This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer File: jMMA-vL21JGGqLYuCPGQEHdDlz0.cer (raw, json) Hash identifier: Mgl2w9OpliOJSKKBfEEevqNX1TodtOVCCua1Djxd470= Subject key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C24363975E6B7E3D2B0DA0D693E4C3E9C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 03 Feb 2026 15:54:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62113 IP: 45.136.36.0/22 IP: 185.38.24.0/22 IP: 194.31.164.0/22 IP: 2a00:fbe0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:36:39:75:e6:b7:e3:d2:b0:da:0d:69:3e:4c:3e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 3 15:54:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cc300faf2f6d49186a8b62e08f190107743973d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:48:25:4a:78:62:ca:f0:3c:0e:e7:57:22: 40:f6:a8:fc:38:ba:1c:11:67:88:0e:d9:f8:cc:02: 16:2a:3f:85:8f:21:07:4f:d2:5d:e1:54:a8:77:bc: 34:b7:68:e2:15:5f:b3:10:66:b1:f9:df:94:8e:ca: 96:15:79:44:c6:6c:0e:d3:b9:89:47:f4:c4:cb:a9: 8b:74:9b:f8:ff:38:82:2d:5a:01:b7:7d:8b:5f:2d: b0:79:4e:db:f0:fe:eb:f4:e2:68:55:03:d0:83:e4: 6a:17:d0:b6:eb:e2:37:c5:21:f6:e6:78:54:6c:73: e7:a8:a7:26:83:12:2f:54:88:3b:05:9f:f4:d6:1f: 61:22:30:08:93:c7:d3:8d:8b:99:1d:4b:69:c9:6e: 50:90:2d:03:83:26:27:8c:bb:55:f7:2a:b4:ef:2e: 6c:79:39:5e:a3:dd:53:95:83:df:fb:ca:5d:d9:2e: 7d:97:07:62:9b:62:01:99:3b:3b:11:c6:66:4c:05: e6:7a:83:e0:02:86:88:a1:42:ad:58:b4:ec:71:40: bb:b2:8c:00:10:17:01:f6:5b:e8:72:7e:6b:4a:47: d9:fa:19:10:23:1e:2d:6a:a6:29:d6:5a:bb:fc:ab: bc:d5:6b:6e:01:0e:54:73:27:67:b6:db:d3:b7:40: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.36.0/22 185.38.24.0/22 194.31.164.0/22 IPv6: 2a00:fbe0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62113 Signature Algorithm: sha256WithRSAEncryption 84:e4:44:be:a9:13:bd:18:3e:4a:e2:de:95:52:ca:62:44:5d: 30:0f:c5:98:26:ef:fc:5a:4a:55:cd:77:d6:2d:4d:0a:fc:87: b4:dd:7f:a1:05:dd:bf:28:c9:0f:76:24:1e:06:b8:3c:c1:75: 1d:95:23:36:a5:28:bd:59:60:f8:b5:f6:31:1a:0e:56:b9:28: f4:13:c0:d2:94:87:77:0d:f6:68:56:e4:0e:49:12:1f:49:9a: fc:be:82:47:a9:96:73:a7:a8:de:cf:12:84:f4:13:fd:c3:57: c8:eb:1b:0f:3d:46:ea:80:d2:13:a6:e7:8e:be:6c:84:4e:29: 3a:ab:cf:20:ca:b6:e3:ed:e9:3e:de:d6:50:20:ab:5a:42:94: 8a:a3:fd:22:89:53:6b:97:e9:80:1f:5f:12:c5:69:cd:e8:61: 28:fd:83:b9:12:c4:3f:c9:2c:74:12:40:70:bd:22:a4:c0:6d: 39:f7:ef:19:7c:dd:92:4c:e7:44:f4:78:4f:72:57:98:b2:30: 8e:b8:ab:b7:f5:9f:eb:ef:d8:9a:72:08:a2:92:a2:19:c7:9a: c3:ab:7a:1d:a1:1a:91:3d:bc:13:97:91:38:a6:53:7f:6b:86: 74:85:8a:0b:b1:c6:bf:db:23:b3:04:e5:65:d5:f2:b0:c0:49: 1d:f0:bf:4c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZwkNjl15rfj0rDaDWk+TD6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAzMTU1NDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2MzMDBmYWYyZjZkNDkxODZhOGI2MmUwOGYxOTAxMDc3NDM5NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdJIJUp4YsrwPA7nVyJA9qj8OLoc EWeIDtn4zAIWKj+FjyEHT9Jd4VSod7w0t2jiFV+zEGax+d+UjsqWFXlExmwO07mJ R/TEy6mLdJv4/ziCLVoBt32LXy2weU7b8P7r9OJoVQPQg+RqF9C26+I3xSH25nhU bHPnqKcmgxIvVIg7BZ/01h9hIjAIk8fTjYuZHUtpyW5QkC0DgyYnjLtV9yq07y5s eTleo91TlYPf+8pd2S59lwdim2IBmTs7EcZmTAXmeoPgAoaIoUKtWLTscUC7sowA EBcB9lvocn5rSkfZ+hkQIx4taqYp1lq7/Ku81WtuAQ5UcydnttvTt0CbAQIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFIzDAPry9tSRhqi2LgjxkBB3Q5c9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhkOTA2 MmRlLWY1MzYtNDQ1ZC1iYTcxLTAzNWZiZmVjYWFkOC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGQ5 MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNhYWQ4LzAvOENDMzAwRkFGMkY2 RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgME Ai2IJAMEArkmGAMEAsIfpDANBAIAAjAHAwUDKgD74DAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMA8qEwDQYJKoZIhvcNAQELBQADggEBAITkRL6pE70YPkri3pVSymJE XTAPxZgm7/xaSlXNd9YtTQr8h7Tdf6EF3b8oyQ92JB4GuDzBdR2VIzalKL1ZYPi1 9jEaDla5KPQTwNKUh3cN9mhW5A5JEh9Jmvy+gkeplnOnqN7PEoT0E/3DV8jrGw89 RuqA0hOm546+bIROKTqrzyDKtuPt6T7e1lAgq1pClIqj/SKJU2uX6YAfXxLFac3o YSj9g7kSxD/JLHQSQHC9IqTAbTn37xl83ZJM50T0eE9yV5iyMI64q7f1n+vv2Jpy CKKSohnHmsOreh2hGpE9vBOXkTimU39rhnSFiguxxr/bI7ME5WXV8rDASR3wv0w= -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:35 2026 by rpki-client