This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mt2KF_xnKHG58gOVre24XQNeqkM.cer File: Mt2KF_xnKHG58gOVre24XQNeqkM.cer (raw, json) Hash identifier: FvdrOP5WSWOc47ruMpNEnviyBChREmZtj2mYT0HJzKo= Subject key identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C2ABE471E19F8FD41D76A58AE152B205C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 04 Feb 2026 22:20:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215981 IP: 185.165.94.0/24 IP: 2a14:4f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2a:be:47:1e:19:f8:fd:41:d7:6a:58:ae:15:2b:20:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 4 22:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=32dd8a17fc672871b9f20395adedb85d035eaa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:38:95:df:5a:56:e1:d7:cc:b1:25:b9:b9: 6c:c6:20:12:7e:c8:dd:2f:ea:93:b6:00:50:bc:68: 7e:b6:b7:ee:7c:bb:50:60:94:f3:9c:da:38:cb:df: 92:ba:3d:af:d1:99:d1:54:6c:6a:90:ff:e1:9f:ef: 86:b2:3a:15:7c:d8:b6:cc:6e:b0:c0:96:25:9d:bb: e1:bc:65:63:ea:13:6b:20:82:e7:58:85:36:8b:9a: 2c:81:be:d8:7d:0e:e8:1b:71:fc:56:c4:c7:8a:fa: f4:0d:27:4a:b3:33:20:12:f4:d2:3e:be:df:55:55: 51:53:3e:de:58:f2:33:04:ea:fb:e1:f3:7e:5e:aa: 66:67:1b:55:64:55:2c:b6:1f:7e:63:4f:77:b0:c9: d9:d1:1a:05:72:77:6c:cc:2e:22:a3:e6:1e:f5:82: c7:09:6a:52:72:cc:a6:c7:30:d9:c2:df:50:c4:fd: e5:fd:48:e1:a1:60:58:e6:03:44:f0:de:fe:09:cf: a3:57:7e:cd:d3:d9:60:f7:78:ce:42:56:33:3f:6b: fe:d0:d4:8f:13:21:9d:3f:0f:59:35:b4:14:ac:0c: 5d:78:fc:cd:b7:d8:ee:93:0d:e5:65:4e:5e:88:e5: a1:e0:c1:ee:c4:4e:d6:16:fd:67:46:07:6a:b5:10: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DD:8A:17:FC:67:28:71:B9:F2:03:95:AD:ED:B8:5D:03:5E:AA:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/635b1a-5118-4d9c-8133-c1787499ef33/1/Mt2KF_xnKHG58gOVre24XQNeqkM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.94.0/24 IPv6: 2a14:4f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215981 Signature Algorithm: sha256WithRSAEncryption 3a:aa:11:99:08:96:24:4f:87:43:a3:de:de:a8:0d:0b:3e:71: 82:85:de:49:6d:0d:cc:ec:85:fe:cf:97:1c:4b:a7:9c:17:b2: d7:ef:a7:9a:78:07:88:0a:a3:93:37:d4:c9:90:d0:90:eb:b3: 91:a9:be:ac:09:04:1b:a1:db:d9:12:b4:23:24:0b:ba:c1:97: e6:a2:89:7d:c4:c1:22:de:32:b6:ee:a7:b9:21:39:df:8e:eb: af:d3:96:24:14:59:35:f8:c8:de:ce:05:bb:0c:9e:28:78:cb: 10:65:68:38:79:84:c9:9b:09:1a:2f:1a:42:33:c3:96:f2:38: 7b:85:7b:d5:93:fd:85:88:7d:38:96:66:75:50:93:30:b4:b8: 74:9a:8b:6b:24:17:12:aa:4d:01:ee:30:a4:29:9d:6d:25:67: 08:5e:49:d8:51:a1:40:1b:e0:f2:75:1e:82:a1:29:36:56:98: e1:14:00:cf:61:60:e7:e2:f0:f6:86:2c:01:b6:d1:f0:67:4d: 1f:ae:4e:65:be:c2:c5:b1:2e:8d:de:ee:10:ca:55:7a:ca:5e: 85:59:ca:ca:32:c8:1b:ac:57:1d:8a:b6:d8:50:d7:9c:89:e3: 0e:a4:c1:c7:9f:cd:2e:50:fa:07:63:e8:cd:8f:59:8e:50:e8: 32:8a:4b:da -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwqvkceGfj9QddqWK4VKyBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjA0MjIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmRkOGExN2ZjNjcyODcxYjlmMjAzOTVhZGVkYjg1ZDAzNWVhYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQI4ld9aVuHXzLElublsxiASfsjd L+qTtgBQvGh+trfufLtQYJTznNo4y9+Suj2v0ZnRVGxqkP/hn++GsjoVfNi2zG6w wJYlnbvhvGVj6hNrIILnWIU2i5osgb7YfQ7oG3H8VsTHivr0DSdKszMgEvTSPr7f VVVRUz7eWPIzBOr74fN+XqpmZxtVZFUsth9+Y093sMnZ0RoFcndszC4io+Ye9YLH CWpScsymxzDZwt9QxP3l/UjhoWBY5gNE8N7+Cc+jV37N09lg93jOQlYzP2v+0NSP EyGdPw9ZNbQUrAxdePzNt9jukw3lZU5eiOWh4MHuxE7WFv1nRgdqtRBgbQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFDLdihf8ZyhxufIDla3tuF0DXqpDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzYzNWIx YS01MTE4LTRkOWMtODEzMy1jMTc4NzQ5OWVmMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvNjM1YjFh LTUxMTgtNGQ5Yy04MTMzLWMxNzg3NDk5ZWYzMy8xL010MktGX3huS0hHNThnT1Zy ZTI0WFFOZXFrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuaVeMA0EAgACMAcDBQMqFE8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNLrTANBgkqhkiG9w0BAQsFAAOCAQEAOqoRmQiWJE+H Q6Pe3qgNCz5xgoXeSW0NzOyF/s+XHEunnBey1++nmngHiAqjkzfUyZDQkOuzkam+ rAkEG6Hb2RK0IyQLusGX5qKJfcTBIt4ytu6nuSE5347rr9OWJBRZNfjI3s4Fuwye KHjLEGVoOHmEyZsJGi8aQjPDlvI4e4V71ZP9hYh9OJZmdVCTMLS4dJqLayQXEqpN Ae4wpCmdbSVnCF5J2FGhQBvg8nUegqEpNlaY4RQAz2Fg5+Lw9oYsAbbR8GdNH65O Zb7CxbEujd7uEMpVespehVnKyjLIG6xXHYq22FDXnInjDqTBx5/NLlD6B2PozY9Z jlDoMopL2g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:40 2026 by rpki-client