This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer File: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer (raw, json) Hash identifier: bAAZFDfFmXJrZcJ3oSE2X3TyQK7HBOZAOswlNp/psoM= Subject key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BA20AE6FE097E1F75F4302C8D63411BBA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 09 Jan 2026 09:16:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42729 IP: 193.33.150.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:0a:e6:fe:09:7e:1f:75:f4:30:2c:8d:63:41:1b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 9 09:16:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98a3d09d2b456125a15d53f5520925f4fbf61728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:c2:84:b4:1e:3b:68:f2:f1:09:86:7b:74: c6:70:25:fd:ba:fc:95:bc:0d:3b:63:6b:77:f1:8e: 2e:23:74:72:17:0f:a8:89:ca:49:f9:6c:41:34:94: db:05:04:f7:a2:c5:21:28:96:7d:54:98:b9:09:f6: 7f:08:1d:19:84:b6:6a:3e:6d:ae:2f:66:5f:6c:20: 52:ca:c6:32:fa:78:9f:42:15:ee:bf:dd:37:4d:bb: 5d:b7:11:ac:bd:ce:74:7d:6d:c4:43:61:2b:81:dd: b6:ff:73:8a:02:6a:d6:b2:a0:73:a0:22:37:40:4d: 85:5c:a9:4e:d4:36:c3:65:e7:65:b3:36:cf:b0:12: 8f:bb:8b:49:4e:bd:58:a8:6f:b3:cd:70:ad:ce:d5: 29:b7:48:83:50:f2:26:bc:b4:ff:64:a1:cf:37:68: a0:17:c7:5d:26:bf:85:f4:85:ae:2c:1a:83:7e:dd: 53:86:c0:33:26:79:6a:d1:11:25:f2:c8:7e:fc:e2: e6:f0:2c:ba:10:c5:18:39:a7:0e:74:1b:a8:b5:71: 0b:a6:58:86:e2:0e:bf:87:da:89:6d:19:86:0a:ac: be:f7:86:4d:5d:88:dc:2e:39:d2:a2:f8:73:b6:be: ae:09:c1:23:96:f9:2c:50:b4:73:af:6c:0d:73:e4: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.150.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42729 Signature Algorithm: sha256WithRSAEncryption 93:63:e3:af:79:9e:9a:fd:42:c8:f5:71:21:76:a3:0e:51:74: 7e:09:e4:cc:03:a0:c0:ce:48:2b:a5:d7:f0:d8:28:97:7b:fb: 02:5a:cc:3d:20:3c:ef:52:08:26:6c:d5:b2:1a:d8:48:b3:ff: 11:d9:7f:1f:32:c4:4f:ef:44:85:b0:80:78:1a:ec:4d:36:6a: 2f:05:b5:a6:61:43:f5:82:69:a3:98:e7:a2:2c:ad:15:b8:c3: 54:48:7d:f1:03:e7:74:8e:7b:30:c3:9f:29:c1:1f:8f:4d:92: 38:4d:5c:27:a3:db:fd:c1:c9:02:6b:98:7f:98:e2:cb:4a:4a: 83:51:b0:5d:80:e2:f0:4c:f3:82:7c:d7:dc:09:45:22:26:42: 3b:9a:75:37:83:97:22:68:68:96:f3:31:f3:e0:c7:2b:64:cd: 2b:22:3b:3f:cb:26:22:c5:cf:0b:bb:1e:44:0f:3d:ba:d2:d8: a3:31:b8:5a:a5:4e:e1:f5:14:95:f7:77:ad:b4:ae:db:a2:cd: 46:d6:da:67:7d:1c:cb:30:da:45:79:1e:3b:a3:50:a6:09:84: da:c5:58:8e:39:67:ac:d9:95:29:6e:27:31:a2:02:3d:bc:73: 2c:42:ed:15:00:90:7f:be:7d:8e:93:e1:51:eb:c5:08:52:65: d5:18:00:8a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZuiCub+CX4fdfQwLI1jQRu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA5MDkxNjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGEzZDA5ZDJiNDU2MTI1YTE1ZDUzZjU1MjA5MjVmNGZiZjYxNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYDChLQeO2jy8QmGe3TGcCX9uvyV vA07Y2t38Y4uI3RyFw+oicpJ+WxBNJTbBQT3osUhKJZ9VJi5CfZ/CB0ZhLZqPm2u L2ZfbCBSysYy+nifQhXuv903TbtdtxGsvc50fW3EQ2Ergd22/3OKAmrWsqBzoCI3 QE2FXKlO1DbDZedlszbPsBKPu4tJTr1YqG+zzXCtztUpt0iDUPImvLT/ZKHPN2ig F8ddJr+F9IWuLBqDft1ThsAzJnlq0REl8sh+/OLm8Cy6EMUYOacOdBuotXELpliG 4g6/h9qJbRmGCqy+94ZNXYjcLjnSovhztr6uCcEjlvksULRzr2wNc+RpjwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJij0J0rRWEloV1T9VIJJfT79hcoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjL2U3YjMw NC1lNzc5LTQyMWQtYjBhNi0wNDMyMGIxZmMyMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvZTdiMzA0 LWU3NzktNDIxZC1iMGE2LTA0MzIwYjFmYzIyNy8xL21LUFFuU3RGWVNXaFhWUDFV Z2tsOVB2MkZ5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwSGWMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCm6TANBgkqhkiG9w0BAQsFAAOCAQEAk2Pjr3memv1CyPVxIXajDlF0fgnkzAOg wM5IK6XX8Ngol3v7AlrMPSA871IIJmzVshrYSLP/Edl/HzLET+9EhbCAeBrsTTZq LwW1pmFD9YJpo5jnoiytFbjDVEh98QPndI57MMOfKcEfj02SOE1cJ6Pb/cHJAmuY f5jiy0pKg1GwXYDi8EzzgnzX3AlFIiZCO5p1N4OXImholvMx8+DHK2TNKyI7P8sm IsXPC7seRA89utLYozG4WqVO4fUUlfd3rbSu26LNRtbaZ30cyzDaRXkeO6NQpgmE 2sVYjjlnrNmVKW4nMaICPbxzLELtFQCQf759jpPhUevFCFJl1RgAig== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:55 2026 by rpki-client