This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer (raw, json) Hash identifier: sM2miM+SrHTJRaz8ACrZ2XN0mQAMxN+jchBL1LeF9CA= Subject key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD99AD618E3F57E33218792031836 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41709 IP: 2001:67c:26f8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d9:9a:d6:18:e3:f5:7e:33:21:87:92:03:18:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:d4:dd:42:b1:f0:89:f8:19:73:33:59:c4: c2:47:fb:5a:9e:34:c0:ef:1d:6e:57:8c:0b:3a:f5: 90:f1:de:d4:41:e7:3a:cd:ef:8d:75:c0:00:63:28: 80:65:8e:76:2f:34:80:58:08:03:9f:bd:47:8b:f3: e3:03:b7:64:2d:2c:e0:90:28:2c:9a:06:c9:aa:99: 5e:d3:f2:ce:26:b8:1a:c5:78:b5:dd:a8:6f:42:2f: 94:6a:cb:a8:6a:2c:6d:1a:93:03:b0:86:65:76:38: 04:51:93:5e:08:2d:32:36:14:77:e0:d7:4a:3e:25: 60:e4:75:05:9c:57:54:26:d3:3e:f0:6e:bd:8c:d6: 4d:6a:d6:22:03:d9:dd:02:b4:6c:fe:0a:b4:03:49: 7a:95:25:9f:1c:7a:de:bb:96:6c:ed:22:da:59:96: 17:3b:0b:0f:e6:63:24:23:a0:f1:6f:d5:03:3a:55: 24:22:3e:62:f1:92:db:20:cc:a4:e3:9e:21:82:76: f4:25:05:43:9d:b8:4b:93:ed:fb:79:c7:4b:ba:4b: ec:61:a1:32:6f:6d:cc:4a:64:30:d0:6b:8f:fa:0b: 5e:2f:05:3a:27:d9:6c:d8:d1:dd:31:d7:9c:34:04: 17:43:39:79:2f:44:fd:b9:12:53:ac:38:6c:bf:19: e9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:26f8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41709 Signature Algorithm: sha256WithRSAEncryption 72:42:9f:d5:d5:99:37:c9:0b:8b:df:b0:fa:6d:2d:ba:09:de: c9:c6:b0:d3:be:55:d6:a7:6a:90:50:c0:91:78:a1:6c:8f:5f: ae:85:69:27:33:48:e4:12:d9:b9:66:27:6c:53:be:75:bb:1b: 04:1d:2b:19:0b:b9:32:e1:18:00:17:8d:ed:e9:e7:56:de:f8: 1c:d7:28:2a:54:41:a8:07:9c:40:2e:04:09:e8:fd:d6:05:88: 96:77:93:0e:18:3c:59:77:98:51:e8:42:fb:6e:13:ff:85:b3: 9c:2f:d7:28:ea:f3:fe:5c:9d:c5:f7:40:da:08:f7:9a:ea:fd: cb:30:a6:d9:4f:f2:98:8f:74:6a:aa:1e:49:f6:1b:77:99:e8: 7d:9d:c3:68:e5:5b:ca:d9:a4:24:53:d2:fe:cb:f8:3f:5b:79: 35:71:ea:62:ef:53:2c:70:32:dc:a1:02:cd:ac:53:60:53:96: b0:95:fe:d7:e5:bb:f3:b9:0c:07:16:a1:1f:1e:ea:6d:5f:27: d9:ba:5b:39:fc:b5:6e:f5:51:a0:a1:4a:33:78:6b:2f:bc:4c: 04:88:73:c6:04:19:ca:66:5c:56:95:86:62:5d:0b:d0:4f:29: aa:3b:29:8e:a2:88:26:31:9a:fd:f9:09:5f:63:3d:dc:54:b0: 2b:56:c2:34 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9ytma1hjj9X4zIYeSAxg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMjk2N2E3NzQ3MzY1YzgxOWRlNjA3NmY3ZjVhYTBiYTNjOWU1OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprLU3UKx8In4GXMzWcTCR/tanjTA 7x1uV4wLOvWQ8d7UQec6ze+NdcAAYyiAZY52LzSAWAgDn71Hi/PjA7dkLSzgkCgs mgbJqple0/LOJrgaxXi13ahvQi+UasuoaixtGpMDsIZldjgEUZNeCC0yNhR34NdK PiVg5HUFnFdUJtM+8G69jNZNatYiA9ndArRs/gq0A0l6lSWfHHreu5Zs7SLaWZYX OwsP5mMkI6Dxb9UDOlUkIj5i8ZLbIMyk454hgnb0JQVDnbhLk+37ecdLukvsYaEy b23MSmQw0GuP+gteLwU6J9ls2NHdMdecNAQXQzl5L0T9uRJTrDhsvxnpEQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFDKWendHNlyBneYHb39aoLo8nlmKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzNlNzdk Yy00ODY4LTQxZDQtOTBjNC0yYWM4YmNkODM1NTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvM2U3N2Rj LTQ4NjgtNDFkNC05MGM0LTJhYzhiY2Q4MzU1MC8xL01wWjZkMGMyWElHZDVnZHZm MXFndWp5ZVdZby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCb4MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwCi7TANBgkqhkiG9w0BAQsFAAOCAQEAckKf1dWZN8kLi9+w+m0tugneycaw 075V1qdqkFDAkXihbI9froVpJzNI5BLZuWYnbFO+dbsbBB0rGQu5MuEYABeN7enn Vt74HNcoKlRBqAecQC4ECej91gWIlneTDhg8WXeYUehC+24T/4WznC/XKOrz/lyd xfdA2gj3mur9yzCm2U/ymI90aqoeSfYbd5nofZ3DaOVbytmkJFPS/sv4P1t5NXHq Yu9TLHAy3KECzaxTYFOWsJX+1+W787kMBxahHx7qbV8n2bpbOfy1bvVRoKFKM3hr L7xMBIhzxgQZymZcVpWGYl0L0E8pqjspjqKIJjGa/fkJX2M93FSwK1bCNA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:54 2026 by rpki-client