This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer File: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer (raw, json) Hash identifier: x1bdvG15EloIzY7U0dh3bjN8cZg/cG1mDn4LG2AfvaA= Subject key identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6991C2AEAA319A1FE4C51CD5018CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213286 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:99:1c:2a:ea:a3:19:a1:fe:4c:51:cd:50:18:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:24:88:08:3b:b5:bc:e9:f2:2b:98:7b:e4: 77:03:83:09:61:18:22:73:6d:18:a2:90:2b:31:b0: 1a:ba:a5:90:13:5c:77:d2:96:b4:ca:59:8b:df:b3: 51:02:c1:f1:88:d2:62:c1:4d:55:ad:f6:f2:6b:f1: 16:4e:ba:0d:06:32:f1:22:b3:a5:9d:24:df:b8:26: ae:4b:4c:58:dc:a8:a8:ed:56:ef:dc:ef:c0:bc:4d: b2:89:d5:e9:86:b5:9f:2b:a1:e9:f8:60:7e:80:02: 2f:e3:ad:7e:d7:65:81:a8:3b:03:9f:70:0d:d7:8f: e4:96:cf:2b:d7:c5:c3:fb:b5:71:eb:09:89:0c:54: 75:69:8a:39:91:c0:6c:ca:b8:ce:bd:fc:67:8f:12: 6c:5c:e2:1a:11:b1:f3:ab:5e:82:8a:4c:fd:e4:9b: 82:5b:fa:af:8d:73:e0:53:69:06:9b:85:e8:20:58: 45:ad:46:48:c8:71:95:8f:cd:2f:58:20:a4:f8:71: 43:8d:80:f7:ec:2c:54:6c:fd:51:92:80:ec:84:b9: 66:d9:65:00:82:63:2a:7f:8d:6d:ca:3c:d2:39:79: e3:63:f0:88:cf:f5:9f:68:06:39:f4:c0:f0:3f:8a: e9:e5:34:1f:39:d6:9c:65:f2:bb:0f:1b:78:be:74: d0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213286 Signature Algorithm: sha256WithRSAEncryption 5f:f6:db:9b:33:bc:3c:09:e3:5a:d9:8e:98:99:85:7f:a3:d2: f4:1b:3b:0a:50:43:fa:bd:75:dd:b9:ac:51:7b:dd:87:cf:4d: 3b:79:e7:34:53:75:bb:b6:3c:1c:d8:9d:df:61:39:5b:67:76: 4a:a6:e6:09:e6:f9:5d:e9:fa:32:4a:5a:90:56:19:4b:dd:0e: 09:86:89:ad:df:a6:a3:b7:14:29:50:4d:45:eb:87:a2:70:27: 59:c0:9f:96:dd:39:27:5b:38:72:6c:62:17:62:d6:c1:4e:19: 92:60:dc:56:30:33:9e:ef:b0:cf:5c:6b:68:7e:39:e0:38:cc: 41:f8:db:ac:f1:2f:c2:a2:40:29:ec:ae:cb:e9:b8:64:1c:61: 73:d6:35:84:95:f8:32:66:29:d1:39:9d:c5:4b:34:94:dc:b8: 8c:47:ac:48:19:84:75:86:00:2d:13:1b:9b:65:d0:f7:1f:e0: de:18:3d:06:7f:7b:cb:0d:68:9a:c3:d1:6e:98:5a:aa:d9:88: 9e:66:3a:5a:d5:ed:5b:8e:2c:52:fc:50:4a:5c:03:95:b1:ee: c7:b0:06:8d:8a:ad:1d:22:b5:e2:5b:f4:bd:0e:97:ff:6d:d9: a7:43:88:32:c0:be:49:f7:1d:5d:1b:65:e4:0a:80:f9:d0:a1: 71:42:e2:28 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+ppkcKuqjGaH+TFHNUBjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWIxNjIxY2UyOGNiYmZlZjAzOGFiZDc1NDlmYzZjYjUwZTcxMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaQkiAg7tbzp8iuYe+R3A4MJYRgi c20YopArMbAauqWQE1x30pa0ylmL37NRAsHxiNJiwU1Vrfbya/EWTroNBjLxIrOl nSTfuCauS0xY3Kio7Vbv3O/AvE2yidXphrWfK6Hp+GB+gAIv461+12WBqDsDn3AN 14/kls8r18XD+7Vx6wmJDFR1aYo5kcBsyrjOvfxnjxJsXOIaEbHzq16Cikz95JuC W/qvjXPgU2kGm4XoIFhFrUZIyHGVj80vWCCk+HFDjYD37CxUbP1RkoDshLlm2WUA gmMqf41tyjzSOXnjY/CIz/WfaAY59MDwP4rp5TQfOdacZfK7Dxt4vnTQYwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDGxYhzijLv+8Dir11SfxstQ5xFrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzIwNjAy Yy04ZGU0LTRkZWMtOGIyNC02NjE0NjMyNzIzYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvMjA2MDJj LThkZTQtNGRlYy04YjI0LTY2MTQ2MzI3MjNiOS8xL01iRmlIT0tNdV83d09LdlhW Sl9HeTFEbkVXcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBJjANBgkqhkiG9w0BAQsFAAOCAQEAX/bbmzO8PAnj WtmOmJmFf6PS9Bs7ClBD+r113bmsUXvdh89NO3nnNFN1u7Y8HNid32E5W2d2Sqbm Ceb5Xen6MkpakFYZS90OCYaJrd+mo7cUKVBNReuHonAnWcCflt05J1s4cmxiF2LW wU4ZkmDcVjAznu+wz1xraH454DjMQfjbrPEvwqJAKeyuy+m4ZBxhc9Y1hJX4MmYp 0TmdxUs0lNy4jEesSBmEdYYALRMbm2XQ9x/g3hg9Bn97yw1omsPRbphaqtmInmY6 WtXtW44sUvxQSlwDlbHux7AGjYqtHSK14lv0vQ6X/23Zp0OIMsC+SfcdXRtl5AqA +dChcULiKA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:07 2026 by rpki-client