This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer File: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer (raw, json) Hash identifier: 3B+CZSaOrrFba1rpfFVEYBwnmXZnOl8Bh7hdFBF/2ps= Subject key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791127776768701149F861358182EE91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210444 IP: 194.9.90.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:27:77:67:68:70:11:49:f8:61:35:81:82:ee:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:09:ef:1c:fb:0b:3e:f5:d2:64:35:e8:80:a7: 9b:fc:d2:96:d9:75:71:43:d9:da:6d:17:6b:0c:e3: dd:b0:c2:a5:df:70:31:7b:02:d2:79:72:bc:e8:25: 85:c5:8a:2a:89:2b:e9:0f:a3:05:5f:ac:74:cd:5e: 63:2f:0a:39:89:f1:c0:6d:75:7a:0e:24:56:41:3b: 58:a3:9c:4a:2d:11:4d:22:bd:1b:18:d8:f0:e3:22: a5:00:e4:15:0c:44:81:d7:ff:c3:c0:a0:6c:cb:56: b7:18:26:b9:cb:a6:fe:dd:19:e8:5d:86:87:46:fa: 6d:03:5e:c4:e2:57:f5:ed:59:01:0f:b4:35:33:48: 3e:da:e6:02:7a:3a:57:54:f3:b0:a1:39:ac:4b:07: 3d:fd:4e:9c:dc:38:95:14:f0:1a:15:ba:1b:d1:70: dc:b6:ce:0b:6e:77:80:40:e3:a7:9e:56:42:1a:cb: 82:fb:24:3f:0a:3f:be:c3:7b:32:e3:09:ee:67:ff: e6:ed:2a:b1:4d:97:1c:dd:a2:4d:ef:f0:3f:3a:ff: 1a:1b:95:f3:6d:7e:60:18:c3:c6:13:34:90:61:f6: 8f:1f:97:2a:4d:2d:2c:92:50:2f:7b:98:98:cb:ee: 62:5d:91:67:72:4d:c9:5d:78:3b:0f:c6:b9:c1:33: a5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.90.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210444 Signature Algorithm: sha256WithRSAEncryption af:43:27:f6:98:d6:4c:7e:b5:5c:54:46:01:89:ba:51:26:44: 1f:ec:3d:3e:6b:a8:0c:2c:c7:5f:c4:c4:19:28:b2:3f:33:bb: 19:85:9f:4d:ec:cb:4a:8c:57:1b:25:4f:90:2c:d6:cc:93:1b: 82:89:f0:c1:d1:93:97:0e:9c:56:e6:f0:41:c2:02:d3:3b:6f: e2:15:e1:05:10:d4:40:50:f0:b8:aa:11:6e:24:43:3a:9e:f9: a5:5e:6d:76:c2:72:14:d6:4e:48:1f:b3:11:d7:dd:4c:e7:f3: 75:c5:1b:0e:eb:f2:b2:c2:6e:3f:c6:c7:77:10:90:67:a9:5e: 3c:9c:22:a9:b2:95:4c:59:88:73:a9:5b:8b:34:a1:25:b0:15: c9:e8:68:32:f5:44:e0:ce:04:66:bb:6e:64:2d:cd:d8:63:98: bf:1f:e7:bd:d7:d3:b1:75:7d:99:93:53:92:c6:06:56:7a:a5: 8d:f3:12:47:42:f0:1b:a2:31:36:16:a7:06:90:5e:00:f1:cd: 67:ec:0a:7a:4b:46:d7:8b:1b:33:79:f4:d8:c3:3b:9d:22:6e: 23:1c:37:0a:dd:5f:d0:7f:ec:50:89:1a:4e:2d:94:fd:e8:c5: 71:cf:eb:c1:34:fa:57:77:52:eb:ed:a0:72:74:da:6c:50:f9: 24:02:b0:7a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ESd3Z2hwEUn4YTWBgu6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTZiM2YzMzRlMjY5MTEwNjkwZTllYzZhN2E1ODVkZmU0ZmU4NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQnvHPsLPvXSZDXogKeb/NKW2XVx Q9nabRdrDOPdsMKl33AxewLSeXK86CWFxYoqiSvpD6MFX6x0zV5jLwo5ifHAbXV6 DiRWQTtYo5xKLRFNIr0bGNjw4yKlAOQVDESB1//DwKBsy1a3GCa5y6b+3RnoXYaH RvptA17E4lf17VkBD7Q1M0g+2uYCejpXVPOwoTmsSwc9/U6c3DiVFPAaFbob0XDc ts4LbneAQOOnnlZCGsuC+yQ/Cj++w3sy4wnuZ//m7SqxTZcc3aJN7/A/Ov8aG5Xz bX5gGMPGEzSQYfaPH5cqTS0sklAve5iYy+5iXZFnck3JXXg7D8a5wTOliQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDFrPzNOJpEQaQ6exqelhd/k/ocEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzhjY2Q2 ZC0xMzRjLTRlYmItYWVmYy1lYzYwMzkyNjYwMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvOGNjZDZk LTEzNGMtNGViYi1hZWZjLWVjNjAzOTI2NjAwYi8xL01Xc19NMDRta1JCcERwN0dw NldGMy1ULWh3US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwglaMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM2DDANBgkqhkiG9w0BAQsFAAOCAQEAr0Mn9pjWTH61XFRGAYm6USZEH+w9Pmuo DCzHX8TEGSiyPzO7GYWfTezLSoxXGyVPkCzWzJMbgonwwdGTlw6cVubwQcIC0ztv 4hXhBRDUQFDwuKoRbiRDOp75pV5tdsJyFNZOSB+zEdfdTOfzdcUbDuvyssJuP8bH dxCQZ6lePJwiqbKVTFmIc6lbizShJbAVyehoMvVE4M4EZrtuZC3N2GOYvx/nvdfT sXV9mZNTksYGVnqljfMSR0LwG6IxNhanBpBeAPHNZ+wKektG14sbM3n02MM7nSJu Ixw3Ct1f0H/sUIkaTi2U/ejFcc/rwTT6V3dS6+2gcnTabFD5JAKweg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:05 2026 by rpki-client