This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer File: MW9DO7TO3XLYbETthZmQNSK15PE.cer (raw, json) Hash identifier: KkjEomJamEWDpfH18BvsvVYddomJRvZxyCkcMlSa/6A= Subject key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758A31BB822424ABFC6C26324F99999 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61051 IP: 91.209.46.0/24 IP: 2a05:f540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a3:1b:b8:22:42:4a:bf:c6:c2:63:24:f9:99:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:0a:a7:45:ed:85:f8:82:97:7f:2f:a7:4e: e4:52:f5:51:d9:d0:74:1c:66:e1:8d:32:e9:f1:37: 7c:80:0d:f8:a1:08:59:7b:d9:1f:8e:ce:fd:9c:f4: 93:1c:b7:47:18:67:25:33:72:bd:5a:cf:22:83:70: 90:43:59:5a:3a:08:db:43:c5:07:cf:b6:04:4d:42: 84:86:df:db:63:f9:db:2c:cd:12:d8:a0:0f:8f:a9: 2b:c4:74:59:2d:df:4e:a8:0d:dd:53:79:3d:92:44: 58:00:06:e3:7f:9d:8b:30:b5:83:4e:33:1f:07:47: 2f:85:c0:b2:ef:36:9a:f3:41:d0:53:64:9e:b1:fb: 48:5a:6c:7c:26:b2:28:dd:e9:66:f0:d5:05:da:e3: 86:f1:ca:d2:c0:c7:4d:95:bc:95:73:a6:77:67:4f: 0e:f4:2d:dc:53:a2:91:ae:e5:56:d4:3a:76:5d:53: f6:9a:ed:28:74:da:72:c0:a4:42:7b:48:0c:24:79: f6:48:82:1f:b1:2a:21:e5:4c:04:58:97:7f:13:84: 7e:52:c6:3b:85:b4:69:87:f4:bb:23:b5:86:46:4a: e1:19:e5:8b:98:e5:55:22:06:0f:04:7a:0e:22:9a: 1d:cb:3e:00:ff:76:92:04:91:1d:3e:41:c7:1b:02: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.46.0/24 IPv6: 2a05:f540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61051 Signature Algorithm: sha256WithRSAEncryption a3:70:3f:91:c7:21:14:0a:6f:b0:c7:52:12:42:cf:ac:93:02: 6b:1f:1a:9a:02:78:b0:08:80:0b:9c:3a:7f:ec:5b:4b:fa:98: a6:e6:36:83:b0:7b:aa:ab:bf:a7:1b:b2:7d:9e:20:68:61:b7: 2b:d5:0b:8d:99:3f:a4:9e:71:26:c4:46:98:af:ae:94:7e:33: ef:f2:c2:2b:d2:5e:08:9e:8b:6b:c6:d1:5d:eb:59:15:30:e7: 30:ba:a3:48:e9:14:65:5f:3f:67:9d:0f:98:47:32:13:a8:16: ee:f6:62:2c:d8:23:cd:f0:53:58:5b:dc:05:e5:17:41:a6:16: 66:7d:54:46:82:5c:ec:10:62:63:01:51:3f:84:ea:c8:ed:1a: ce:36:0c:de:b0:a9:b2:13:47:20:3f:c8:29:c6:36:d1:03:df: f0:a7:d8:6c:ae:05:1a:da:ac:da:67:99:dd:a8:40:0d:5c:af: d7:20:02:c8:1b:6f:a9:1c:51:31:d0:83:07:8f:87:ab:8d:b1: 04:74:35:1e:77:bd:15:75:07:de:7b:33:91:81:b1:99:f1:43: 8b:8c:62:f3:2a:6f:69:90:8e:51:44:06:f8:57:74:22:ba:0e: 23:be:c6:03:01:f6:44:23:40:52:b9:34:2c:97:0c:c8:03:a7: 4c:b5:3a:2f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WKMbuCJCSr/GwmMk+ZmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTZmNDMzYmI0Y2VkZDcyZDg2YzQ0ZWQ4NTk5OTAzNTIyYjVlNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVwKp0XthfiCl38vp07kUvVR2dB0 HGbhjTLp8Td8gA34oQhZe9kfjs79nPSTHLdHGGclM3K9Ws8ig3CQQ1laOgjbQ8UH z7YETUKEht/bY/nbLM0S2KAPj6krxHRZLd9OqA3dU3k9kkRYAAbjf52LMLWDTjMf B0cvhcCy7zaa80HQU2SesftIWmx8JrIo3elm8NUF2uOG8crSwMdNlbyVc6Z3Z08O 9C3cU6KRruVW1Dp2XVP2mu0odNpywKRCe0gMJHn2SIIfsSoh5UwEWJd/E4R+UsY7 hbRph/S7I7WGRkrhGeWLmOVVIgYPBHoOIpodyz4A/3aSBJEdPkHHGwLsLwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDFvQzu0zt1y2GxE7YWZkDUiteTxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzczYzgy OS0xNTE4LTRkNDEtOTJjMi03ZTBhYjhiY2FlODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvNzNjODI5 LTE1MTgtNGQ0MS05MmMyLTdlMGFiOGJjYWU4OS8xL01XOURPN1RPM1hMWWJFVHRo Wm1RTlNLMTVQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW9EuMA0EAgACMAcDBQMqBfVAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDuezANBgkqhkiG9w0BAQsFAAOCAQEAo3A/kcchFApv sMdSEkLPrJMCax8amgJ4sAiAC5w6f+xbS/qYpuY2g7B7qqu/pxuyfZ4gaGG3K9UL jZk/pJ5xJsRGmK+ulH4z7/LCK9JeCJ6La8bRXetZFTDnMLqjSOkUZV8/Z50PmEcy E6gW7vZiLNgjzfBTWFvcBeUXQaYWZn1URoJc7BBiYwFRP4TqyO0azjYM3rCpshNH ID/IKcY20QPf8KfYbK4FGtqs2meZ3ahADVyv1yACyBtvqRxRMdCDB4+Hq42xBHQ1 Hne9FXUH3nszkYGxmfFDi4xi8ypvaZCOUUQG+Fd0IroOI77GAwH2RCNAUrk0LJcM yAOnTLU6Lw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:59 2026 by rpki-client