This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer File: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer (raw, json) Hash identifier: MOrpYWORldzkyGYqbO1pm9fqZtSvJ3HLUwT4QK9odT4= Subject key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A6973D2FE5B554E030113B3D9F452 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.24.174.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:69:73:d2:fe:5b:55:4e:03:01:13:b3:d9:f4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=985b50a10d2d58c67503eaaa701e510915dd5192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:90:0f:1e:7e:a4:22:b0:08:0e:22:38:59: ca:0d:99:d6:b6:c4:66:aa:c0:ba:63:cf:23:67:67: f9:dc:eb:63:6f:b5:1a:8e:19:ef:82:ca:f5:86:a3: 4b:92:9a:0e:5b:25:a7:90:4a:53:07:7f:c8:e7:25: da:1e:a1:9e:a9:a5:fb:b5:2a:68:28:74:f3:ed:32: 61:f3:0d:59:54:50:86:b2:ef:45:10:a1:98:94:7b: 18:d0:9f:cf:c6:6c:20:74:59:3d:e1:6d:de:ce:78: 4c:a7:b3:57:47:31:0d:08:8a:b6:80:51:a3:66:4f: c0:0e:8f:9d:7e:f3:2e:47:ea:89:3a:21:80:a4:a8: 85:ee:41:11:49:c4:93:16:0a:16:cc:5b:b5:e8:71: 0f:17:70:68:b1:29:00:6b:00:b5:98:72:08:33:9f: 8a:92:0b:eb:d5:d5:7e:38:20:99:fa:80:ce:6b:2e: d3:36:8c:2d:f6:4c:21:ee:d3:83:f8:11:32:58:4f: 1a:74:f8:68:44:35:9e:ae:26:f4:78:df:f3:12:8b: 87:9e:5e:60:49:c3:35:14:4a:2d:f7:e3:26:21:92: 82:2e:b2:ae:52:5f:04:e5:e8:63:5a:8d:5b:56:d8: e5:81:03:5e:9c:ae:26:1e:72:ca:79:07:e6:e4:5d: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.174.0/23 Signature Algorithm: sha256WithRSAEncryption 65:5f:a6:8c:26:d5:d7:22:d5:7c:87:02:d8:13:41:62:11:49: 37:d9:8c:52:3f:b8:af:26:64:9f:1b:71:f4:a2:80:e8:4b:36: af:1a:03:c9:56:21:e8:e1:4b:37:4b:01:3f:c9:35:7d:ef:8d: 46:4f:62:54:7e:c0:c4:3d:21:4f:65:03:4d:4e:c3:ce:80:9e: 81:ca:84:ce:72:a4:18:84:2e:b7:48:95:e7:c2:23:07:06:0b: 1e:9c:7b:62:14:2f:67:b4:19:d6:a2:a7:fc:a5:b1:45:a4:fa: 6e:b2:d7:fe:e9:d3:be:16:6e:41:a3:ee:23:98:f0:db:1b:42: 19:78:9b:1a:6e:d1:2a:b6:6e:99:d0:46:97:f0:76:f8:ea:04: ef:bb:4e:0e:ac:67:64:70:72:e3:cf:45:10:bc:32:e4:d7:c0: 0e:5b:5b:50:9c:65:4b:73:66:21:c5:28:b2:f5:81:ef:3e:3a: fa:b2:cc:ef:49:4d:c2:ea:9a:d9:16:b8:09:71:08:77:ad:b5: 60:d7:66:48:bf:76:55:1a:51:ce:cb:47:8b:ec:2b:9c:89:25: 99:99:62:f8:30:73:8d:98:56:27:82:9e:b7:e6:95:98:8c:de: ab:74:ef:5f:1b:72:60:54:8a:a4:d8:80:44:67:53:bb:2e:de: 11:e1:b3:67 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6Wmlz0v5bVU4DAROz2fRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODViNTBhMTBkMmQ1OGM2NzUwM2VhYWE3MDFlNTEwOTE1ZGQ1MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ2QDx5+pCKwCA4iOFnKDZnWtsRm qsC6Y88jZ2f53Otjb7Uajhnvgsr1hqNLkpoOWyWnkEpTB3/I5yXaHqGeqaX7tSpo KHTz7TJh8w1ZVFCGsu9FEKGYlHsY0J/PxmwgdFk94W3eznhMp7NXRzENCIq2gFGj Zk/ADo+dfvMuR+qJOiGApKiF7kERScSTFgoWzFu16HEPF3BosSkAawC1mHIIM5+K kgvr1dV+OCCZ+oDOay7TNowt9kwh7tOD+BEyWE8adPhoRDWerib0eN/zEouHnl5g ScM1FEot9+MmIZKCLrKuUl8E5ehjWo1bVtjlgQNenK4mHnLKeQfm5F1D6QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJhbUKENLVjGdQPqqnAeUQkV3VGSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzU2ODli MC1hZjZkLTQzODEtODk5Mi05MGY2NzE5ZTY3YjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNTY4OWIw LWFmNmQtNDM4MS04OTkyLTkwZjY3MTllNjdiOS8xL21GdFFvUTB0V01aMUEtcXFj QjVSQ1JYZFVaSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwhiuMA0GCSqGSIb3DQEBCwUAA4IBAQBlX6aM JtXXItV8hwLYE0FiEUk32YxSP7ivJmSfG3H0ooDoSzavGgPJViHo4Us3SwE/yTV9 741GT2JUfsDEPSFPZQNNTsPOgJ6ByoTOcqQYhC63SJXnwiMHBgsenHtiFC9ntBnW oqf8pbFFpPpustf+6dO+Fm5Bo+4jmPDbG0IZeJsabtEqtm6Z0EaX8Hb46gTvu04O rGdkcHLjz0UQvDLk18AOW1tQnGVLc2YhxSiy9YHvPjr6sszvSU3C6prZFrgJcQh3 rbVg12ZIv3ZVGlHOy0eL7CuciSWZmWL4MHONmFYngp635pWYjN6rdO9fG3JgVIqk 2IBEZ1O7Lt4R4bNn -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:59 2026 by rpki-client