This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer (raw, json) Hash identifier: 8vTVwSVwctVM0xag49SHaaiu/d9jQ5sbqgdZRA45fgQ= Subject key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB255B00DD507EF5F77FA4516CFBDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35370 IP: 78.152.64.0/19 IP: 87.243.128.0/18 IP: 2a0b:9e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:25:5b:00:dd:50:7e:f5:f7:7f:a4:51:6c:fb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9821e37eab6ef6326933e5fa3748d07d83026db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:40:cd:38:a7:4b:06:c0:c1:1e:09:2c:b7: 80:64:07:72:db:d3:5d:16:37:cc:33:f3:1f:53:7f: 77:4d:31:33:1b:e4:99:af:32:5c:ad:e6:c0:75:ab: a0:b1:fb:27:29:ab:31:ae:3e:f0:39:1a:f9:1c:7d: ef:5f:2e:c7:62:5e:cd:bc:12:51:ef:9a:94:6e:ba: d3:ea:12:6b:19:4b:68:5c:6b:94:0b:f6:e5:85:73: 9d:cd:75:e0:5d:8a:da:61:04:44:11:4c:61:f1:ae: d9:95:4c:14:24:f5:96:b9:83:97:06:4a:ab:b1:29: fa:56:9e:ac:a4:1c:49:ae:de:6c:0c:d4:d8:16:ee: ca:13:5e:d3:12:2a:fa:77:1e:74:9a:c9:bb:4f:84: ef:04:26:bf:5b:44:ef:37:a6:71:57:b5:8b:d0:d0: 79:00:4b:db:71:12:1a:6a:c7:ac:c9:b5:e4:fd:8a: da:2c:14:a0:61:29:09:31:5d:07:d1:da:cb:14:29: 1b:dc:b4:1c:03:48:e0:ff:cd:12:0c:e6:b1:fd:5b: 36:0e:09:8f:48:22:bc:1d:0e:fa:3e:ea:df:a6:22: 41:a8:4b:55:a6:2b:d1:9e:85:63:d5:36:0a:6d:12: 74:51:01:c8:8b:04:e7:0c:a5:ee:e6:c1:f8:7f:b0: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.152.64.0/19 87.243.128.0/18 IPv6: 2a0b:9e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35370 Signature Algorithm: sha256WithRSAEncryption 86:42:a1:00:ff:7e:03:bf:26:0e:11:c2:31:8f:37:37:09:c0: 5d:6d:90:7b:eb:f3:cb:fc:6c:50:89:21:71:ce:d9:c5:40:3a: 1f:34:39:a6:f5:a3:af:02:17:ab:42:0b:10:26:37:ad:9f:be: 54:0e:62:9f:68:d1:09:40:3e:3b:0e:a1:78:6e:c8:f7:d9:41: 8c:ea:20:3f:df:12:07:2c:7f:c6:f5:e3:8d:9e:d5:de:f9:eb: 37:ff:17:4a:e1:40:b2:54:42:40:f8:60:ca:3d:d9:a7:b9:08: bf:43:c5:71:2f:ca:07:7e:a7:c4:f8:d0:e1:37:2d:dc:83:63: 41:c3:fe:8e:f0:29:a1:21:c4:ef:1d:b9:f8:83:86:00:8e:88: ec:86:11:4c:3e:cb:f6:f2:ed:cd:c1:44:9e:3d:b6:5b:b4:08: 1c:55:f9:a1:a6:29:3a:34:20:18:8b:fe:63:ec:e1:0d:eb:4c: 2c:31:96:03:3a:9f:b3:a3:16:f7:d2:68:0a:44:ac:b5:e8:0c: f3:f8:4b:d0:d7:ce:22:02:e2:cb:67:28:89:1b:79:b4:88:80: 1b:fb:aa:9a:b2:73:1c:b5:56:d7:b9:d2:4b:3a:c2:8f:c0:22: f9:a2:5a:cf:17:85:37:64:7b:d0:b2:c9:35:86:f9:9e:83:c0: 20:fc:8e:5d -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yyVbAN1QfvX3f6RRbPvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODIxZTM3ZWFiNmVmNjMyNjkzM2U1ZmEzNzQ4ZDA3ZDgzMDI2ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf9AzTinSwbAwR4JLLeAZAdy29Nd FjfMM/MfU393TTEzG+SZrzJcrebAdaugsfsnKasxrj7wORr5HH3vXy7HYl7NvBJR 75qUbrrT6hJrGUtoXGuUC/blhXOdzXXgXYraYQREEUxh8a7ZlUwUJPWWuYOXBkqr sSn6Vp6spBxJrt5sDNTYFu7KE17TEir6dx50msm7T4TvBCa/W0TvN6ZxV7WL0NB5 AEvbcRIaasesybXk/YraLBSgYSkJMV0H0drLFCkb3LQcA0jg/80SDOax/Vs2DgmP SCK8HQ76PurfpiJBqEtVpivRnoVj1TYKbRJ0UQHIiwTnDKXu5sH4f7CWXwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJgh436rbvYyaTPl+jdI0H2DAm2wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1L2MxNWRk Yi1lMWVmLTQzMDgtOTg4ZC1hZWZhNzU3ZTBjMzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvYzE1ZGRi LWUxZWYtNDMwOC05ODhkLWFlZmE3NTdlMGMzOC8xL21DSGpmcXR1OWpKcE0tWDZO MGpRZllNQ2JiQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFTphAAwQGV/OAMA0EAgACMAcDBQMqC54AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCKKjANBgkqhkiG9w0BAQsFAAOCAQEAhkKh AP9+A78mDhHCMY83NwnAXW2Qe+vzy/xsUIkhcc7ZxUA6HzQ5pvWjrwIXq0ILECY3 rZ++VA5in2jRCUA+Ow6heG7I99lBjOogP98SByx/xvXjjZ7V3vnrN/8XSuFAslRC QPhgyj3Zp7kIv0PFcS/KB36nxPjQ4Tct3INjQcP+jvApoSHE7x25+IOGAI6I7IYR TD7L9vLtzcFEnj22W7QIHFX5oaYpOjQgGIv+Y+zhDetMLDGWAzqfs6MW99JoCkSs tegM8/hL0NfOIgLiy2coiRt5tIiAG/uqmrJzHLVW17nSSzrCj8Ai+aJazxeFN2R7 0LLJNYb5noPAIPyOXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:18 2026 by rpki-client