This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer File: MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer (raw, json) Hash identifier: +3uyWwl5xKorn/s4/1E8MOird+SJj3Rfgg8IJCwCTPs= Subject key identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355DEAD366BF90682C8A417C9A4795 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206869 IP: 195.138.56.0/24 IP: 2a06:d40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5d:ea:d3:66:bf:90:68:2c:8a:41:7c:9a:47:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3109a8d70fa4478935b05c0621f6889552405daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:fe:a6:35:a8:dc:10:41:00:6c:95:0e:c1: 08:45:af:92:78:cf:24:91:5d:11:82:7f:b4:c0:66: 16:f2:ad:93:d3:e9:e7:0d:75:6d:e4:7e:3e:9f:1d: 86:67:c0:2a:c2:7a:74:2b:0f:15:c1:22:c8:27:a3: 92:99:b4:15:64:07:5d:21:10:47:52:43:ec:59:7f: b5:e5:a6:e8:53:55:fd:91:9b:1f:d8:88:4f:85:c4: 23:b6:bd:94:c6:4a:fa:50:8d:b3:4c:75:f3:af:64: be:ca:59:11:82:85:d9:fd:ec:23:45:75:83:1b:96: f6:42:09:5a:28:cc:af:c9:e3:1e:fb:a5:91:63:74: 9b:b3:9a:37:5b:7f:7c:b4:2a:10:ea:3b:5a:25:cb: a0:3b:b0:2a:84:0d:e5:a8:a0:e1:8b:6b:75:d4:c5: 0c:bd:f6:d9:09:3f:cf:1b:8f:db:66:ef:a8:d4:fc: 0d:89:1c:c1:3d:aa:7e:e1:76:05:cd:c8:15:45:d9: 35:bd:ca:a9:2a:2c:9b:a2:55:e4:5c:63:cb:1d:32: 97:ce:ca:01:e8:41:5a:c6:e0:ea:f2:a8:5e:36:78: fe:05:a3:9e:f2:38:ef:62:97:a7:9c:61:8d:95:ee: 47:aa:8e:3e:b9:ac:e2:7a:00:4a:2e:06:17:1b:f7: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.138.56.0/24 IPv6: 2a06:d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206869 Signature Algorithm: sha256WithRSAEncryption ae:78:37:3c:d9:3a:ec:bc:c3:d4:fc:86:11:2b:55:1f:48:ad: 6a:99:45:df:38:66:44:be:29:26:e5:6d:d2:d0:ad:80:76:33: 88:c8:48:f1:52:bc:2d:f0:6e:25:0a:d2:66:0e:40:0d:ba:b8: f1:06:7c:ef:99:33:d8:d7:7d:67:96:2e:53:38:46:e5:69:0e: 8f:07:b0:76:70:fc:de:30:68:12:ab:1e:20:2f:12:64:59:e4: 6c:08:b6:ca:2a:28:2d:bd:9c:ed:65:ec:9c:67:16:9e:fe:4a: 16:1e:b5:e8:13:5c:89:4c:76:a3:29:35:6c:52:61:5c:ed:14: 15:9d:d7:1a:a9:0e:30:26:a2:ac:d3:c5:a5:4d:d7:0a:b5:59: b0:64:56:95:ea:22:a5:a9:4f:c5:02:fb:ef:ae:70:b8:3d:12: 53:7b:6e:a2:8d:37:36:79:28:9b:84:f0:f1:c5:9a:b7:55:26: 03:aa:d8:11:84:5c:b0:d4:7c:81:66:4d:16:b2:ea:06:4b:dd: d8:47:06:92:f5:06:08:9e:f4:b7:95:c5:1e:0f:63:20:53:05: 24:81:82:8d:d5:27:00:95:09:4a:1e:c6:cb:a6:d4:83:72:20: 6c:4f:79:de:d4:f7:31:f1:83:4b:9d:79:43:8d:de:ae:c1:8e: de:cf:a3:c7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NV3q02a/kGgsikF8mkeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTA5YThkNzBmYTQ0Nzg5MzViMDVjMDYyMWY2ODg5NTUyNDA1ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6j+pjWo3BBBAGyVDsEIRa+SeM8k kV0Rgn+0wGYW8q2T0+nnDXVt5H4+nx2GZ8Aqwnp0Kw8VwSLIJ6OSmbQVZAddIRBH UkPsWX+15aboU1X9kZsf2IhPhcQjtr2Uxkr6UI2zTHXzr2S+ylkRgoXZ/ewjRXWD G5b2QglaKMyvyeMe+6WRY3Sbs5o3W398tCoQ6jtaJcugO7AqhA3lqKDhi2t11MUM vfbZCT/PG4/bZu+o1PwNiRzBPap+4XYFzcgVRdk1vcqpKiybolXkXGPLHTKXzsoB 6EFaxuDq8qheNnj+BaOe8jjvYpennGGNle5Hqo4+uaziegBKLgYXG/eruwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDEJqNcPpEeJNbBcBiH2iJVSQF2vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzEwNmIz Zi01NWEzLTQ1NTgtODAxMy00YmVlMzI3NGM2OTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMTA2YjNm LTU1YTMtNDU1OC04MDEzLTRiZWUzMjc0YzY5OC8xL01RbW8xdy1rUjRrMXNGd0dJ ZmFJbFZKQVhhOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw4o4MA0EAgACMAcDBQAqBg1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMoFTANBgkqhkiG9w0BAQsFAAOCAQEArng3PNk67LzD 1PyGEStVH0itaplF3zhmRL4pJuVt0tCtgHYziMhI8VK8LfBuJQrSZg5ADbq48QZ8 75kz2Nd9Z5YuUzhG5WkOjwewdnD83jBoEqseIC8SZFnkbAi2yiooLb2c7WXsnGcW nv5KFh616BNciUx2oyk1bFJhXO0UFZ3XGqkOMCairNPFpU3XCrVZsGRWleoipalP xQL7765wuD0SU3tuoo03Nnkom4Tw8cWat1UmA6rYEYRcsNR8gWZNFrLqBkvd2EcG kvUGCJ70t5XFHg9jIFMFJIGCjdUnAJUJSh7Gy6bUg3IgbE953tT3MfGDS515Q43e rsGO3s+jxw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:09 2026 by rpki-client