This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
File:                     MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer (raw, json)
Hash identifier:          d7JpCPoJXXSmnFcsiIb5w7J7VbYXjp9vbi8rgHWEfbQ=
Subject key identifier:   32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F1479685D02E4271257278589BF14DF
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 14:20:06 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 207419
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:79:68:5d:02:e4:27:12:57:27:85:89:bf:14:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 14:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:68:42:b3:fb:ef:41:01:fc:87:c1:a7:96:
                    21:6c:c4:0d:59:09:2d:e9:ec:4a:33:94:4b:d1:37:
                    3f:c0:e9:a2:39:16:0a:62:f2:0f:68:ec:18:0d:94:
                    6e:c0:3b:0b:01:9a:67:26:19:0d:d3:9e:bb:a1:05:
                    b5:b9:86:15:58:3e:3a:2d:da:a4:bd:80:11:fd:81:
                    2c:06:db:49:85:ef:b5:2d:05:f3:26:e5:1c:49:52:
                    b9:19:c5:0a:67:ea:7c:f2:b6:36:1b:93:4c:0b:ae:
                    af:40:c8:76:ef:38:3e:be:44:93:5a:c1:21:5c:5a:
                    b5:c4:c0:4a:55:a2:f2:52:33:0f:d0:fe:83:ca:ad:
                    c3:7d:f4:44:67:bf:fc:21:91:24:77:ae:9f:3f:bc:
                    7f:53:16:46:14:b9:82:86:42:4d:55:16:f3:18:2f:
                    8b:f3:5e:11:17:84:47:b6:b0:2a:f8:c7:03:21:21:
                    6c:d9:15:0a:c7:e5:26:f9:6e:3a:b0:b7:9b:69:27:
                    d5:9a:e5:86:72:1f:d9:fa:fd:20:a1:6e:57:b7:d3:
                    2a:26:eb:f1:01:af:9a:4d:c0:4f:d2:7d:d2:f1:2b:
                    53:f3:15:ec:46:78:76:dc:d3:8f:4e:b9:24:77:91:
                    64:8e:2e:da:c8:3d:77:8f:b4:aa:f0:24:e4:bc:0e:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207419

    Signature Algorithm: sha256WithRSAEncryption
         61:37:71:92:da:9d:3c:23:de:86:89:20:fe:78:09:11:1e:00:
         7c:18:ea:35:65:da:26:2a:32:5b:58:3a:9b:6c:dd:d6:6d:23:
         4a:aa:0f:df:b8:5b:6b:aa:1c:15:58:07:8a:be:77:b5:94:ad:
         8e:9b:62:15:49:f2:96:31:cf:b3:d6:ab:76:5d:1a:8d:e8:32:
         77:74:76:60:f6:88:1b:af:13:0e:92:85:ce:b5:58:56:ba:20:
         4e:0c:fe:c3:b7:e2:61:29:e3:74:eb:be:80:1d:d1:a6:2f:e1:
         68:4d:37:5f:f9:1a:06:cf:c9:e5:6d:9a:d3:aa:60:cd:6b:72:
         c8:50:85:9f:a4:08:66:6f:1a:1b:f5:be:20:cd:9d:d4:24:35:
         1c:8e:70:3f:a2:8e:d8:b2:43:6e:64:c6:09:7b:6c:c4:c1:40:
         44:d8:b9:99:85:bc:fa:3a:43:5d:50:0e:d3:f8:4c:77:fd:25:
         f3:06:e5:27:29:be:ba:a5:0a:c5:ec:39:24:37:be:d9:0a:28:
         2a:ba:7d:e8:b0:d9:ca:ff:a7:78:1d:a5:04:b4:a1:45:fe:86:
         ee:c9:8f:77:ba:54:08:30:42:99:dd:28:35:1c:5a:9f:2c:22:
         e6:ea:ba:92:b6:de:b1:c6:ca:e3:38:d4:6b:55:6c:5e:d7:4c:
         6e:72:77:8f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt/FHloXQLkJxJXJ4WJvxTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTQyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmU4OGE4YzNmMmYyNGQ2OTMzMTZkMWYyMTFlZGVlYjIzMjM0MmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhBoQrP770EB/IfBp5YhbMQNWQkt
6exKM5RL0Tc/wOmiORYKYvIPaOwYDZRuwDsLAZpnJhkN0567oQW1uYYVWD46Ldqk
vYAR/YEsBttJhe+1LQXzJuUcSVK5GcUKZ+p88rY2G5NMC66vQMh27zg+vkSTWsEh
XFq1xMBKVaLyUjMP0P6Dyq3DffREZ7/8IZEkd66fP7x/UxZGFLmChkJNVRbzGC+L
814RF4RHtrAq+McDISFs2RUKx+Um+W46sLebaSfVmuWGch/Z+v0goW5Xt9MqJuvx
Aa+aTcBP0n3S8StT8xXsRnh23NOPTrkkd5Fkji7ayD13j7Sq8CTkvA7xowIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDLoiow/LyTWkzFtHyEe3usjI0KmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzA2ZDNi
ZS0wMjViLTRkMTAtYTc5OS03OTE2MTU4NzNkOTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvMDZkM2Jl
LTAyNWItNGQxMC1hNzk5LTc5MTYxNTg3M2Q5NC8xL011aUtqRDh2Sk5hVE1XMGZJ
UjdlNnlNalFxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMqOzANBgkqhkiG9w0BAQsFAAOCAQEAYTdxktqdPCPe
hokg/ngJER4AfBjqNWXaJioyW1g6m2zd1m0jSqoP37hba6ocFVgHir53tZStjpti
FUnyljHPs9ardl0ajegyd3R2YPaIG68TDpKFzrVYVrogTgz+w7fiYSnjdOu+gB3R
pi/haE03X/kaBs/J5W2a06pgzWtyyFCFn6QIZm8aG/W+IM2d1CQ1HI5wP6KO2LJD
bmTGCXtsxMFARNi5mYW8+jpDXVAO0/hMd/0l8wblJym+uqUKxew5JDe+2QooKrp9
6LDZyv+neB2lBLShRf6G7smPd7pUCDBCmd0oNRxanywi5uq6krbescbK4zjUa1Vs
XtdMbnJ3jw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:14 2026 by rpki-client