This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer (raw, json) Hash identifier: 0meAWIsSgh3Hi21KyV+OcU0tTKER1tezNPQ/7xiD7CI= Subject key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38FD602FDA6C12C202EACBF8A2B547 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29092 AS: 199483 IP: 31.14.0.0/22 IP: 91.209.103.0/24 IP: 185.15.24.0/22 IP: 185.167.0.0/22 IP: 185.221.88.0/22 IP: 193.164.151.0/24 IP: 195.47.241.0/24 IP: 195.66.119.0/24 IP: 2a02:f840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fd:60:2f:da:6c:12:c2:02:ea:cb:f8:a2:b5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:0a:c6:b4:3f:e6:24:7f:99:72:34:26:a5: 60:f3:e4:d3:44:ff:6d:55:9b:77:9a:7d:84:ef:e7: 0d:7b:82:88:46:13:eb:b0:eb:5b:6a:f0:fb:ec:46: e6:b8:01:6f:c7:ad:26:a2:da:85:0f:27:2c:c8:b1: 70:91:09:fa:8d:a0:61:d9:d4:b4:f6:fd:9a:c1:f8: 22:9f:64:f4:e8:b6:5e:38:be:4e:bb:c2:86:db:e1: 80:66:47:c9:3d:33:08:44:77:97:c0:7f:d4:a1:c7: 91:90:6f:ef:f5:ed:63:d1:02:ed:00:2b:57:85:dc: da:7b:ef:53:6a:e4:f6:5e:37:c7:fe:31:8d:79:e6: 9b:21:0d:93:3d:c1:ff:ed:ca:ca:05:fd:79:e6:c7: a9:06:e6:09:fe:ba:6b:35:6d:ad:6b:a0:22:47:90: 02:97:21:19:d4:eb:95:a4:75:f7:f2:f7:3d:b2:e9: d7:c2:09:cb:28:31:c3:7f:1c:1e:56:37:b5:dd:91: 7f:c0:97:91:d0:78:54:1c:9b:22:1c:d2:00:db:ae: 8f:56:44:40:87:89:4b:47:ac:8e:35:ea:dc:70:85: a3:b4:5b:0e:5d:5a:9d:25:bd:5d:09:5c:6b:97:54: 4d:78:dd:94:78:0c:be:10:ab:13:47:bc:8b:f3:93: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.0.0/22 91.209.103.0/24 185.15.24.0/22 185.167.0.0/22 185.221.88.0/22 193.164.151.0/24 195.47.241.0/24 195.66.119.0/24 IPv6: 2a02:f840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29092 199483 Signature Algorithm: sha256WithRSAEncryption 7b:3a:42:33:a4:ef:c0:3a:69:10:2e:78:29:97:d6:57:99:6b: 66:7d:68:6d:7c:fc:de:c9:89:f2:65:c5:8b:d2:70:b6:54:c5: 54:ac:9a:ec:1d:40:0f:f5:ae:7c:85:cf:e5:67:c4:96:04:81: 30:d3:6a:76:fb:8c:bd:0b:24:89:45:e1:55:44:e4:70:13:24: c5:31:e6:eb:88:39:7a:ff:19:3f:1e:1c:91:a1:64:13:9f:01: b9:fb:5e:84:fd:26:2d:62:a5:11:c1:2a:b3:02:e4:c0:dc:fd: 21:64:cb:2e:87:e8:03:d0:f9:f0:34:c7:62:77:61:ce:e0:c6: 90:a1:70:3f:f1:c6:d8:4e:1a:d0:87:0d:cf:97:7e:d8:f8:42: 99:f8:6a:60:e7:0d:31:71:b4:e6:b0:e0:4e:5d:44:17:78:c9: 18:99:76:63:da:a8:db:d0:f3:f6:22:6f:19:52:13:de:10:88: c9:e8:64:85:9a:c2:48:4f:6f:1e:2e:35:7c:1a:da:06:19:78: 0c:3d:7c:f1:e6:7c:3c:e7:22:06:e1:57:aa:44:36:44:6f:2a: 82:ff:ea:1a:73:9b:90:3b:ef:84:f9:ad:dd:fa:fb:fe:9c:66: c1:88:f8:87:73:ce:95:25:68:ae:53:4f:05:f0:28:50:d8:b1: b7:e9:d0:1f -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZt+OP1gL9psEsIC6sv4orVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTA3YzdiODk2NTZkZDMzOWNiOThmYjdjMmIwMzcxYzU5MjZhNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfsKxrQ/5iR/mXI0JqVg8+TTRP9t VZt3mn2E7+cNe4KIRhPrsOtbavD77EbmuAFvx60motqFDycsyLFwkQn6jaBh2dS0 9v2awfgin2T06LZeOL5Ou8KG2+GAZkfJPTMIRHeXwH/UoceRkG/v9e1j0QLtACtX hdzae+9TauT2XjfH/jGNeeabIQ2TPcH/7crKBf155sepBuYJ/rprNW2ta6AiR5AC lyEZ1OuVpHX38vc9sunXwgnLKDHDfxweVje13ZF/wJeR0HhUHJsiHNIA266PVkRA h4lLR6yONerccIWjtFsOXVqdJb1dCVxrl1RNeN2UeAy+EKsTR7yL85NCJQIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFJkHx7iWVt0znLmPt8KwNxxZJqZBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzdkZDI4 OS02Y2I1LTQzNzEtODQ2Yy05M2RlYzczNWY3MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvN2RkMjg5 LTZjYjUtNDM3MS04NDZjLTkzZGVjNzM1ZjcxNy8xL21RZkh1SlpXM1RPY3VZLTN3 ckEzSEZrbXBrRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQCHw4AAwQAW9FnAwQCuQ8YAwQCuacAAwQCud1Y AwQAwaSXAwQAwy/xAwQAw0J3MA0EAgACMAcDBQMqAvhAMB4GCCsGAQUFBwEIAQH/ BA8wDaALMAkCAnGkAgMDCzswDQYJKoZIhvcNAQELBQADggEBAHs6QjOk78A6aRAu eCmX1leZa2Z9aG18/N7JifJlxYvScLZUxVSsmuwdQA/1rnyFz+VnxJYEgTDTanb7 jL0LJIlF4VVE5HATJMUx5uuIOXr/GT8eHJGhZBOfAbn7XoT9Ji1ipRHBKrMC5MDc /SFkyy6H6APQ+fA0x2J3Yc7gxpChcD/xxthOGtCHDc+Xftj4Qpn4amDnDTFxtOaw 4E5dRBd4yRiZdmPaqNvQ8/YibxlSE94QiMnoZIWawkhPbx4uNXwa2gYZeAw9fPHm fDznIgbhV6pENkRvKoL/6hpzm5A774T5rd36+/6cZsGI+IdzzpUlaK5TTwXwKFDY sbfp0B8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:18 2026 by rpki-client