This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer File: Mn2iLLkBOLBQg37c8ew2pauMQqw.cer (raw, json) Hash identifier: LrHw0ClhuCqnm/BJbFOD7y5j/TiyXHUaHsrnBTdlfsg= Subject key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE21A04942D6442CC4C22CA289C415 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199477 IP: 185.11.52.0/22 IP: 2a03:6cc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:21:a0:49:42:d6:44:2c:c4:c2:2c:a2:89:c4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:37:03:10:5d:a7:e3:ae:f7:50:3a:e9:8f: d6:69:02:12:e5:02:64:19:b8:a0:f2:fb:f7:61:6a: 65:4b:30:c8:e4:b5:0a:31:3c:64:69:9e:82:90:63: cb:3a:02:82:ad:35:70:e2:55:51:91:96:9f:f8:25: 32:eb:3c:f2:4d:f9:3e:10:54:bb:76:30:94:33:a0: 92:fc:66:94:b3:63:22:c6:ec:8a:5d:35:16:ba:48: c5:6e:db:4e:44:5a:32:4e:8d:6e:e3:db:e5:03:ed: d1:64:66:0a:32:fc:ab:50:cd:ef:d4:59:20:75:f3: a2:82:40:56:a3:1a:00:25:ff:6f:3c:e9:88:55:0e: 1c:7d:6f:61:26:66:29:c1:f9:6c:9d:80:d5:5b:1e: 2a:a2:61:9d:fc:56:3b:c4:01:1b:32:52:16:f1:8a: 48:a4:66:aa:2c:f6:57:c0:fc:ee:21:2a:ff:49:cf: 3c:73:7a:2b:74:99:d2:30:38:79:c2:e6:42:2d:53: 7e:bb:16:83:0b:41:6c:02:5a:2e:34:3e:af:ed:0b: 0d:18:ee:5e:29:2c:60:98:44:83:ed:45:14:eb:e0: f7:87:5d:23:ae:c6:3a:0a:e0:01:cd:cf:d0:13:04: 64:51:49:8d:89:9f:c4:68:bd:3b:91:ec:54:d3:82: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.52.0/22 IPv6: 2a03:6cc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199477 Signature Algorithm: sha256WithRSAEncryption a2:d0:72:6d:1e:fa:ce:71:7e:43:79:3d:65:14:1f:71:55:a7: 6e:3a:ee:00:f5:a3:32:25:0f:12:a9:c1:45:a4:bf:0e:a3:4e: 29:20:b5:e2:a8:4f:b8:74:33:60:a8:93:c6:87:7b:24:3d:8e: 7f:0c:00:27:55:40:66:e7:b5:f6:a9:1f:0f:fc:cc:89:9f:90: ed:08:27:71:87:78:8d:f1:e2:ea:5b:01:9e:c4:77:bf:74:ba: 01:12:d6:d5:9e:50:dd:9d:61:8b:ed:18:4c:61:24:a1:e0:35: 14:9e:f9:b1:2a:88:a2:d5:c4:ce:7d:4e:1c:5f:7a:f4:f1:d9: 77:8f:61:8d:28:3e:97:7d:f6:d1:5b:27:61:d1:91:a5:84:f7: e1:05:5f:40:cd:52:8c:d6:5b:cb:d9:45:d6:63:02:ce:3d:e3: f3:a9:b8:10:58:5a:f1:4f:34:4c:dd:86:44:90:77:4b:77:3b: e7:78:76:ee:f8:84:07:b5:4f:5c:b1:c3:67:40:b0:fb:35:d3: 41:6a:76:6c:29:a2:f1:10:fd:ba:da:60:9a:52:e1:a9:fb:05: 36:cf:e3:46:b9:3d:5e:f6:a2:e3:61:c4:44:16:33:6b:e2:30: fc:fc:bf:4e:c9:a3:92:18:2e:a2:a1:16:c2:f5:94:df:8c:28: 86:e8:05:d5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87iGgSULWRCzEwiyiicQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjdkYTIyY2I5MDEzOGIwNTA4MzdlZGNmMWVjMzZhNWFiOGM0MmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofk3AxBdp+Ou91A66Y/WaQIS5QJk Gbig8vv3YWplSzDI5LUKMTxkaZ6CkGPLOgKCrTVw4lVRkZaf+CUy6zzyTfk+EFS7 djCUM6CS/GaUs2MixuyKXTUWukjFbttORFoyTo1u49vlA+3RZGYKMvyrUM3v1Fkg dfOigkBWoxoAJf9vPOmIVQ4cfW9hJmYpwflsnYDVWx4qomGd/FY7xAEbMlIW8YpI pGaqLPZXwPzuISr/Sc88c3ordJnSMDh5wuZCLVN+uxaDC0FsAlouND6v7QsNGO5e KSxgmESD7UUU6+D3h10jrsY6CuABzc/QEwRkUUmNiZ/EaL07kexU04J5ewIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDJ9oiy5ATiwUIN+3PHsNqWrjEKsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzcwMDhm Yy1hY2M0LTRlZjUtOGZiOS05MDc5NWZiMzkyOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvNzAwOGZj LWFjYzQtNGVmNS04ZmI5LTkwNzk1ZmIzOTI4Yy8xL01uMmlMTGtCT0xCUWczN2M4 ZXcycGF1TVFxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQs0MA0EAgACMAcDBQAqA2zAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLNTANBgkqhkiG9w0BAQsFAAOCAQEAotBybR76znF+ Q3k9ZRQfcVWnbjruAPWjMiUPEqnBRaS/DqNOKSC14qhPuHQzYKiTxod7JD2OfwwA J1VAZue19qkfD/zMiZ+Q7QgncYd4jfHi6lsBnsR3v3S6ARLW1Z5Q3Z1hi+0YTGEk oeA1FJ75sSqIotXEzn1OHF969PHZd49hjSg+l3320VsnYdGRpYT34QVfQM1SjNZb y9lF1mMCzj3j86m4EFha8U80TN2GRJB3S3c753h27viEB7VPXLHDZ0Cw+zXTQWp2 bCmi8RD9utpgmlLhqfsFNs/jRrk9Xvai42HERBYza+Iw/Py/TsmjkhguoqEWwvWU 34wohugF1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:50 2026 by rpki-client