This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer File: mJre8bGpea83LsZ1WgtUIaBncbs.cer (raw, json) Hash identifier: iPi6C7PS/NGqxhG473RqSb8mKjpsfrayO+6D0E/xtJ8= Subject key identifier: 98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C075A5F72629EFF7759AB1DC6407DA561 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 29 Jan 2026 01:24:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35062 IP: 80.87.112.0/20 IP: 2001:4c98::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:07:5a:5f:72:62:9e:ff:77:59:ab:1d:c6:40:7d:a5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 29 01:24:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=989adef1b1a979af372ec6755a0b5421a06771bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:bd:cd:83:1d:35:a6:54:7c:45:0f:dc:ae: 92:c6:2d:09:39:77:57:7f:61:7a:9a:01:e4:df:f5: c8:28:55:30:6c:80:21:ff:3e:59:02:58:48:f6:ae: 2a:1a:ae:02:f0:03:d9:49:28:c5:36:7c:c9:8b:0b: c8:c4:cd:1f:08:c1:79:3e:ab:21:e1:29:6c:bf:d5: 3b:1f:a7:3c:4f:a7:5d:7d:27:94:ed:e0:18:a4:b3: 66:43:ac:96:7b:b7:fa:cd:16:d6:3c:c3:49:30:fe: 6c:ef:df:cb:0b:00:60:a5:15:d9:81:9a:47:61:b2: 70:8a:e0:47:db:bd:f3:bc:e6:58:41:85:0f:97:b8: d3:bb:40:34:1d:b9:fe:a0:e1:f9:5e:77:7f:27:0c: 3b:57:e2:a6:9b:1f:56:d6:59:6a:54:d2:49:04:b9: 2c:78:ab:b7:37:52:7a:3f:1f:9e:06:92:7f:4c:2b: d7:68:93:a7:8c:4c:cf:ec:b0:01:a1:86:09:9b:56: 97:01:0a:3a:43:d7:9e:96:d7:50:8a:5e:62:01:76: 4a:4d:90:dd:ec:9f:b2:93:55:27:6c:79:0d:fc:37: 82:f9:d6:ac:83:90:94:b6:76:db:40:89:79:0a:b1: 0e:2e:5f:ea:99:c2:06:ec:02:e5:92:64:d2:d2:46: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.87.112.0/20 IPv6: 2001:4c98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35062 Signature Algorithm: sha256WithRSAEncryption 4f:23:df:d5:56:26:d5:a4:f4:a5:ce:b5:07:01:bd:fb:af:3c: 13:c7:9c:96:ab:ab:a6:88:68:15:38:27:b6:27:a6:48:a1:3c: e1:ce:49:6b:d2:3c:07:56:e2:3f:03:b1:c3:c2:74:78:c0:30: eb:5f:88:60:d4:10:e2:96:5a:f9:25:c5:2b:ce:1e:39:36:3b: 4c:10:43:17:9c:fb:4e:1a:39:c5:11:78:ac:d4:1c:53:e2:c1: 36:0c:bf:c3:16:b5:cc:f5:41:71:d2:b7:b5:75:6e:0e:43:0f: fd:84:79:85:02:23:71:d8:95:f6:93:7f:e4:1a:22:8a:5d:f3: ce:79:d3:17:55:49:59:32:b3:90:fc:3b:1c:15:fc:f4:7c:a0: 18:76:d7:3e:51:40:80:40:4c:59:7f:a7:43:ec:ce:e8:9f:cb: d9:ed:9d:60:cc:4c:55:6f:1b:82:6b:42:7d:8c:9a:e5:43:f2: 52:8b:c4:43:1f:96:79:6b:fd:ca:44:2c:a8:72:a7:5a:2f:a2: 3f:fc:f9:2b:40:77:6c:54:c1:bf:11:eb:2f:13:eb:12:05:22: 33:5e:be:93:8a:09:23:e2:22:3a:0b:cd:e6:b6:50:70:bf:a3: 27:a2:98:42:14:82:fa:da:29:1f:2f:ea:be:60:1d:c1:93:49: 70:3c:46:7c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwHWl9yYp7/d1mrHcZAfaVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI5MDEyNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODlhZGVmMWIxYTk3OWFmMzcyZWM2NzU1YTBiNTQyMWEwNjc3MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwim9zYMdNaZUfEUP3K6Sxi0JOXdX f2F6mgHk3/XIKFUwbIAh/z5ZAlhI9q4qGq4C8APZSSjFNnzJiwvIxM0fCMF5Pqsh 4Slsv9U7H6c8T6ddfSeU7eAYpLNmQ6yWe7f6zRbWPMNJMP5s79/LCwBgpRXZgZpH YbJwiuBH273zvOZYQYUPl7jTu0A0Hbn+oOH5Xnd/Jww7V+Kmmx9W1llqVNJJBLks eKu3N1J6Px+eBpJ/TCvXaJOnjEzP7LABoYYJm1aXAQo6Q9eeltdQil5iAXZKTZDd 7J+yk1UnbHkN/DeC+dasg5CUtnbbQIl5CrEOLl/qmcIG7ALlkmTS0kZdLQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJia3vGxqXmvNy7GdVoLVCGgZ3G7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2UyNjMz OS0yYzFjLTQwNzMtOTNiYS01YjQyMzE4NjVmZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZTI2MzM5 LTJjMWMtNDA3My05M2JhLTViNDIzMTg2NWZlNi8xL21KcmU4YkdwZWE4M0xzWjFX Z3RVSWFCbmNicy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEUFdwMA0EAgACMAcDBQAgAUyYMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCI9jANBgkqhkiG9w0BAQsFAAOCAQEATyPf1VYm1aT0 pc61BwG9+688E8eclqurpohoFTgntiemSKE84c5Ja9I8B1biPwOxw8J0eMAw61+I YNQQ4pZa+SXFK84eOTY7TBBDF5z7Tho5xRF4rNQcU+LBNgy/wxa1zPVBcdK3tXVu DkMP/YR5hQIjcdiV9pN/5Boiil3zznnTF1VJWTKzkPw7HBX89HygGHbXPlFAgEBM WX+nQ+zO6J/L2e2dYMxMVW8bgmtCfYya5UPyUovEQx+WeWv9ykQsqHKnWi+iP/z5 K0B3bFTBvxHrLxPrEgUiM16+k4oJI+IiOgvN5rZQcL+jJ6KYQhSC+topHy/qvmAd wZNJcDxGfA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:48 2026 by rpki-client