This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer File: MUTmCeNhkT48Owp410hqpFtWJAE.cer (raw, json) Hash identifier: XmXJ5B3y9yemHDAbz3mxILQBdSkJn8Pwt7DuBbXXF/0= Subject key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11CA89A497844A867D4BD541723BCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25319 AS: 28990 AS: 39279 IP: 89.32.224.0/20 IP: 185.33.104.0/22 IP: 185.108.36.0/22 IP: 185.108.136.0/22 IP: 185.108.144.0/22 IP: 185.108.152.0/22 IP: 185.108.180.0/22 IP: 217.26.144.0/20 IP: 2a00:c5a0::/29 IP: 2a02:fd0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ca:89:a4:97:84:4a:86:7d:4b:d5:41:72:3b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3144e609e361913e3c3b0a78d7486aa45b562401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:59:07:9d:99:d8:71:b6:8c:8c:77:fd:f3: 64:6e:ea:f4:d6:68:16:d6:6f:a2:f0:1c:b9:3a:55: b8:36:dd:56:dd:7c:cf:72:7c:52:de:c4:f5:8b:1e: 6a:3d:a0:ca:ee:d0:55:03:4a:a1:81:71:b3:c3:0b: 25:ea:0c:3a:62:39:67:08:4a:b4:ab:78:15:7f:f6: bb:0d:94:9d:0a:90:94:ec:84:0b:58:bd:fe:3a:79: 23:09:cd:91:aa:b1:1f:3f:1b:46:68:64:7a:e9:66: 3c:70:0d:46:be:63:57:26:a6:b2:58:ca:98:15:f4: ea:c8:5e:d8:5e:d2:f6:a9:67:74:56:ed:48:3d:0d: be:ba:b5:80:e7:38:7b:c5:18:cc:65:df:fc:ab:c6: ac:a0:83:3d:bd:7f:d0:7f:94:66:af:c8:92:1e:28: 7b:e3:37:0b:b5:82:e1:df:02:ea:10:c9:2f:59:ce: 6e:dd:48:ee:4a:7b:2c:d7:80:90:1c:e0:c9:98:72: 89:04:d6:22:a6:da:45:67:cc:d1:26:9c:e1:93:44: d9:3f:ba:e2:c0:5c:6b:4f:0b:c4:66:4d:b6:19:b5: 6f:af:aa:29:39:00:69:c1:82:45:ff:3e:31:fb:53: fa:0e:68:50:d3:60:06:67:31:4d:3f:b3:41:89:95: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.32.224.0/20 185.33.104.0/22 185.108.36.0/22 185.108.136.0/22 185.108.144.0/22 185.108.152.0/22 185.108.180.0/22 217.26.144.0/20 IPv6: 2a00:c5a0::/29 2a02:fd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25319 28990 39279 Signature Algorithm: sha256WithRSAEncryption 8f:82:3f:df:af:37:c6:ff:e6:f6:2a:e5:b7:52:78:a9:ff:be: ee:d7:70:89:92:2c:e7:63:37:52:99:0e:b7:e1:68:d9:76:5d: 32:c8:64:e9:ca:f7:40:27:31:a3:97:9b:90:19:94:22:f4:3a: 7e:cd:20:cf:d6:38:ec:4c:68:4c:dd:69:4e:ed:8c:2a:ea:2b: af:5e:33:87:43:41:8e:79:ea:dd:3b:ff:03:b7:ac:e9:5b:e4: 25:e2:b0:f2:ae:f5:37:dd:40:06:b5:c7:7b:ba:50:c2:b2:43: fa:70:2e:97:8f:bb:90:15:2e:10:cc:de:7f:56:fe:b5:84:b7: b4:02:d0:f6:90:39:97:d4:15:6f:87:d2:29:8f:fd:c1:03:18: 61:3c:41:79:1d:87:a9:a8:49:13:d6:a3:b3:d7:cc:5d:68:3a: 29:03:7f:15:b2:c4:87:16:93:45:d3:32:1d:07:d6:ac:ae:4f: 58:ef:5c:6e:29:94:90:87:9e:1a:0a:24:f9:c5:e7:94:22:f9: d2:d9:2f:05:3f:71:57:2f:0b:04:13:73:55:52:d8:6d:72:ff: 3f:e6:ba:67:99:20:00:01:35:75:0f:d6:7a:56:f3:37:2c:74: 72:9f:c8:26:1a:5a:14:07:17:0a:0d:08:c5:45:d0:c4:07:93: 58:8e:df:c4 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZt8EcqJpJeESoZ9S9VBcjvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTQ0ZTYwOWUzNjE5MTNlM2MzYjBhNzhkNzQ4NmFhNDViNTYyNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt1ZB52Z2HG2jIx3/fNkbur01mgW 1m+i8By5OlW4Nt1W3XzPcnxS3sT1ix5qPaDK7tBVA0qhgXGzwwsl6gw6YjlnCEq0 q3gVf/a7DZSdCpCU7IQLWL3+OnkjCc2RqrEfPxtGaGR66WY8cA1GvmNXJqayWMqY FfTqyF7YXtL2qWd0Vu1IPQ2+urWA5zh7xRjMZd/8q8asoIM9vX/Qf5Rmr8iSHih7 4zcLtYLh3wLqEMkvWc5u3UjuSnss14CQHODJmHKJBNYiptpFZ8zRJpzhk0TZP7ri wFxrTwvEZk22GbVvr6opOQBpwYJF/z4x+1P6DmhQ02AGZzFNP7NBiZWLgQIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFDFE5gnjYZE+PDsKeNdIaqRbViQBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2NhYTJi Ni04N2U4LTRlMjQtYTQ0Ni03NzU4ODhhODcxOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvY2FhMmI2 LTg3ZTgtNGUyNC1hNDQ2LTc3NTg4OGE4NzE5NC8xL01VVG1DZU5oa1Q0OE93cDQx MGhxcEZ0V0pBRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQEWSDgAwQCuSFoAwQCuWwkAwQCuWyIAwQCuWyQ AwQCuWyYAwQCuWy0AwQE2RqQMBQEAgACMA4DBQMqAMWgAwUAKgIP0DAiBggrBgEF BQcBCAEB/wQTMBGgDzANAgJi5wICcT4CAwCZbzANBgkqhkiG9w0BAQsFAAOCAQEA j4I/3683xv/m9irlt1J4qf++7tdwiZIs52M3UpkOt+Fo2XZdMshk6cr3QCcxo5eb kBmUIvQ6fs0gz9Y47ExoTN1pTu2MKuorr14zh0NBjnnq3Tv/A7es6VvkJeKw8q71 N91ABrXHe7pQwrJD+nAul4+7kBUuEMzef1b+tYS3tALQ9pA5l9QVb4fSKY/9wQMY YTxBeR2HqahJE9ajs9fMXWg6KQN/FbLEhxaTRdMyHQfWrK5PWO9cbimUkIeeGgok +cXnlCL50tkvBT9xVy8LBBNzVVLYbXL/P+a6Z5kgAAE1dQ/WelbzNyx0cp/IJhpa FAcXCg0IxUXQxAeTWI7fxA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:36:30 2026 by rpki-client