This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer File: MOEXssTnX9dTA9FNsD6eL0tyK4g.cer (raw, json) Hash identifier: JLNyn8OR0ATmFGDlQc7Qmm4ewjOXshF4VC8vfmg8c4Q= Subject key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F66FC248B00B08E914FE8BA3534D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213481 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f6:6f:c2:48:b0:0b:08:e9:14:fe:8b:a3:53:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:fb:89:9b:bd:1c:1e:e3:05:53:3b:10:97: 9e:b7:7d:7f:cd:b9:74:1d:4d:4b:72:cf:58:e5:ec: 95:00:bb:cc:03:2e:77:b2:b8:80:69:56:af:0c:6e: c4:e9:46:9f:a1:1e:56:6f:64:ba:08:9e:8c:90:3d: 64:e3:9e:3f:90:f1:69:1d:bc:cc:13:59:2a:92:08: a1:50:22:2f:36:30:e5:f0:8e:62:83:8a:03:4a:9a: 77:13:9f:4e:ba:af:73:2d:f0:a8:78:5b:42:c2:67: a8:4e:a1:da:29:15:80:02:7c:49:26:3a:9c:c9:76: 29:f0:c5:41:4e:22:52:56:65:bd:99:bc:45:57:0f: bc:c8:ee:53:6b:c8:71:1d:ae:79:7f:22:a6:1d:e2: 51:4c:3b:4c:4d:75:f3:f4:32:40:c6:92:d3:9a:09: 79:29:a6:63:5e:27:23:8c:ac:0d:4a:2d:56:52:1c: bb:81:f1:3f:94:60:53:57:d4:bf:04:e1:63:40:e1: 34:84:fd:c4:6d:5a:66:58:66:67:45:77:21:67:30: 4f:45:21:6d:f9:3f:33:ff:df:6a:26:9d:59:51:6e: 0c:6d:f6:2b:1a:0b:4b:64:ce:85:31:4d:c9:39:2f: 60:e7:9d:04:2b:84:34:46:5d:88:05:98:7d:59:40: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213481 Signature Algorithm: sha256WithRSAEncryption 56:aa:59:90:bd:c4:4a:4d:cc:1f:e0:8f:73:4d:cb:41:2d:70: 08:06:1c:9b:f6:c7:af:0f:68:ad:ac:e8:98:b4:c6:26:70:e6: 12:30:c2:96:16:50:e9:cd:f3:92:b8:da:d4:00:ab:f6:53:94: 32:ba:64:a0:61:c1:d8:a9:91:aa:fc:8b:36:80:a7:21:a7:b8: 8f:f7:b4:20:11:b6:64:d9:54:23:95:ff:23:bf:52:94:31:b2: 42:ec:58:99:05:13:68:77:c8:13:c2:81:69:1b:c5:bd:1f:8d: 87:51:37:b1:c3:f2:27:85:29:fb:8f:63:d9:02:41:1b:e3:33: c9:7f:e0:c0:fb:41:ac:e2:b1:3e:a9:5d:d0:a1:12:76:d2:b0: 19:dd:60:eb:50:74:d3:cf:aa:3b:2a:64:c6:ae:9f:aa:9a:ab: 33:78:4c:5e:67:a6:87:df:67:8e:96:dd:6b:82:a9:77:a3:3b: 00:72:31:0f:f0:1c:c6:2e:97:c8:a8:51:7d:b4:7d:af:b1:ff: 55:9b:0b:52:5c:ea:b9:47:5d:14:2b:6c:b0:93:e3:7f:76:fa: 54:6a:54:8e:92:e4:ff:dc:ed:49:73:6a:eb:b4:46:09:b3:44: 0a:38:e1:da:a7:db:09:fd:6c:ce:4a:a4:a2:64:a8:aa:1a:d7: 99:95:98:42 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FfZvwkiwCwjpFP6Lo1NNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGUxMTdiMmM0ZTc1ZmQ3NTMwM2QxNGRiMDNlOWUyZjRiNzIyYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4L7iZu9HB7jBVM7EJeet31/zbl0 HU1Lcs9Y5eyVALvMAy53sriAaVavDG7E6UafoR5Wb2S6CJ6MkD1k454/kPFpHbzM E1kqkgihUCIvNjDl8I5ig4oDSpp3E59Ouq9zLfCoeFtCwmeoTqHaKRWAAnxJJjqc yXYp8MVBTiJSVmW9mbxFVw+8yO5Ta8hxHa55fyKmHeJRTDtMTXXz9DJAxpLTmgl5 KaZjXicjjKwNSi1WUhy7gfE/lGBTV9S/BOFjQOE0hP3EbVpmWGZnRXchZzBPRSFt +T8z/99qJp1ZUW4MbfYrGgtLZM6FMU3JOS9g550EK4Q0Rl2IBZh9WUD/SwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDDhF7LE51/XUwPRTbA+ni9LciuIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1L2I1MDdk Ni04Y2NkLTQ3YTQtOTkwZC0wMDJjZTBjN2Y3MGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvYjUwN2Q2 LThjY2QtNDdhNC05OTBkLTAwMmNlMGM3ZjcwZi8xL01PRVhzc1RuWDlkVEE5Rk5z RDZlTDB0eUs0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNB6TANBgkqhkiG9w0BAQsFAAOCAQEAVqpZkL3ESk3M H+CPc03LQS1wCAYcm/bHrw9orazomLTGJnDmEjDClhZQ6c3zkrja1ACr9lOUMrpk oGHB2KmRqvyLNoCnIae4j/e0IBG2ZNlUI5X/I79SlDGyQuxYmQUTaHfIE8KBaRvF vR+Nh1E3scPyJ4Up+49j2QJBG+MzyX/gwPtBrOKxPqld0KESdtKwGd1g61B008+q Oypkxq6fqpqrM3hMXmemh99njpbda4Kpd6M7AHIxD/Acxi6XyKhRfbR9r7H/VZsL UlzquUddFCtssJPjf3b6VGpUjpLk/9ztSXNq67RGCbNECjjh2qfbCf1szkqkomSo qhrXmZWYQg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:45 2026 by rpki-client