8d:ca:b8:c9:a8:fc: 3f:bf:2c:27:be:f4:c8:88:cf:50:56:02:5c:9f:ad:c0:83:6d: bf:6b:44:89 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt26uBgqdqEbAuCIf9EBrYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGRkMGI3MDg1MGUxZjk4OTU2NThlZGFiZTI4YjlkOGQ5ZWEwMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv78Fqma4zNlNXA3HCtH1uNll+Ysf VD/Cf/Nxo4bzRFtKfXXdx0x1ViJZY5ds7lQTUnRwSIdmaUeDRiICon+oMwouEGse Hr2rDe+N1l16YW/5dUwrFjF5k+zar6HI/uD0WP86hIjFwOd8+6xFkh1i8/HUf7+o ifErOz6G9HQZmvZSfzy3Ahjl3qr3W6MzLyoXLWsYaQQhPxuo606kuyhmXQs4Rs21 z9jTFCHmSBe0idm46yABR12DE6sbnbSBdtaH92+jWOQdKzFKrUOt0lOQ1j0xIX0x NpsaWRjrMImxPBRROkBjiYLcV625IFaIfT+pn4So3gMyiFm1CLiidPcnnQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFDDdC3CFDh+YlWWO2r4oudjZ6gF8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2ZjYTJh ZS0yNWZjLTQ0NGItYTg2OC04MTBkYzllMWFhNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZmNhMmFl LTI1ZmMtNDQ0Yi1hODY4LTgxMGRjOWUxYWE1NC8xL01OMExjSVVPSDVpVlpZN2F2 aWk1Mk5ucUFYdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjSUwDQYJKoZIhvcNAQELBQADggEBAEW7RbCq FhCNBOgcHpNB4ZMrPTJ7uwiw7vtuJtX96D3dBkAkWkuCZQz+9Swoz81Muu6aLUnI 4euthc4HpTHE0zdL9L51cgwd6JPQKm68/JHo62ECnWcmNv3LFj0u0EuEjX6jTjR8 3fkEgdhG0oyQNuGwx0nmdybiWvhDTHXZpAkPOHM6avTrmOf+gQSdZaYaMPIW/Jqj MshHHfWpZqid4CFupwlCnlq7jeMPoTOt4Yz3SJLPe29MSolHsKHImpWMYku9DuJ9 IhcgiEVQ+NveEtZ3sJkhtWmbxzUOJai6WbBx7XLNS43KuMmo/D+/LCe+9MiIz1BW AlyfrcCDbb9rRIk= -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:44 2026 by rpki-client