This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer File: MZtnnBRoEIny0HeG3wT3eddBwRo.cer (raw, json) Hash identifier: /onTbQIdQ3CPYoviGzFlmWc/jJQgiZ1aKlqFiAMzjUw= Subject key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A314550FFC4F0161F38C2E20515A46 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197536 IP: 91.223.39.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:14:55:0f:fc:4f:01:61:f3:8c:2e:20:51:5a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=319b679c14681089f2d07786df04f779d741c11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:bd:c8:d1:5d:f4:bf:3e:3e:42:5e:d1:05: 0d:51:95:2f:06:22:e2:9f:c7:d3:f0:a5:02:4b:31: 1a:79:16:5f:b6:ae:14:10:b9:e8:ae:60:18:4c:8e: 64:ed:d9:c8:60:f2:9a:6d:6d:ab:c8:1a:db:f1:a5: be:af:24:9b:8a:32:f5:94:48:dc:47:e0:c4:fc:e9: ef:40:92:6b:5d:12:63:8f:96:e2:a5:fc:b0:a7:a2: ee:8c:c1:f5:de:04:40:1f:b2:f4:51:17:79:73:29: 74:6c:65:1a:8b:ea:b8:8d:d2:c3:2b:97:c3:20:9f: 6a:d6:79:19:c3:df:8d:1f:ee:51:22:01:e3:3a:43: 38:74:25:1d:57:60:85:22:f8:c2:89:42:0d:73:5f: 35:d7:86:f0:82:95:f1:6b:44:45:cd:0a:0c:6d:e5: b6:95:50:ed:10:c9:b3:0c:d6:c2:c1:ff:9b:01:0a: 0e:1e:d3:fe:13:99:fb:2b:80:43:89:c0:90:d9:74: d7:97:48:be:6d:cc:7d:cc:4f:bb:dd:48:e4:87:a5: 82:e9:be:d2:d2:04:cb:d1:36:98:a3:cf:1e:78:20: cc:30:e5:f8:e5:49:9e:0c:1b:2e:b1:fd:b0:8f:74: e6:03:1b:23:8b:fa:1a:61:38:ce:92:e0:4d:bd:c0: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.39.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197536 Signature Algorithm: sha256WithRSAEncryption 3f:84:a5:42:29:75:79:38:26:28:8d:ad:bf:ac:37:c9:fa:3a: 28:b2:59:98:32:36:5a:6c:e8:f5:52:34:68:68:6d:5c:f4:67: c6:92:89:db:f9:72:cf:3c:1f:0b:52:7e:23:7f:3f:80:bb:f1: 62:1c:4f:c4:00:10:1a:7a:dd:d1:c8:ad:87:c6:36:bd:25:fc: 3c:cf:f0:54:e9:1c:0b:0a:73:b1:17:dd:a8:e6:67:56:84:08: 8b:dd:b8:39:9e:28:d1:37:21:f1:1c:67:5c:6e:af:24:2d:1f: d6:46:b5:d4:db:a5:3c:30:0c:f5:88:be:0c:87:ce:96:cb:12: d6:9a:00:e5:c7:ea:d9:0d:14:84:1d:dd:fa:b3:22:4b:b6:83: 41:42:d8:ea:f3:2e:8a:48:0d:b3:0d:4e:ee:b8:6c:48:5e:9b: b7:58:5d:fe:9e:34:0c:79:5c:22:7d:99:3b:15:ce:80:0a:41: bd:a5:84:36:70:ae:fd:27:46:d6:93:74:ca:b1:c3:45:fa:49: d5:90:24:5b:18:03:f4:c7:00:6c:11:af:19:67:e9:f3:55:7c: a4:c0:5d:ac:8f:d4:0a:8a:c0:b9:9e:95:20:f2:65:34:53:26: 18:d2:8d:5e:c6:a8:64:85:3f:46:4b:ad:77:9c:64:4d:f4:57: 64:c6:16:3b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4oxRVD/xPAWHzjC4gUVpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTliNjc5YzE0NjgxMDg5ZjJkMDc3ODZkZjA0Zjc3OWQ3NDFjMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqK9yNFd9L8+PkJe0QUNUZUvBiLi n8fT8KUCSzEaeRZftq4UELnormAYTI5k7dnIYPKabW2ryBrb8aW+rySbijL1lEjc R+DE/OnvQJJrXRJjj5bipfywp6LujMH13gRAH7L0URd5cyl0bGUai+q4jdLDK5fD IJ9q1nkZw9+NH+5RIgHjOkM4dCUdV2CFIvjCiUINc18114bwgpXxa0RFzQoMbeW2 lVDtEMmzDNbCwf+bAQoOHtP+E5n7K4BDicCQ2XTXl0i+bcx9zE+73Ujkh6WC6b7S 0gTL0TaYo88eeCDMMOX45UmeDBsusf2wj3TmAxsji/oaYTjOkuBNvcCRLwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFDGbZ5wUaBCJ8tB3ht8E93nXQcEaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzEzOWZm Mi1mNWQwLTQ5YmUtOTEwYi1iNWM5NDVhMGNhMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvMTM5ZmYy LWY1ZDAtNDliZS05MTBiLWI1Yzk0NWEwY2ExNi8xL01adG5uQlJvRUlueTBIZUcz d1QzZWRkQndSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW98nMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMDoDANBgkqhkiG9w0BAQsFAAOCAQEAP4SlQil1eTgmKI2tv6w3yfo6KLJZmDI2 Wmzo9VI0aGhtXPRnxpKJ2/lyzzwfC1J+I38/gLvxYhxPxAAQGnrd0cith8Y2vSX8 PM/wVOkcCwpzsRfdqOZnVoQIi924OZ4o0Tch8RxnXG6vJC0f1ka11NulPDAM9Yi+ DIfOlssS1poA5cfq2Q0UhB3d+rMiS7aDQULY6vMuikgNsw1O7rhsSF6bt1hd/p40 DHlcIn2ZOxXOgApBvaWENnCu/SdG1pN0yrHDRfpJ1ZAkWxgD9McAbBGvGWfp81V8 pMBdrI/UCorAuZ6VIPJlNFMmGNKNXsaoZIU/Rkutd5xkTfRXZMYWOw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:15 2026 by rpki-client