This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer (raw, json) Hash identifier: 2EDQUR6vxTy6w+98UULaHYfSApDeJOHdjm6efjOX3mg= Subject key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC96C7EF7E79D2CC3DD3E46F2529314 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15691 IP: 45.133.144.0/22 IP: 185.127.164.0/22 IP: 185.175.124.0/22 IP: 212.19.96.0/19 IP: 212.77.64.0/19 IP: 2a01:bf40::/32 IP: 2a0e:75c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:6c:7e:f7:e7:9d:2c:c3:dd:3e:46:f2:52:93:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4f:94:bd:a5:ed:b0:d6:6e:de:09:27:22:dc: 84:5f:f4:d0:95:b4:00:f3:ca:9a:ed:b5:51:ef:1a: 2b:3e:84:95:ed:11:ae:e2:51:a8:9e:b0:20:1b:a4: 35:ec:18:36:fa:65:a7:e4:4e:40:32:7c:06:52:f2: 42:ef:e2:78:c1:79:3f:4c:0f:cd:d7:bb:49:59:3f: c3:c0:6a:da:67:2a:90:52:93:e8:50:35:89:c3:4c: 59:0e:49:91:bd:0a:f5:3a:5f:91:d3:b0:b6:01:76: ee:0c:31:92:1f:64:b5:17:89:ff:68:14:ce:db:0d: 45:c8:65:aa:df:c5:4f:cd:bb:4f:71:fe:9b:ac:66: d8:44:6b:a3:ae:5c:98:2a:60:ca:97:c6:80:17:41: 8e:e7:0a:8c:2b:ab:41:2c:5b:c9:a7:5a:2b:1a:9a: f5:fc:32:03:22:3e:56:ac:09:31:75:d8:c0:b1:00: 1c:8b:d2:29:b1:b0:5e:b4:33:eb:b2:d1:76:0e:24: 88:21:82:2b:51:ec:dc:ab:7e:2d:40:e6:6b:bf:8d: c2:f3:d1:0f:a7:39:b6:30:46:33:f8:a3:68:63:f9: 05:e9:81:45:81:d6:25:d2:f2:be:9e:fa:23:bf:e3: c0:46:3c:44:22:fe:8a:79:fe:2a:e8:73:36:91:3d: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.144.0/22 185.127.164.0/22 185.175.124.0/22 212.19.96.0/19 212.77.64.0/19 IPv6: 2a01:bf40::/32 2a0e:75c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15691 Signature Algorithm: sha256WithRSAEncryption 7f:0b:8e:48:42:fa:2f:6a:07:67:1a:44:a6:b2:07:51:25:a0: 60:5c:b9:95:2b:a3:dc:dd:54:8d:90:38:3c:c5:97:67:4e:f6: 94:68:56:a9:70:33:28:24:16:80:22:a3:f0:20:f5:ef:ad:87: 56:11:8e:dd:63:7a:55:a7:75:5f:9a:81:15:59:e4:79:f2:62: 20:00:b3:91:a4:e6:d3:3e:8a:69:a6:16:26:95:6e:2b:0e:bb: 92:42:fd:71:1b:1c:3c:07:44:c9:f6:89:f3:a5:54:32:46:bb: 9f:f7:c7:14:53:55:34:d4:93:fe:18:20:69:33:6a:6c:3a:89: 30:37:91:64:71:58:2d:6f:fb:a4:0d:b8:f3:10:f8:f2:e6:94: dd:87:15:68:9e:f7:5e:a5:54:5c:61:fd:b4:36:66:0e:f1:8c: fe:91:93:65:75:d6:b0:56:4d:71:90:ca:1f:6a:54:ae:c5:f5: 13:e8:f2:9f:38:3c:fc:eb:75:db:25:60:75:4d:3f:54:39:4f: 30:91:65:ba:08:62:05:66:66:63:c8:07:73:95:69:64:25:a7: b9:1a:f9:ff:81:d5:f3:dd:2a:3e:c0:bd:9e:a9:be:a6:03:d5: fc:8c:71:d5:c4:81:2d:83:d5:c0:0e:2b:f0:4f:4a:85:93:4f: 7c:30:fc:a4 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt9yWx+9+edLMPdPkbyUpMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTBkOWZlNzkzYjE4ZWVmOTFkYzc2ZmJjYmEyYjJjZmM1MmUwYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8k+UvaXtsNZu3gknItyEX/TQlbQA 88qa7bVR7xorPoSV7RGu4lGonrAgG6Q17Bg2+mWn5E5AMnwGUvJC7+J4wXk/TA/N 17tJWT/DwGraZyqQUpPoUDWJw0xZDkmRvQr1Ol+R07C2AXbuDDGSH2S1F4n/aBTO 2w1FyGWq38VPzbtPcf6brGbYRGujrlyYKmDKl8aAF0GO5wqMK6tBLFvJp1orGpr1 /DIDIj5WrAkxddjAsQAci9IpsbBetDPrstF2DiSIIYIrUezcq34tQOZrv43C89EP pzm2MEYz+KNoY/kF6YFFgdYl0vK+nvojv+PARjxEIv6Kef4q6HM2kT2LCQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFJkNn+eTsY7vkdx2+8uiss/FLgvEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2FmMWFh ZS1jNWY5LTQyYzctYTdmZi1lMjk2ZjgxOGFkZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvYWYxYWFl LWM1ZjktNDJjNy1hN2ZmLWUyOTZmODE4YWRlOS8xL21RMmY1NU94anUtUjNIYjd5 Nkt5ejhVdUM4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQCLYWQAwQCuX+kAwQCua98AwQF1BNgAwQF1E1A MBQEAgACMA4DBQAqAb9AAwUDKg51wDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI9 SzANBgkqhkiG9w0BAQsFAAOCAQEAfwuOSEL6L2oHZxpEprIHUSWgYFy5lSuj3N1U jZA4PMWXZ072lGhWqXAzKCQWgCKj8CD1762HVhGO3WN6Vad1X5qBFVnkefJiIACz kaTm0z6KaaYWJpVuKw67kkL9cRscPAdEyfaJ86VUMka7n/fHFFNVNNST/hggaTNq bDqJMDeRZHFYLW/7pA248xD48uaU3YcVaJ73XqVUXGH9tDZmDvGM/pGTZXXWsFZN cZDKH2pUrsX1E+jynzg8/Ot12yVgdU0/VDlPMJFlughiBWZmY8gHc5VpZCWnuRr5 /4HV890qPsC9nqm+pgPV/Ixx1cSBLYPVwA4r8E9KhZNPfDD8pA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:09 2026 by rpki-client