This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer File: MaGF0OsMp4EcWGQl3g6WDhz-ths.cer (raw, json) Hash identifier: c6ll35L9Gp9a3PcC5NIgtSHjZqmZOeNz3t7NTd+6YQc= Subject key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39324D13CA2BF6E5E668F38BEBE96E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31365 IP: 85.115.204.0/22 IP: 85.153.0.0/17 IP: 2a06:a980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:32:4d:13:ca:2b:f6:e5:e6:68:f3:8b:eb:e9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:e7:4c:0a:4c:13:a4:82:e5:2b:eb:51:66: 41:f0:e2:7e:7b:1c:0f:c2:27:c1:a9:01:2d:35:22: a1:85:c0:60:3e:48:1c:5b:8d:dd:64:22:68:37:2c: ac:1f:51:81:38:7e:ad:99:f3:ca:6e:7f:47:81:bc: b0:c3:47:05:71:f7:ac:f8:d9:d2:bc:dc:f5:db:cb: 4b:0f:2d:69:ab:d1:02:df:79:d1:f6:93:fe:57:df: 1a:e1:ab:41:96:30:3b:54:f7:c7:56:06:a7:d7:46: c2:59:48:5a:5a:2a:1b:f6:70:aa:71:62:ec:6c:f2: f4:80:b3:c4:cc:ca:e4:40:71:f5:82:f5:7d:28:e0: 9b:bb:a3:98:16:15:63:0f:c7:20:e8:7b:0f:ad:a0: 1a:3e:7a:c5:51:13:66:7a:a9:d2:50:92:3b:96:27: cd:06:12:af:d7:8a:9a:72:39:04:15:04:39:a0:f5: 91:9f:69:04:ff:76:80:a0:ab:7e:81:78:f0:bc:ed: dc:8a:65:77:26:1a:88:fd:9c:bd:42:91:08:71:38: e4:5b:37:ff:b2:c3:a2:49:3d:3f:cb:fd:b8:5b:67: af:b4:13:be:f5:e1:87:99:00:62:25:eb:68:08:4f: ac:24:3c:b4:c0:7a:64:8f:a2:5b:eb:c7:fb:a5:86: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.204.0/22 85.153.0.0/17 IPv6: 2a06:a980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31365 Signature Algorithm: sha256WithRSAEncryption 3f:51:0d:e9:88:35:f3:26:48:1a:0a:b7:0e:9d:9b:b2:c0:a5: cb:09:89:d5:26:cf:b7:1c:9e:9f:00:57:7c:05:4e:56:66:89: d5:bc:26:36:7d:9e:0c:b1:d0:64:5d:29:02:06:46:69:2c:73: 63:f6:29:14:66:60:54:f0:b0:be:e9:ba:df:3b:e8:93:9a:c9: 05:58:3e:d2:19:60:51:68:28:9a:1c:86:1e:65:e0:aa:ca:4c: ac:a0:c2:db:0f:b8:91:8b:f3:98:a6:fe:c2:60:1d:a6:2e:f6: 94:c3:63:ce:cf:7d:b4:92:f5:c8:c0:f9:66:0b:00:34:eb:4c: b9:9e:43:41:85:f6:87:78:8d:a3:b0:3e:34:05:c1:ad:a6:dc: e7:4e:2d:54:33:4c:4e:4d:bb:15:59:34:49:94:73:73:5c:61: 61:09:8e:80:7a:25:85:33:a8:6b:78:76:62:68:02:13:ba:08: 50:53:d8:31:3e:de:7c:cc:72:5c:23:34:34:20:fc:53:8b:d2: f3:21:bb:b8:c4:a5:84:50:50:99:b2:78:fb:92:07:36:7e:74: 8e:18:80:58:70:b6:ac:cd:d8:67:67:40:16:6f:7d:c4:95:82: 35:42:60:db:b6:2e:c2:a9:74:a9:14:6b:f2:fd:a4:b2:4b:aa: 46:d4:27:50 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt+OTJNE8or9uXmaPOL6+luMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWExODVkMGViMGNhNzgxMWM1ODY0MjVkZTBlOTYwZTFjZmViNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5fnTApME6SC5SvrUWZB8OJ+exwP wifBqQEtNSKhhcBgPkgcW43dZCJoNyysH1GBOH6tmfPKbn9Hgbyww0cFcfes+NnS vNz128tLDy1pq9EC33nR9pP+V98a4atBljA7VPfHVgan10bCWUhaWiob9nCqcWLs bPL0gLPEzMrkQHH1gvV9KOCbu6OYFhVjD8cg6HsPraAaPnrFURNmeqnSUJI7lifN BhKv14qacjkEFQQ5oPWRn2kE/3aAoKt+gXjwvO3cimV3JhqI/Zy9QpEIcTjkWzf/ ssOiST0/y/24W2evtBO+9eGHmQBiJetoCE+sJDy0wHpkj6Jb68f7pYa/twIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFDGhhdDrDKeBHFhkJd4Olg4c/rYbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzA4MWM2 ZS0xZDY1LTRjY2QtOTZmNS0xZGNjODZjMTFlNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMDgxYzZl LTFkNjUtNGNjZC05NmY1LTFkY2M4NmMxMWU3NC8xL01hR0YwT3NNcDRFY1dHUWwz ZzZXRGh6LXRocy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCVXPMAwQHVZkAMA0EAgACMAcDBQMqBqmAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnqFMA0GCSqGSIb3DQEBCwUAA4IBAQA/UQ3p iDXzJkgaCrcOnZuywKXLCYnVJs+3HJ6fAFd8BU5WZonVvCY2fZ4MsdBkXSkCBkZp LHNj9ikUZmBU8LC+6brfO+iTmskFWD7SGWBRaCiaHIYeZeCqykysoMLbD7iRi/OY pv7CYB2mLvaUw2POz320kvXIwPlmCwA060y5nkNBhfaHeI2jsD40BcGtptznTi1U M0xOTbsVWTRJlHNzXGFhCY6AeiWFM6hreHZiaAITughQU9gxPt58zHJcIzQ0IPxT i9LzIbu4xKWEUFCZsnj7kgc2fnSOGIBYcLaszdhnZ0AWb33ElYI1QmDbti7CqXSp FGvy/aSyS6pG1CdQ -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:53 2026 by rpki-client