This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer File: mPt_CPlW06-VcZxTf7P5t-MwBrM.cer (raw, json) Hash identifier: 3A+Lxv1982pwj/yCdpOb+FkIQd+XoxcYyilK5lVWn/4= Subject key identifier: 98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECBB4BBD92B0D3712FDE9882744A48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.112.228.0/22 IP: 2a06:6640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bb:4b:bd:92:b0:d3:71:2f:de:98:82:74:4a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:06:cd:ff:53:2c:01:c3:b8:4c:64:62:aa: 91:5d:75:0c:53:a6:fb:30:06:49:5b:26:8e:60:1b: de:33:37:c7:81:57:36:67:e9:a2:65:e0:66:78:30: dc:ad:b9:31:b8:ce:b6:f8:ce:90:b7:a5:b9:bb:67: b4:d9:1e:df:53:48:6b:ec:fb:f0:bd:8b:2d:de:a0: b5:0b:8d:8b:9d:ad:b1:b8:29:c5:76:84:69:80:c5: e9:63:fa:8d:61:ac:ab:3c:c0:6b:37:4c:b4:7f:d0: 78:ef:24:56:1e:cb:71:f0:60:8c:5d:19:59:eb:a6: 8e:8c:5f:a8:ef:4c:3a:c7:b9:e1:82:25:60:16:1f: 40:d9:22:de:01:f2:6d:83:61:6c:50:e2:69:f7:5a: 36:40:41:05:67:8e:90:45:4a:70:7f:e8:87:53:f8: ea:08:25:f4:c9:2d:c5:ff:6b:aa:67:de:e3:27:ce: c8:0f:69:c6:84:dc:98:e1:c9:c9:5f:f7:76:a4:5b: 66:96:91:97:5e:20:65:c0:00:87:61:4e:a1:f1:d5: 18:d5:11:00:94:1f:40:e4:97:2b:17:65:43:1b:13: ff:2d:e0:83:aa:55:63:ba:ce:71:c9:0a:71:47:0b: 15:6a:44:69:97:cf:a4:f1:6e:fd:b3:8f:2f:0c:95: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.228.0/22 IPv6: 2a06:6640::/29 Signature Algorithm: sha256WithRSAEncryption 8d:2c:52:32:32:b8:84:10:7d:48:e1:ac:3d:1d:f3:7c:72:f3: 87:9e:ea:31:1b:91:a8:58:fe:89:66:75:a2:38:01:1b:9c:a0: 21:2b:a6:44:a2:8c:f8:fd:27:49:f9:8c:54:6d:54:58:76:f2: c8:8e:75:cb:80:df:c6:86:4d:07:24:96:ae:33:e3:ba:4d:8e: 4a:59:60:86:e4:41:13:4b:8d:e4:48:f0:17:a8:47:cc:0c:e3: dd:b1:76:84:b6:e7:bc:5b:fa:99:a1:8f:b4:b1:bc:c1:71:a4: ca:6a:a2:f2:43:03:fe:34:48:1f:f9:bc:de:1f:de:5c:cc:5a: dd:c5:41:a2:ee:49:3e:4d:1c:a7:45:97:09:96:ed:73:08:45: 6e:c1:e8:d3:87:5c:33:42:86:b0:3b:e5:4c:4c:6e:be:e0:c8: cc:4b:30:08:5c:3f:21:18:57:22:2e:b0:3d:4b:5f:40:3e:70: 16:b0:0f:89:04:0a:e5:66:46:c9:a7:9d:b0:3f:29:43:ee:f2: 87:e9:1c:50:22:a4:f4:c4:35:36:bf:b6:33:ed:50:a6:b6:a4: 16:96:f9:c5:17:e1:0e:35:e2:05:b0:92:09:04:4c:bf:5a:ef: 20:6a:9c:6c:ff:a7:c8:1f:b1:88:3c:55:ad:01:82:99:b0:3f: e7:6e:6c:5b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57LtLvZKw03Ev3piCdEpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGZiN2YwOGY5NTZkM2FmOTU3MTljNTM3ZmIzZjliN2UzMzAwNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaYGzf9TLAHDuExkYqqRXXUMU6b7 MAZJWyaOYBveMzfHgVc2Z+miZeBmeDDcrbkxuM62+M6Qt6W5u2e02R7fU0hr7Pvw vYst3qC1C42Lna2xuCnFdoRpgMXpY/qNYayrPMBrN0y0f9B47yRWHstx8GCMXRlZ 66aOjF+o70w6x7nhgiVgFh9A2SLeAfJtg2FsUOJp91o2QEEFZ46QRUpwf+iHU/jq CCX0yS3F/2uqZ97jJ87ID2nGhNyY4cnJX/d2pFtmlpGXXiBlwACHYU6h8dUY1REA lB9A5JcrF2VDGxP/LeCDqlVjus5xyQpxRwsVakRpl8+k8W79s48vDJV/iQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFJj7fwj5VtOvlXGcU3+z+bfjMAazMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzdlZmIz NS05Nzg3LTQ2ZjAtYjc5OS1kNWMyMTFlYjM5NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvN2VmYjM1 LTk3ODctNDZmMC1iNzk5LWQ1YzIxMWViMzk1Ni8xL21QdF9DUGxXMDYtVmNaeFRm N1A1dC1Nd0JyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXDkMA0EAgACMAcDBQMqBmZAMA0GCSqGSIb3 DQEBCwUAA4IBAQCNLFIyMriEEH1I4aw9HfN8cvOHnuoxG5GoWP6JZnWiOAEbnKAh K6ZEooz4/SdJ+YxUbVRYdvLIjnXLgN/Ghk0HJJauM+O6TY5KWWCG5EETS43kSPAX qEfMDOPdsXaEtue8W/qZoY+0sbzBcaTKaqLyQwP+NEgf+bzeH95czFrdxUGi7kk+ TRynRZcJlu1zCEVuwejTh1wzQoawO+VMTG6+4MjMSzAIXD8hGFciLrA9S19APnAW sA+JBArlZkbJp52wPylD7vKH6RxQIqT0xDU2v7Yz7VCmtqQWlvnFF+EONeIFsJIJ BEy/Wu8gapxs/6fIH7GIPFWtAYKZsD/nbmxb -----END CERTIFICATE-----Generated at Mon Feb 9 22:34:57 2026 by rpki-client