This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer File: MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer (raw, json) Hash identifier: 3VBvpNfWxSxZ3jgaBjysW2a9pg9phF7lwyEgxMgoezk= Subject key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113FAA6F82E096EBD109F36843CBB0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197134 IP: 91.217.28.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3f:aa:6f:82:e0:96:eb:d1:09:f3:68:43:cb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:0b:4a:ba:cd:cf:42:1a:38:92:66:f6:99: 81:b2:93:36:da:37:13:34:62:bb:98:f0:96:65:ec: 0a:a6:24:cc:7c:51:d6:6b:66:c5:cd:24:79:22:ad: 2f:4f:14:9c:73:98:4a:1c:dd:fc:c2:94:55:15:1a: 26:22:97:e7:0c:9c:8a:3b:d1:cd:79:1e:7e:cf:39: 6b:ec:bd:6b:31:bc:09:4f:d2:41:7a:48:74:e1:29: 3d:f3:f7:bf:e9:e5:47:b8:14:63:56:dc:89:e2:c9: 97:58:af:2e:62:ae:1d:87:d2:8e:57:9f:70:a9:9c: 3f:39:87:92:77:e7:af:50:02:89:f1:3a:ba:6b:d0: f0:81:28:3e:4b:3d:9e:3f:16:83:a0:64:27:fa:e9: 0d:08:86:ed:f5:7c:1d:8d:77:54:05:0f:05:c5:35: 49:3c:4b:5a:2b:a6:44:e4:45:41:31:0f:d6:a1:e1: 24:d0:79:2c:a9:5f:51:ee:c8:89:57:0c:e5:d4:f2: c1:01:d0:51:a9:31:b4:47:4a:1a:f0:86:5e:ee:d8: f9:e6:0a:54:3b:b4:dc:b4:a4:02:b5:8f:e8:e3:a2: 3e:84:1e:02:a7:69:7c:3e:49:fa:2f:43:2f:a4:b3: 66:e6:5c:03:ef:ab:7f:71:25:43:67:81:ff:d3:a5: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.28.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197134 Signature Algorithm: sha256WithRSAEncryption 78:22:12:a0:2b:c6:3b:56:18:36:ea:20:ce:42:13:a4:b9:23: e5:cf:d2:74:ce:70:7c:db:b8:8b:33:39:66:87:bb:88:2e:7a: d7:eb:6f:38:62:31:0c:1c:5e:b0:55:2c:f4:85:d8:a7:a1:15: 21:03:06:e3:83:fc:4a:46:83:e8:0b:54:2a:cc:4b:07:51:0b: 43:c5:66:e8:fd:65:2f:b3:8d:35:04:ba:a4:7b:c2:00:74:4b: 0f:ce:0a:82:71:8e:21:98:33:49:31:14:d6:e1:80:27:0f:35: 25:cc:2b:67:0a:aa:5c:9a:cd:ae:ed:3f:22:76:93:0e:b3:3f: f0:8c:ec:13:4e:0e:4e:4e:5c:5e:df:28:3f:c0:6b:9e:42:d5: 1c:58:88:7d:29:a3:ca:9b:63:5c:6b:74:e2:82:5b:81:bd:5b: c5:02:4e:d3:42:0a:c8:8b:c7:e1:82:af:bb:6e:59:f6:ae:83: f5:bc:bf:db:9c:17:86:ff:8c:10:18:8d:4c:ff:85:6e:8d:f2: ee:ba:d3:64:2e:d8:6c:44:76:83:62:16:49:6c:b9:df:8d:77: 88:24:55:c1:d1:fe:20:6b:5f:93:aa:55:aa:18:df:4b:85:af: 76:c5:e9:ac:f1:d2:1d:df:54:ba:9e:db:d6:3c:6b:3a:f3:50: 26:89:43:61 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ET+qb4LgluvRCfNoQ8uwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTgzZWZjNTJkZDVkMmQ0ZjdlMGM0NWQyMmM5YzI5ZjFkY2U4ZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+ELSrrNz0IaOJJm9pmBspM22jcT NGK7mPCWZewKpiTMfFHWa2bFzSR5Iq0vTxScc5hKHN38wpRVFRomIpfnDJyKO9HN eR5+zzlr7L1rMbwJT9JBekh04Sk98/e/6eVHuBRjVtyJ4smXWK8uYq4dh9KOV59w qZw/OYeSd+evUAKJ8Tq6a9DwgSg+Sz2ePxaDoGQn+ukNCIbt9XwdjXdUBQ8FxTVJ PEtaK6ZE5EVBMQ/WoeEk0HksqV9R7siJVwzl1PLBAdBRqTG0R0oa8IZe7tj55gpU O7TctKQCtY/o46I+hB4Cp2l8Pkn6L0MvpLNm5lwD76t/cSVDZ4H/06WFzQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDGD78Ut1dLU9+DEXSLJwp8dzo5ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzdiYWM3 MS05OTRlLTRkNDctYmNmZS1mOGYzZjA0MDFjYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvN2JhYzcx LTk5NGUtNGQ0Ny1iY2ZlLWY4ZjNmMDQwMWNjMy8xL01ZUHZ4UzNWMHRUMzRNUmRJ c25DbngzT2psay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW9kcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMCDjANBgkqhkiG9w0BAQsFAAOCAQEAeCISoCvGO1YYNuogzkITpLkj5c/SdM5w fNu4izM5Zoe7iC561+tvOGIxDBxesFUs9IXYp6EVIQMG44P8SkaD6AtUKsxLB1EL Q8Vm6P1lL7ONNQS6pHvCAHRLD84KgnGOIZgzSTEU1uGAJw81JcwrZwqqXJrNru0/ InaTDrM/8IzsE04OTk5cXt8oP8BrnkLVHFiIfSmjyptjXGt04oJbgb1bxQJO00IK yIvH4YKvu25Z9q6D9by/25wXhv+MEBiNTP+Fbo3y7rrTZC7YbER2g2IWSWy53413 iCRVwdH+IGtfk6pVqhjfS4WvdsXprPHSHd9Uup7b1jxrOvNQJolDYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:56 2026 by rpki-client