This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer (raw, json) Hash identifier: Qo8ugQtQhojMP7QOL4H1Mn1XTPDwHXvh42nBeOZBQn8= Subject key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE0C8C637652796394826EA9CD18D5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60576 IP: 185.74.12.0/22 IP: 2a05:4840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0c:8c:63:76:52:79:63:94:82:6e:a9:cd:18:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:6b:8b:0d:0e:ea:43:eb:10:80:c8:a5:6f: 89:8f:3c:cc:4c:be:77:ac:ae:1d:81:22:af:19:03: 66:c1:90:b6:6a:b4:8b:4f:d6:a9:35:c2:16:eb:b1: 02:2d:84:14:87:2a:2e:08:59:36:26:22:85:95:d7: e7:4f:3d:dc:b9:a6:a5:92:12:2b:2f:ac:79:9a:25: 48:a4:6c:eb:48:8d:b5:cd:fc:6d:05:3c:c4:4e:6f: 4e:55:a7:aa:5f:3f:d3:ec:f8:b6:d8:a2:7a:87:ff: 82:48:d3:6a:5d:a8:fc:94:85:04:d4:13:65:c3:9c: 3f:86:39:9f:8f:57:9e:14:ce:94:2b:04:e3:4b:d7: ec:ed:24:36:1b:d4:25:1f:23:44:ce:22:46:d5:ae: 7c:a8:d6:9b:0f:fc:fe:fb:70:dd:02:a7:f0:b8:75: a0:90:2f:98:0f:e5:40:70:71:6e:e5:8a:2c:13:7c: 35:1f:7e:ea:58:1e:77:19:51:80:a8:6d:8e:4f:ed: bc:7f:e3:6d:eb:0e:d7:0b:03:95:c3:9d:24:55:5f: 5c:71:1e:2b:86:56:98:a8:ab:93:09:e3:06:1e:d6: be:f4:e3:82:fc:29:ce:72:ae:ca:45:8d:a7:cb:bc: 58:1c:c0:59:1f:36:ea:d8:d5:b6:35:ae:ab:0e:73: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.74.12.0/22 IPv6: 2a05:4840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60576 Signature Algorithm: sha256WithRSAEncryption 8b:11:1f:29:81:26:6d:a2:05:4a:2b:bd:87:ed:ae:79:ba:98: d0:7a:08:0c:41:a8:72:22:2a:d6:92:1a:bb:5a:41:8e:f1:5e: 4a:c7:5b:a1:60:26:61:38:41:a8:09:08:b1:cb:a7:01:47:77: 63:23:4b:34:7b:b8:7e:c5:21:1f:1e:5d:71:23:84:30:53:8a: bf:9f:c2:6c:c4:aa:96:2c:ec:29:f0:26:2f:93:84:d1:35:7a: b4:b1:94:5f:ca:a7:14:3f:2f:62:ec:ac:08:cc:b4:d0:ea:7d: 64:f1:e6:ff:27:9b:e1:23:e5:a1:d7:d6:4c:97:63:36:5e:79: 5b:55:4f:9c:3f:21:12:25:b7:73:b9:ba:81:8e:2c:f6:da:bc: bc:e6:ed:ae:1a:1c:40:5a:4a:a0:fa:81:87:17:8a:e8:27:d1: 9d:f1:6e:1e:46:a1:32:ac:97:d6:6a:87:96:b6:6a:96:25:af: 21:1d:d4:0f:28:63:91:89:bc:1a:7e:99:86:0c:2f:41:c2:7c: a7:f6:61:42:82:a9:b1:bf:81:54:be:34:51:4d:39:06:44:a0: 9e:a4:49:97:ea:08:89:9b:8c:33:77:9a:12:9e:90:e7:d2:8e: 44:0f:03:d8:e2:2f:a9:69:a4:f1:25:9a:1c:0c:97:8a:a0:4d: 0d:3e:13:17 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87gyMY3ZSeWOUgm6pzRjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODY5MGFmMDYyZWE5YjNhZTVmNjRjZjlhOWZlYTU2MzI0YzZiZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Zriw0O6kPrEIDIpW+JjzzMTL53 rK4dgSKvGQNmwZC2arSLT9apNcIW67ECLYQUhyouCFk2JiKFldfnTz3cuaalkhIr L6x5miVIpGzrSI21zfxtBTzETm9OVaeqXz/T7Pi22KJ6h/+CSNNqXaj8lIUE1BNl w5w/hjmfj1eeFM6UKwTjS9fs7SQ2G9QlHyNEziJG1a58qNabD/z++3DdAqfwuHWg kC+YD+VAcHFu5YosE3w1H37qWB53GVGAqG2OT+28f+Nt6w7XCwOVw50kVV9ccR4r hlaYqKuTCeMGHta+9OOC/CnOcq7KRY2ny7xYHMBZHzbq2NW2Na6rDnPfNQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJhpCvBi6ps65fZM+an+pWMkxr2XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzUxMjMx My1hZmNkLTRlOWEtYmI3MC03MTAwNWY3ZjAyYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNTEyMzEz LWFmY2QtNGU5YS1iYjcwLTcxMDA1ZjdmMDJhOC8xL21Ha0s4R0xxbXpybDlrejVx ZjZsWXlUR3ZaYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUoMMA0EAgACMAcDBQMqBUhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsoDANBgkqhkiG9w0BAQsFAAOCAQEAixEfKYEmbaIF Siu9h+2uebqY0HoIDEGociIq1pIau1pBjvFeSsdboWAmYThBqAkIscunAUd3YyNL NHu4fsUhHx5dcSOEMFOKv5/CbMSqlizsKfAmL5OE0TV6tLGUX8qnFD8vYuysCMy0 0Op9ZPHm/yeb4SPlodfWTJdjNl55W1VPnD8hEiW3c7m6gY4s9tq8vObtrhocQFpK oPqBhxeK6CfRnfFuHkahMqyX1mqHlrZqliWvIR3UDyhjkYm8Gn6ZhgwvQcJ8p/Zh QoKpsb+BVL40UU05BkSgnqRJl+oIiZuMM3eaEp6Q59KORA8D2OIvqWmk8SWaHAyX iqBNDT4TFw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:10 2026 by rpki-client