This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer File: MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer (raw, json) Hash identifier: xEeEZxK38Ld0C2L6ushJRaizOlJexAbwRcNherAX2dM= Subject key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E38EC66950404A361C7AF39B154E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197368 IP: 91.220.44.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:38:ec:66:95:04:04:a3:61:c7:af:39:b1:54:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=310e2e9fb70668c796adce877b21e09a8a1ad029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:e2:83:32:8f:76:49:0a:a2:68:db:43:d6: 3c:a5:59:5a:60:88:10:9f:79:f3:df:88:06:7a:a6: 2a:01:51:3a:31:16:11:a2:ee:51:20:e7:35:b9:23: 04:f0:7b:96:0c:c1:d7:d5:b3:c9:86:00:f5:59:c9: 39:33:ad:84:d0:02:41:09:c2:32:5c:fd:e9:08:29: cc:d0:52:27:f7:5d:6d:d7:6f:0b:e5:75:13:d0:70: e3:e3:dd:ef:ee:3d:b7:1f:4e:13:c0:1a:20:ef:86: 19:6b:a6:8e:8e:55:79:64:b8:df:e2:f5:ff:d5:f1: 90:ce:46:7d:30:3d:a8:3e:28:ae:40:16:00:b0:b4: 76:3a:f1:e2:ea:91:b0:39:3f:10:33:72:ff:89:1e: 89:09:66:60:5e:8d:df:e1:31:b0:2c:36:67:4e:bf: 95:b1:bd:e0:ad:10:69:af:a6:c3:c5:ba:f9:df:aa: 07:ee:00:0a:f1:39:0a:18:dd:a2:e9:09:73:90:d7: 52:85:62:90:d4:68:6c:73:e9:24:79:82:e9:77:c5: 30:2b:35:44:ad:b6:14:c4:09:b7:71:53:4a:62:89: d8:e7:33:07:80:f2:80:76:b6:04:39:84:2e:9d:f9: ca:45:bb:33:9d:a2:ab:8a:61:21:3b:e7:44:14:6e: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.44.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197368 Signature Algorithm: sha256WithRSAEncryption 4d:b4:76:27:67:81:eb:45:50:31:5c:ad:28:9a:a1:8a:be:27: 48:02:ce:4e:c5:55:e9:45:82:a6:67:f2:c7:59:20:2b:43:08: 9a:c3:a2:38:ae:a2:5c:0d:77:63:73:e6:56:86:f4:89:8c:19: 7d:2f:77:b2:b2:a7:18:ba:43:33:da:f0:c6:7a:ee:f6:53:f0: b7:79:14:35:bb:f8:47:0d:f8:12:70:54:34:7f:b4:a5:1c:11: e4:32:2d:06:56:4c:6b:18:4b:13:ff:29:8e:2e:ab:e7:32:30: 0f:a8:04:f8:9d:21:a6:f6:31:e2:f3:38:b7:03:e1:eb:47:4b: c2:a7:ae:8f:6e:73:6a:0a:c4:97:a4:71:1a:27:b4:32:a7:34: 90:e0:e0:98:e1:91:72:45:76:39:63:36:33:2d:1a:0e:24:df: 4c:8a:36:5f:ef:f2:90:07:34:a1:77:fc:13:e6:83:c3:5d:6d: dd:37:97:86:14:a1:19:72:08:79:d5:31:80:82:e6:05:fa:d6: 97:27:0b:ff:90:36:da:6d:2e:08:22:d7:0a:ce:a0:a4:dd:f4: e3:14:af:da:53:83:ee:34:0f:b1:86:32:e6:d0:49:9a:2b:31: 20:ab:b5:91:b4:d6:3c:17:21:a4:51:e2:fc:17:bb:98:4b:95: 0f:a7:f0:8e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fjjsZpUEBKNhx685sVTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTBlMmU5ZmI3MDY2OGM3OTZhZGNlODc3YjIxZTA5YThhMWFkMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0figzKPdkkKomjbQ9Y8pVlaYIgQ n3nz34gGeqYqAVE6MRYRou5RIOc1uSME8HuWDMHX1bPJhgD1Wck5M62E0AJBCcIy XP3pCCnM0FIn911t128L5XUT0HDj493v7j23H04TwBog74YZa6aOjlV5ZLjf4vX/ 1fGQzkZ9MD2oPiiuQBYAsLR2OvHi6pGwOT8QM3L/iR6JCWZgXo3f4TGwLDZnTr+V sb3grRBpr6bDxbr536oH7gAK8TkKGN2i6QlzkNdShWKQ1Ghsc+kkeYLpd8UwKzVE rbYUxAm3cVNKYonY5zMHgPKAdrYEOYQunfnKRbsznaKrimEhO+dEFG4AdQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDEOLp+3BmjHlq3Oh3sh4JqKGtApMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2Q5ZDgy ZC0xY2E0LTQ4MjQtYTkyYy1jYTU1ZWZjNzc1MmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvZDlkODJk LTFjYTQtNDgyNC1hOTJjLWNhNTVlZmM3NzUyZC8xL01RNHVuN2NHYU1lV3JjNkhl eUhnbW9vYTBDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9wsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMC+DANBgkqhkiG9w0BAQsFAAOCAQEATbR2J2eB60VQMVytKJqhir4nSALOTsVV 6UWCpmfyx1kgK0MImsOiOK6iXA13Y3PmVob0iYwZfS93srKnGLpDM9rwxnru9lPw t3kUNbv4Rw34EnBUNH+0pRwR5DItBlZMaxhLE/8pji6r5zIwD6gE+J0hpvYx4vM4 twPh60dLwqeuj25zagrEl6RxGie0Mqc0kODgmOGRckV2OWM2My0aDiTfTIo2X+/y kAc0oXf8E+aDw11t3TeXhhShGXIIedUxgILmBfrWlycL/5A22m0uCCLXCs6gpN30 4xSv2lOD7jQPsYYy5tBJmisxIKu1kbTWPBchpFHi/Be7mEuVD6fwjg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:29 2026 by rpki-client