This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer File: mBPi9jUdO00eYapAFvGyz6YtfN8.cer (raw, json) Hash identifier: hmGk85vfReesuR7pMIYWNGcnvFr6EQbuZFSdrtFElXU= Subject key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE16C624C9DBE844DE1C3E795FE686 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51484 IP: 46.45.64.0/18 IP: 2a03:24c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:16:c6:24:c9:db:e8:44:de:1c:3e:79:5f:e6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:85:ef:35:02:0d:0d:b9:7f:3d:14:22:fb: 7d:37:c7:d2:f7:1d:a5:12:69:c5:2b:1f:eb:93:e3: 62:00:19:5d:08:83:77:6c:2c:89:cf:a9:77:70:60: 39:82:bb:29:33:8b:16:7c:34:3c:f4:98:88:a8:12: 05:9d:71:04:8b:9f:24:8b:08:f6:6e:7c:41:71:b5: d3:17:e7:26:36:4d:75:91:36:ae:4d:7d:7d:90:07: b5:4a:1e:67:32:67:07:3a:e2:7d:34:ad:3d:ed:f7: a6:c4:8f:6b:aa:94:91:e6:b0:9e:fd:08:50:3d:8b: e2:bf:eb:3c:8b:31:dc:31:b0:3f:a3:84:ba:79:dd: 87:33:c2:72:dc:2b:dd:e9:5e:f6:e3:85:6c:1d:2b: 69:91:7c:f6:f2:3f:46:4b:6b:70:fb:52:9c:d2:42: 7b:04:84:d4:bd:95:00:57:93:44:8e:94:12:db:a8: 1f:a9:ca:18:f2:4c:98:a6:41:b4:29:64:59:3b:04: ba:d4:39:ac:5c:55:76:df:7c:78:c6:c6:e4:30:07: d5:8b:09:97:69:00:3b:2b:2c:f9:10:f5:8f:2a:55: ad:8b:a1:59:37:87:0e:2d:93:75:77:6e:3c:1a:85: 08:a4:9f:95:e7:f0:a4:09:21:24:5c:f8:12:c2:7b: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.45.64.0/18 IPv6: 2a03:24c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51484 Signature Algorithm: sha256WithRSAEncryption 3f:0a:af:59:91:f5:02:0f:b6:10:4d:bc:1d:c2:6c:6d:67:4b: 2f:53:e7:66:d9:33:16:1e:8e:61:a5:5a:94:19:a8:fe:2a:04: ca:99:c2:49:dd:76:75:fe:03:35:2f:36:21:03:fd:32:cc:c3: 6b:24:6a:10:ad:43:f9:ae:77:cd:af:04:a1:0a:fd:07:a8:f3: 91:08:bf:06:17:27:9f:20:a5:a1:fa:45:8f:b2:7f:6f:3f:65: 04:61:bc:23:9a:57:5a:db:28:2b:f5:34:cf:5e:e5:ac:e5:7a: 9d:72:44:e3:2a:60:1e:5f:63:29:31:ce:17:58:9c:a5:4d:eb: 90:ea:2e:46:9a:bb:7c:58:08:7e:a5:34:18:d6:c0:7e:5b:8b: ec:55:51:94:99:6a:2d:12:63:0c:93:aa:84:0e:25:b1:79:94: 12:58:a8:33:d2:1e:7b:6c:62:e9:b9:60:ce:45:9d:39:99:3b: be:c5:d7:af:53:53:9d:ad:46:26:1d:51:29:82:e2:57:2b:23: 25:cf:fe:1e:46:26:dd:6f:f4:f4:d7:47:01:60:77:9e:72:ed: 7b:ae:01:88:ad:98:30:fc:de:99:22:23:1b:a3:89:ce:a4:4e: e7:a9:c8:8c:ad:22:97:26:51:e7:be:4f:13:be:05:0b:8e:d8: ce:61:3b:b3 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87hbGJMnb6ETeHD55X+aGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODEzZTJmNjM1MWQzYjRkMWU2MWFhNDAxNmYxYjJjZmE2MmQ3Y2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgiF7zUCDQ25fz0UIvt9N8fS9x2l EmnFKx/rk+NiABldCIN3bCyJz6l3cGA5grspM4sWfDQ89JiIqBIFnXEEi58kiwj2 bnxBcbXTF+cmNk11kTauTX19kAe1Sh5nMmcHOuJ9NK097femxI9rqpSR5rCe/QhQ PYviv+s8izHcMbA/o4S6ed2HM8Jy3Cvd6V7244VsHStpkXz28j9GS2tw+1Kc0kJ7 BITUvZUAV5NEjpQS26gfqcoY8kyYpkG0KWRZOwS61DmsXFV233x4xsbkMAfViwmX aQA7Kyz5EPWPKlWti6FZN4cOLZN1d248GoUIpJ+V5/CkCSEkXPgSwntJcQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJgT4vY1HTtNHmGqQBbxss+mLXzfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzNmNzQ2 My00ZDRmLTQxYTYtOGQ3Mi0zOTUxMzc4YWE3NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvM2Y3NDYz LTRkNGYtNDFhNi04ZDcyLTM5NTEzNzhhYTc2Ni8xL21CUGk5alVkTzAwZVlhcEFG dkd5ejZZdGZOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQGLi1AMA0EAgACMAcDBQAqAyTAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDJHDANBgkqhkiG9w0BAQsFAAOCAQEAPwqvWZH1Ag+2 EE28HcJsbWdLL1PnZtkzFh6OYaValBmo/ioEypnCSd12df4DNS82IQP9MszDayRq EK1D+a53za8EoQr9B6jzkQi/BhcnnyClofpFj7J/bz9lBGG8I5pXWtsoK/U0z17l rOV6nXJE4ypgHl9jKTHOF1icpU3rkOouRpq7fFgIfqU0GNbAfluL7FVRlJlqLRJj DJOqhA4lsXmUElioM9Iee2xi6blgzkWdOZk7vsXXr1NTna1GJh1RKYLiVysjJc/+ HkYm3W/09NdHAWB3nnLte64BiK2YMPzemSIjG6OJzqRO56nIjK0ilyZR575PE74F C47YzmE7sw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:53 2026 by rpki-client