This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer File: mQqAlo5MlgPKKxPdHRRlll2PPb8.cer (raw, json) Hash identifier: O1F7nYJBkczgAmqDsC4eDZdS9L6yRvMGy5D5GWKSX8Q= Subject key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB16DFEDEC92B51DFE71511AD92E15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42659 IP: 194.110.136.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:16:df:ed:ec:92:b5:1d:fe:71:51:1a:d9:2e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:62:f4:5c:60:4a:69:61:4e:4f:2c:98:f1: 5c:98:3f:5f:a0:17:b0:38:a3:80:d5:5b:10:39:b3: 3e:e2:90:04:b6:6f:da:d1:52:36:d4:b4:0e:11:1b: b7:d6:c2:f1:32:e3:d0:a4:2b:5c:b2:ef:2f:57:47: ab:03:25:63:35:46:4a:c1:b5:23:5b:b1:13:99:8a: 31:0f:d9:ea:9d:4c:65:7e:ab:71:0c:df:32:1e:a6: 03:4e:03:0c:a4:26:83:ab:f0:34:2d:e9:ff:29:72: 68:4c:5e:7a:34:ed:0c:04:97:6e:dd:25:86:c3:f4: 93:32:0f:a6:b1:16:0c:6d:6b:47:95:7b:64:46:81: 9f:2d:19:e0:22:14:04:c2:9c:da:a8:39:e5:7a:a7: bc:80:22:9c:a5:67:7d:8f:67:65:16:c3:be:7b:77: 5c:65:6f:b1:bc:02:12:5d:2e:0c:d8:64:df:0a:08: 9a:96:40:75:c6:70:d5:10:ab:f5:af:50:38:54:a1: 9c:17:ec:bb:f3:8c:af:2d:bf:4b:45:ef:1e:62:1a: 5b:5a:28:b9:74:5f:20:e0:72:bb:f2:63:e4:66:cf: a5:52:05:3b:7f:c7:7e:b0:c3:0e:24:f6:53:72:2d: 06:dd:68:dc:6b:3e:b7:6b:78:2e:a6:d3:37:a6:da: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.136.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42659 Signature Algorithm: sha256WithRSAEncryption 41:b7:53:41:43:a5:32:53:5e:80:37:72:c1:4d:70:12:c4:04: 9a:fa:a1:34:ad:38:54:ae:db:69:4f:6b:7b:b5:77:96:67:c4: a1:42:b6:52:d7:76:90:46:bc:e6:ff:3b:84:3f:c6:b0:10:c4: 34:f5:5c:7d:16:21:58:db:da:78:fe:c6:3f:60:67:a1:fc:53: 40:b2:eb:cb:a7:cb:e8:51:3b:1c:d4:8a:64:7b:67:5e:1b:4c: a2:87:b0:1b:86:49:a1:7e:47:0c:78:00:ca:e1:43:5f:47:d8: 17:32:d3:95:3b:51:93:ab:30:b6:31:03:fe:3d:7a:0f:ef:bc: 9b:39:22:91:a7:7b:21:8d:36:80:64:d8:bd:18:f3:68:2b:86: 04:a5:17:3a:9b:95:91:9e:a5:27:3c:df:06:f5:ff:b7:ad:03: 3e:f5:56:14:c4:26:a3:20:fd:6b:00:a0:f9:88:d2:75:0f:41: 28:ad:2d:a7:c8:e2:d6:0d:9e:27:bf:d8:ec:ef:6e:be:88:1a: 69:af:5d:e2:a3:4a:c7:47:59:62:e3:21:cc:3d:b8:84:4c:bf: 50:59:b9:0b:8d:fb:bd:28:a6:90:a1:b7:90:da:67:2d:ee:e8: 8e:bf:ef:65:78:43:69:00:d7:24:24:f7:72:6a:8c:f9:85:c0: 09:ed:9c:d4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9yxbf7eyStR3+cVEa2S4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTBhODA5NjhlNGM5NjAzY2EyYjEzZGQxZDE0NjU5NjVkOGYzZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Vi9FxgSmlhTk8smPFcmD9foBew OKOA1VsQObM+4pAEtm/a0VI21LQOERu31sLxMuPQpCtcsu8vV0erAyVjNUZKwbUj W7ETmYoxD9nqnUxlfqtxDN8yHqYDTgMMpCaDq/A0Len/KXJoTF56NO0MBJdu3SWG w/STMg+msRYMbWtHlXtkRoGfLRngIhQEwpzaqDnleqe8gCKcpWd9j2dlFsO+e3dc ZW+xvAISXS4M2GTfCgialkB1xnDVEKv1r1A4VKGcF+y784yvLb9LRe8eYhpbWii5 dF8g4HK78mPkZs+lUgU7f8d+sMMOJPZTci0G3Wjcaz63a3guptM3ptpWrwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJkKgJaOTJYDyisT3R0UZZZdjz2/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0LzYxYTBh OS1jNDY2LTQ2OWMtYWZiZS04ZmVkNTA5MDk3NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvNjFhMGE5 LWM0NjYtNDY5Yy1hZmJlLThmZWQ1MDkwOTc3MC8xL21RcUFsbzVNbGdQS0t4UGRI UlJsbGwyUFBiOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwm6IMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCmozANBgkqhkiG9w0BAQsFAAOCAQEAQbdTQUOlMlNegDdywU1wEsQEmvqhNK04 VK7baU9re7V3lmfEoUK2Utd2kEa85v87hD/GsBDENPVcfRYhWNvaeP7GP2BnofxT QLLry6fL6FE7HNSKZHtnXhtMooewG4ZJoX5HDHgAyuFDX0fYFzLTlTtRk6swtjED /j16D++8mzkikad7IY02gGTYvRjzaCuGBKUXOpuVkZ6lJzzfBvX/t60DPvVWFMQm oyD9awCg+YjSdQ9BKK0tp8ji1g2eJ7/Y7O9uvogaaa9d4qNKx0dZYuMhzD24hEy/ UFm5C437vSimkKG3kNpnLe7ojr/vZXhDaQDXJCT3cmqM+YXACe2c1A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:37 2026 by rpki-client