This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer (raw, json) Hash identifier: Up22vj98krE4rFlAHR6KYllt3SG9iTGhzte0zLHuKv0= Subject key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12942DEC0A0704B895A8C424A14E90 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208757 IP: 45.86.48.0/22 IP: 45.95.72.0/22 IP: 45.158.200.0/22 IP: 2a0e:d980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:94:2d:ec:0a:07:04:b8:95:a8:c4:24:a1:4e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=988296c50d94bbed225f2867231fa5093debea91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:09:9e:cb:1d:b7:89:3d:39:43:e9:b3:19:ed: ce:cd:e9:96:ec:1c:c2:ea:7b:98:78:9e:fd:4a:1d: 0e:db:7c:7e:e0:2a:db:dc:58:76:cc:6c:eb:e8:62: d3:b0:1f:4e:4c:a1:7d:7d:73:43:2b:f6:df:85:64: 01:41:b0:67:d6:51:69:d7:57:df:ad:25:c5:ac:67: 1d:79:11:62:a2:66:05:2b:a9:56:9c:0a:56:ca:69: e3:d2:cd:73:2f:5a:8e:c2:de:16:2d:b4:da:8b:17: f0:be:b0:9a:0c:6a:e8:b9:13:6b:9d:71:5d:23:38: ab:94:ab:2c:8c:53:28:47:35:40:0e:b4:54:e5:18: b4:29:ea:82:24:1f:ad:67:98:86:01:41:af:3e:ee: 3b:99:d7:e6:83:ba:88:31:cc:c9:f7:05:b8:34:4f: 39:a4:20:51:06:76:33:2b:9b:18:a5:39:72:24:06: 0a:a2:de:6e:c8:bf:51:1b:ba:24:0c:ae:7d:34:9a: 8f:0e:ed:6d:89:ea:fa:ca:48:b1:db:51:ea:00:16: 1f:fe:bc:10:6c:84:f9:52:f3:a8:ce:d3:a3:0c:f3: d2:f6:58:5f:2f:29:20:d6:b0:26:25:f3:82:c8:b3: 2e:cd:38:05:1f:09:23:41:65:26:4e:66:ea:86:4b: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.48.0/22 45.95.72.0/22 45.158.200.0/22 IPv6: 2a0e:d980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208757 Signature Algorithm: sha256WithRSAEncryption 36:f4:ff:b4:27:ea:a1:2a:11:16:c8:ee:fe:27:b6:cd:ae:fa: 86:db:42:76:ef:6f:8a:50:4b:2d:79:9b:11:21:2b:94:5c:94: 84:8b:c4:56:1d:b9:f2:98:d3:d9:54:99:2c:3e:42:5e:69:e9: 30:b3:d2:1a:d5:27:cd:af:6c:47:78:a1:79:7b:0b:dc:dd:bd: 42:23:06:1a:f8:21:f2:1f:b8:30:2f:0a:cd:fe:4e:77:d0:37: f8:0f:22:c4:40:31:44:6b:07:d0:32:5f:c2:2f:7b:50:25:9c: 33:60:c2:a6:d8:d2:98:41:44:5c:ba:1c:2d:7e:62:7d:eb:ca: 70:ec:6f:ae:85:aa:81:e9:39:05:16:7e:b6:04:9c:e3:79:3d: f5:90:b3:0c:d5:4b:92:cb:c9:7f:09:27:25:a3:b3:cb:38:c6: c6:38:36:02:5f:04:26:be:9f:43:ce:c6:50:6d:26:d3:60:62: 1b:30:d6:e9:83:b6:b6:cb:fc:7e:2e:7d:44:5e:ed:cf:04:91: c5:09:15:79:eb:dd:5b:56:29:8b:01:26:27:e2:58:a5:0d:42: 92:d6:6e:93:66:64:03:57:b4:d8:12:59:f6:7a:42:ca:0b:2d: cb:41:f2:6b:5a:22:2a:b6:7f:c5:01:de:9d:49:34:2e:93:cb: ea:d4:30:98 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8EpQt7AoHBLiVqMQkoU6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODgyOTZjNTBkOTRiYmVkMjI1ZjI4NjcyMzFmYTUwOTNkZWJlYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAmeyx23iT05Q+mzGe3OzemW7BzC 6nuYeJ79Sh0O23x+4Crb3Fh2zGzr6GLTsB9OTKF9fXNDK/bfhWQBQbBn1lFp11ff rSXFrGcdeRFiomYFK6lWnApWymnj0s1zL1qOwt4WLbTaixfwvrCaDGrouRNrnXFd IzirlKssjFMoRzVADrRU5Ri0KeqCJB+tZ5iGAUGvPu47mdfmg7qIMczJ9wW4NE85 pCBRBnYzK5sYpTlyJAYKot5uyL9RG7okDK59NJqPDu1tier6ykix21HqABYf/rwQ bIT5UvOoztOjDPPS9lhfLykg1rAmJfOCyLMuzTgFHwkjQWUmTmbqhktNawIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFJiClsUNlLvtIl8oZyMfpQk96+qRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2Y3NjBk MC0yZjY3LTQzMDctOWYwYy0zOTkzYjUwYjIwNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZjc2MGQw LTJmNjctNDMwNy05ZjBjLTM5OTNiNTBiMjA2NC8xL21JS1d4UTJVdS0waVh5aG5J eC1sQ1QzcjZwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLVYwAwQCLV9IAwQCLZ7IMA0EAgACMAcDBQMq DtmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvdTANBgkqhkiG9w0BAQsFAAOC AQEANvT/tCfqoSoRFsju/ie2za76httCdu9vilBLLXmbESErlFyUhIvEVh258pjT 2VSZLD5CXmnpMLPSGtUnza9sR3iheXsL3N29QiMGGvgh8h+4MC8Kzf5Od9A3+A8i xEAxRGsH0DJfwi97UCWcM2DCptjSmEFEXLocLX5ifevKcOxvroWqgek5BRZ+tgSc 43k99ZCzDNVLksvJfwknJaOzyzjGxjg2Al8EJr6fQ87GUG0m02BiGzDW6YO2tsv8 fi59RF7tzwSRxQkVeevdW1YpiwEmJ+JYpQ1CktZuk2ZkA1e02BJZ9npCygsty0Hy a1oiKrZ/xQHenUk0LpPL6tQwmA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:37 2026 by rpki-client