This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer File: MdqeNbdw4uaB91bNfSCBKoLhFhE.cer (raw, json) Hash identifier: Q1HZ4fEiIFFWhWSfiG34DNfXin5L0qDmaknwrsSmAS0= Subject key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C2DC37B2C5460FFB4B4313807FF59C05A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 05 Feb 2026 12:25:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60471 IP: 185.30.144.0/22 IP: 2a04:49c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:c3:7b:2c:54:60:ff:b4:b4:31:38:07:ff:59:c0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 5 12:25:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31da9e35b770e2e681f756cd7d20812a82e11611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:d7:d3:67:a7:89:1f:ed:8b:3f:fd:f9:0b: e0:70:e2:66:db:3a:5b:fb:a0:93:f1:1a:b6:4f:31: 19:6f:17:26:d5:39:9a:37:32:59:33:74:33:4f:91: 52:33:0e:ec:25:c8:b9:dd:b8:00:ac:f2:b3:3e:00: 3d:d7:49:1b:be:e9:6a:8b:a7:cb:4a:f2:da:4a:a5: ea:55:40:76:a1:bd:02:13:7d:5d:5f:52:c8:8c:4d: a9:b1:d3:e0:32:c3:ee:78:12:59:83:3d:3d:4d:85: 38:b9:4e:75:3b:15:4e:e1:c7:7e:b8:10:89:72:ff: 46:5c:80:80:dc:8b:ab:9a:02:83:d4:ed:d8:6b:3d: 57:96:7b:6b:63:ab:32:b2:de:d1:65:89:45:ec:f4: e8:8f:61:f4:ee:5f:bc:1a:fc:a7:15:6a:12:8b:d0: 5c:c3:c3:43:73:7c:6e:56:54:86:aa:f9:84:9f:db: 10:40:e5:36:b8:c7:a5:7f:2f:8b:a6:88:6b:41:f4: cf:a3:ab:55:61:45:45:b3:ba:29:6c:b4:35:f4:cc: 17:9d:99:86:fc:d1:aa:ba:68:e5:83:78:8c:76:21: f1:ac:6d:44:95:f1:ef:3d:d0:e3:80:c8:51:fa:c2: 56:82:f3:93:e8:9e:d2:4b:b3:b0:da:33:d5:5c:27: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.144.0/22 IPv6: 2a04:49c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60471 Signature Algorithm: sha256WithRSAEncryption 04:cf:d8:c9:30:02:a9:7c:0a:4a:d4:11:14:11:ed:55:ae:4e: 56:00:9b:1a:7e:84:40:bc:4c:9f:ac:5a:14:52:8a:56:c1:c1: 30:ef:0d:f2:92:dc:2e:13:2b:9a:55:91:f7:8d:5b:39:ce:08: 7d:9b:48:ca:44:48:79:44:63:61:57:6e:eb:6f:fb:c9:50:15: 68:1b:a3:0c:5b:72:1d:ce:d6:26:7a:ad:e6:e3:bf:a2:2f:6c: 6c:d4:fc:c8:41:a8:1d:ff:ca:07:cd:f6:f6:b4:35:96:d3:88: 7d:56:d2:3d:5a:89:d0:e8:99:21:24:8b:c0:a4:f7:65:ec:2f: 6e:eb:2b:aa:df:d3:95:eb:e1:58:53:34:53:9d:0a:ee:96:ac: 8b:2e:18:da:3a:b3:7a:a4:81:78:63:ac:28:11:d4:55:33:e8: db:c5:1f:31:59:ce:d6:3a:63:f6:cf:ca:d6:58:89:89:43:e5: d9:41:43:1d:bf:d7:7f:c1:3e:8f:7c:97:88:e2:db:50:38:93: 2f:d6:8d:91:cc:04:53:44:1b:4b:c7:1c:f5:0b:dc:d6:8d:2a: 4c:d7:ea:e0:6e:f3:4b:a9:2f:9f:45:94:f3:99:f8:de:e6:15: fa:43:bf:b5:a2:f4:29:d0:0d:0b:8c:79:12:ab:ce:1b:97:d9: 5d:b3:0b:c1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwtw3ssVGD/tLQxOAf/WcBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA1MTIyNTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWRhOWUzNWI3NzBlMmU2ODFmNzU2Y2Q3ZDIwODEyYTgyZTExNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunDX02eniR/tiz/9+QvgcOJm2zpb +6CT8Rq2TzEZbxcm1TmaNzJZM3QzT5FSMw7sJci53bgArPKzPgA910kbvulqi6fL SvLaSqXqVUB2ob0CE31dX1LIjE2psdPgMsPueBJZgz09TYU4uU51OxVO4cd+uBCJ cv9GXICA3IurmgKD1O3Yaz1XlntrY6syst7RZYlF7PToj2H07l+8GvynFWoSi9Bc w8NDc3xuVlSGqvmEn9sQQOU2uMelfy+LpohrQfTPo6tVYUVFs7opbLQ19MwXnZmG /NGqumjlg3iMdiHxrG1ElfHvPdDjgMhR+sJWgvOT6J7SS7Ow2jPVXCc9CQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDHanjW3cOLmgfdWzX0ggSqC4RYRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlL2I3OWVl MC1kNGQxLTQ4NjktYTYyZC1mZDk2ZmZlYmNmYTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYjc5ZWUw LWQ0ZDEtNDg2OS1hNjJkLWZkOTZmZmViY2ZhMS8xL01kcWVOYmR3NHVhQjkxYk5m U0NCS29MaEZoRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuR6QMA0EAgACMAcDBQMqBEnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsNzANBgkqhkiG9w0BAQsFAAOCAQEABM/YyTACqXwK StQRFBHtVa5OVgCbGn6EQLxMn6xaFFKKVsHBMO8N8pLcLhMrmlWR941bOc4IfZtI ykRIeURjYVdu62/7yVAVaBujDFtyHc7WJnqt5uO/oi9sbNT8yEGoHf/KB8329rQ1 ltOIfVbSPVqJ0OiZISSLwKT3Zewvbusrqt/TlevhWFM0U50K7pasiy4Y2jqzeqSB eGOsKBHUVTPo28UfMVnO1jpj9s/K1liJiUPl2UFDHb/Xf8E+j3yXiOLbUDiTL9aN kcwEU0QbS8cc9Qvc1o0qTNfq4G7zS6kvn0WU85n43uYV+kO/taL0KdANC4x5EqvO G5fZXbMLwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:01 2026 by rpki-client