This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer File: MTTumH4I2LVYP-72IaAxUMTzVDQ.cer (raw, json) Hash identifier: Bvoq1JctBj8xEKtmp4M+/pbetDGda8syHhzlgSJzSGo= Subject key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78EAA68A482A4A0C3FCBC745FB7DD9AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 09:36:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199689 AS: 215318 IP: 91.196.6.0/24 IP: 2a14:1ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ea:a6:8a:48:2a:4a:0c:3f:cb:c7:45:fb:7d:d9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 09:36:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3134ee987e08d8b5583feef621a03150c4f35434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:c3:c7:92:a6:28:6e:7a:fe:83:d3:f5:f6: ab:8b:90:01:1a:73:b8:0c:6e:9b:e6:c7:a4:a7:10: 94:dd:50:d8:71:c0:df:10:79:f8:a7:50:1f:13:30: 1c:06:01:81:af:2b:49:18:09:ff:93:d8:fc:3a:06: c2:f3:17:32:53:8f:89:54:f6:5d:c4:08:04:1f:eb: 90:b4:75:1a:f4:1a:ec:df:78:23:49:ce:f4:b5:55: d6:ac:3b:a4:ef:7c:f2:d1:d8:b7:86:62:e4:ce:43: 74:60:ba:78:30:c8:c4:51:5e:77:c4:17:5a:01:75: 72:2f:92:98:c4:46:0e:4b:2a:13:c3:31:dc:65:56: 65:1b:82:49:7c:0a:1f:c3:8f:36:81:52:0b:1b:8d: b3:f0:30:f0:6b:3e:9d:5f:ac:04:10:55:53:60:0f: 85:10:f7:ad:c8:41:ff:52:72:e8:f9:c8:fa:27:ab: ac:61:0f:e9:3c:d7:e2:14:fc:3d:38:19:f1:6e:f4: c5:91:fa:65:46:97:28:64:d9:be:a0:35:b8:86:ed: e1:b3:a0:3e:c3:d0:ca:a2:0d:8f:f3:83:81:e0:dc: ef:d0:cb:aa:ff:96:cc:d9:2f:e2:d3:2b:f2:ea:2e: 81:a7:d2:a6:64:50:dd:70:b5:ed:60:e9:9b:0f:ee: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.6.0/24 IPv6: 2a14:1ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199689 215318 Signature Algorithm: sha256WithRSAEncryption 4b:8d:22:95:98:b1:3e:41:ba:6f:fc:ad:81:b5:96:a6:63:7f: 18:eb:52:c2:fd:4b:d5:8d:6c:2a:32:66:7d:ed:f4:29:ab:74: fd:35:07:94:3b:40:9f:84:bc:fc:c6:1a:81:4c:5a:82:91:fa: e0:4e:f1:62:05:2d:f5:e1:9a:20:f1:f5:ec:1a:3a:29:6e:c1: 33:f6:35:50:40:8b:83:b8:8b:04:77:07:e6:e7:1d:96:bd:b6: 97:3b:f6:dd:c0:d9:f3:4c:ba:c6:17:b2:b4:5c:28:cf:3f:3a: 66:00:60:66:71:19:fb:ea:c8:a1:1a:e5:cb:17:ab:b6:83:fa: 68:7b:2f:59:89:8f:08:19:85:07:c0:99:96:98:56:cb:75:2a: 19:87:b4:de:d6:96:d2:cd:56:df:34:82:6d:a7:9a:66:f8:f1: 7f:9e:ea:45:bb:75:49:2d:5d:e1:e9:f7:49:b7:ce:0c:4c:b5: ee:5f:48:0b:08:cc:80:e0:8e:4c:60:9e:03:60:86:b7:63:4f: d1:67:b9:3a:dd:59:a5:26:79:f0:7d:f4:53:cc:51:0e:37:77: 01:83:5d:7d:1c:b2:ae:dc:ee:5b:8f:8b:c0:f5:8c:e4:57:f6: 5a:80:8c:c1:af:9e:51:19:29:e9:ce:61:b8:3e:c6:ca:e2:3c: 4d:c4:7a:3e -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt46qaKSCpKDD/Lx0X7fdmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDkzNjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTM0ZWU5ODdlMDhkOGI1NTgzZmVlZjYyMWEwMzE1MGM0ZjM1NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLLDx5KmKG56/oPT9fari5ABGnO4 DG6b5sekpxCU3VDYccDfEHn4p1AfEzAcBgGBrytJGAn/k9j8OgbC8xcyU4+JVPZd xAgEH+uQtHUa9Brs33gjSc70tVXWrDuk73zy0di3hmLkzkN0YLp4MMjEUV53xBda AXVyL5KYxEYOSyoTwzHcZVZlG4JJfAofw482gVILG42z8DDwaz6dX6wEEFVTYA+F EPetyEH/UnLo+cj6J6usYQ/pPNfiFPw9OBnxbvTFkfplRpcoZNm+oDW4hu3hs6A+ w9DKog2P84OB4Nzv0Muq/5bM2S/i0yvy6i6Bp9KmZFDdcLXtYOmbD+6wTQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFDE07ph+CNi1WD/u9iGgMVDE81Q0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFhM2Ji OTNmLTk4YTQtNGM3ZS1hMGUxLTgwNTdhNGYwODZjOS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWEz YmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4NmM5LzAvMzEzNEVFOTg3RTA4 RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME AFvEBjANBAIAAjAHAwUDKhQewDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDDAkC AwNJFjANBgkqhkiG9w0BAQsFAAOCAQEAS40ilZixPkG6b/ytgbWWpmN/GOtSwv1L 1Y1sKjJmfe30Kat0/TUHlDtAn4S8/MYagUxagpH64E7xYgUt9eGaIPH17Bo6KW7B M/Y1UECLg7iLBHcH5ucdlr22lzv23cDZ80y6xheytFwozz86ZgBgZnEZ++rIoRrl yxertoP6aHsvWYmPCBmFB8CZlphWy3UqGYe03taW0s1W3zSCbaeaZvjxf57qRbt1 SS1d4en3SbfODEy17l9ICwjMgOCOTGCeA2CGt2NP0We5Ot1ZpSZ58H30U8xRDjd3 AYNdfRyyrtzuW4+LwPWM5Ff2WoCMwa+eURkp6c5huD7GyuI8TcR6Pg== -----END CERTIFICATE-----Generated at Wed Jan 21 12:47:32 2026 by rpki-client