This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer File: MR1it_2fz8h9_qmHUVdnyDjiG7k.cer (raw, json) Hash identifier: InFvkh2J2ZT8z3ap+nkOTIH+EoFloxwbwVnIoMuMWCE= Subject key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C2953F49A966060B208B2F132F625 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39801 AS: 42064 AS: 43100 AS: 51706 AS: 57734 AS: 62228 AS: 199422 AS: 202010 AS: 212557 IP: 37.49.232.0/21 IP: 45.146.32.0/22 IP: 77.95.64.0/21 IP: 185.1.144.0/24 IP: 185.92.20.0/22 IP: 193.105.232.0/24 IP: 193.201.157.192/26 IP: 2001:7f8:47::/48 IP: 2001:7f8:54::/48 IP: 2a00:a4c0::/32 IP: 2a03:9180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:29:53:f4:9a:96:60:60:b2:08:b2:f1:32:f6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:24:30:35:80:c1:01:42:aa:56:05:eb:d2: 7f:f4:4e:0d:f8:99:21:18:f0:24:09:62:2c:96:28: 8a:bf:23:b8:81:3f:76:81:89:55:51:8f:b5:b9:51: 1a:9e:c8:63:c2:86:dd:36:b2:6e:71:f1:fc:48:86: c5:00:15:fe:5c:19:50:d0:f2:b1:80:31:85:1d:1f: 10:b6:a2:c5:1d:06:b3:31:17:0e:22:65:34:0c:ea: 4a:32:e3:30:ce:11:8f:01:5f:42:55:db:97:3d:2c: 08:ea:23:5b:e5:ea:0a:70:f2:11:a3:01:f4:79:31: 09:73:48:0b:74:a2:db:35:41:d0:25:2f:85:a6:34: 2e:4f:e2:43:c1:9e:c3:75:93:28:c8:5a:1a:5b:85: 07:ab:b3:d8:7d:49:6c:3c:7c:e4:76:99:8e:1f:31: bc:ec:a7:78:d2:a5:16:cd:b5:4e:20:53:27:b3:da: 3c:16:9f:10:cb:66:85:83:61:41:70:42:ea:9d:29: 47:bc:24:e3:da:3a:6e:c7:0c:f7:00:ba:dd:35:3c: 0f:c4:45:32:ff:5c:1a:9d:25:5f:c7:43:26:18:12: d7:3f:d8:bf:03:90:39:bf:91:f3:fa:fb:db:98:69: 37:58:8b:98:09:31:8f:ea:ce:41:47:a2:a8:c2:92: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.49.232.0/21 45.146.32.0/22 77.95.64.0/21 185.1.144.0/24 185.92.20.0/22 193.105.232.0/24 193.201.157.192/26 IPv6: 2001:7f8:47::/48 2001:7f8:54::/48 2a00:a4c0::/32 2a03:9180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39801 42064 43100 51706 57734 62228 199422 202010 212557 Signature Algorithm: sha256WithRSAEncryption 50:b4:1d:7c:91:e6:99:74:e7:80:2f:11:54:c2:03:05:3c:47: ca:b7:8e:22:0f:02:1c:01:08:0d:28:83:7e:bf:f2:4b:df:74: 2b:26:a4:50:c9:12:9b:ff:5b:4c:63:f7:9d:1a:4d:d9:ae:46: 1a:0c:e4:94:cd:56:fd:56:ca:4d:51:5a:e5:d8:c1:53:43:d5: 87:c0:4b:0d:5a:69:2e:17:7b:fc:9b:1c:0b:e8:e1:d9:63:37: 3c:cc:43:41:be:bb:05:8c:5c:65:71:6a:ff:d4:be:65:f5:43: ef:2c:41:31:86:7a:0a:c2:34:49:1a:3c:60:54:4c:6f:87:41: ee:2c:d8:4f:c0:88:d0:53:c0:58:4b:74:ed:9f:64:a6:2a:5c: 0f:73:88:91:89:8c:2f:32:49:11:72:04:4f:e0:8d:21:6a:dd: d5:97:b5:88:9d:e4:21:7f:18:ff:98:b9:69:c8:05:e5:55:49: fa:84:5b:d2:46:f6:e4:57:81:ad:2a:03:c1:d9:4f:03:c4:b2: 6e:8e:4c:25:36:5d:0b:f1:d4:01:6a:11:39:03:3e:6f:b4:7d: 16:a0:e4:71:db:f5:26:76:d9:88:a7:c6:d3:81:50:dc:52:94: ee:17:fb:21:4f:7a:0f:52:77:8e:9f:b8:1f:03:f0:c2:34:86: 13:b8:61:e2 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZt9XClT9JqWYGCyCLLxMvYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTFkNjJiN2ZkOWZjZmM4N2RmZWE5ODc1MTU3NjdjODM4ZTIxYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BMkMDWAwQFCqlYF69J/9E4N+Jkh GPAkCWIsliiKvyO4gT92gYlVUY+1uVEanshjwobdNrJucfH8SIbFABX+XBlQ0PKx gDGFHR8QtqLFHQazMRcOImU0DOpKMuMwzhGPAV9CVduXPSwI6iNb5eoKcPIRowH0 eTEJc0gLdKLbNUHQJS+FpjQuT+JDwZ7DdZMoyFoaW4UHq7PYfUlsPHzkdpmOHzG8 7Kd40qUWzbVOIFMns9o8Fp8Qy2aFg2FBcELqnSlHvCTj2jpuxwz3ALrdNTwPxEUy /1wanSVfx0MmGBLXP9i/A5A5v5Hz+vvbmGk3WIuYCTGP6s5BR6KowpKuhwIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFDEdYrf9n8/Iff6ph1FXZ8g44hu5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzU3Njg4 ZS1hOTY0LTQ5MzMtODYzMS04NTBmMzQ5MDYyMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNTc2ODhl LWE5NjQtNDkzMy04NjMxLTg1MGYzNDkwNjIyOS8xL01SMWl0XzJmejhoOV9xbUhV VmRueURqaUc3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUF BwEHAQH/BF0wWzAxBAIAATArAwQDJTHoAwQCLZIgAwQDTV9AAwQAuQGQAwQCuVwU AwQAwWnoAwUGwcmdwDAmBAIAAjAgAwcAIAEH+ABHAwcAIAEH+ABUAwUAKgCkwAMF ACoDkYAwQgYIKwYBBQUHAQgBAf8EMzAxoC8wLQIDAJt5AgMApFACAwCoXAIDAMn6 AgMA4YYCAwDzFAIDAwr+AgMDFRoCAwM+TTANBgkqhkiG9w0BAQsFAAOCAQEAULQd fJHmmXTngC8RVMIDBTxHyreOIg8CHAEIDSiDfr/yS990KyakUMkSm/9bTGP3nRpN 2a5GGgzklM1W/VbKTVFa5djBU0PVh8BLDVppLhd7/JscC+jh2WM3PMxDQb67BYxc ZXFq/9S+ZfVD7yxBMYZ6CsI0SRo8YFRMb4dB7izYT8CI0FPAWEt07Z9kpipcD3OI kYmMLzJJEXIET+CNIWrd1Ze1iJ3kIX8Y/5i5acgF5VVJ+oRb0kb25FeBrSoDwdlP A8Sybo5MJTZdC/HUAWoROQM+b7R9FqDkcdv1JnbZiKfG04FQ3FKU7hf7IU96D1J3 jp+4HwPwwjSGE7hh4g== -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:33 2026 by rpki-client