This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer File: mQxLs441zXAyDreRUgxsrTSksnE.cer (raw, json) Hash identifier: MUuxFtek625WI6MNS/dgQ+S9Jycu+1N1HAbrUPZW8lw= Subject key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C714D81EEC7A191CCCAC9EE2D1F29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56505 IP: 91.223.198.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:71:4d:81:ee:c7:a1:91:cc:ca:c9:ee:2d:1f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=990c4bb38e35cd70320eb791520c6cad34a4b271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:c7:55:75:df:c3:d6:b2:31:b2:ba:e8:07: 7f:28:05:eb:f7:f0:47:80:67:fc:fc:81:74:9e:41: f8:30:4e:3d:01:3a:f5:b7:05:c8:d7:ff:7b:86:83: dc:64:53:e0:14:0d:53:71:38:7a:37:9a:a5:a8:7f: d2:9b:70:8a:5f:28:8c:c8:d7:71:bd:fc:e4:77:e1: 82:61:31:d6:99:9d:6d:01:0d:45:6c:a5:50:c3:7e: ca:11:14:47:bf:ed:c9:53:36:6c:f2:14:36:2b:e5: 2c:0e:6d:3e:0f:45:0d:d1:39:4e:48:7c:00:1d:b0: 61:40:8b:f3:7f:cd:73:af:41:d4:9a:03:be:bc:bb: a7:d3:09:d0:6c:26:7d:55:c1:67:b3:c0:d3:26:11: 43:4d:87:bc:c5:f0:92:46:b6:a9:6a:a4:e5:ce:05: cf:e8:f8:39:f1:96:c3:07:81:de:27:f7:0a:3a:5c: 43:79:ac:14:ad:27:b9:ef:75:8b:c8:0d:cf:31:14: e5:54:fb:b3:77:82:4a:f1:06:62:c2:07:e8:76:b0: f9:9a:7c:4a:fd:42:4c:4f:7f:29:58:64:0f:17:38: b4:b5:68:1f:c4:37:10:5a:d2:24:88:4f:fc:b9:b5: b5:2e:8b:74:28:b2:ee:ca:61:91:e2:4c:c3:78:0d: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.198.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56505 Signature Algorithm: sha256WithRSAEncryption ad:49:77:15:71:f4:50:ec:e2:18:71:02:e8:96:1e:b1:af:2e: 20:70:47:80:68:a1:19:20:ae:d8:cb:37:3e:24:de:fb:e3:8e: 05:d4:9d:e8:a9:7d:bc:5b:10:9e:a6:f7:18:2f:2a:22:2c:c6: 11:7c:9f:8b:d9:b4:88:02:11:ac:92:3d:c8:bd:d9:66:ff:f0: b1:4e:33:f3:5a:d9:90:cc:11:29:af:17:13:97:9b:e1:c5:bd: 52:c3:a6:b1:05:7a:bf:36:e9:c8:82:2a:47:d7:c4:ed:89:82: f4:f9:12:4c:57:6a:ba:0b:a4:dd:f7:9a:7f:82:3b:4f:fb:ee: 8d:e8:9e:18:95:64:71:f2:ab:e4:65:d6:db:b9:a6:94:08:6b: 89:90:d4:88:8b:85:36:dd:da:56:13:8e:c3:f6:a4:29:77:07: bd:21:b4:72:e9:99:a4:dc:55:06:44:f0:4c:12:b1:b3:94:81: 26:65:62:c3:5a:3e:45:db:0a:91:ea:cc:f2:39:5d:26:a9:5b: 51:0e:a8:f2:6b:b3:97:fa:11:4b:e8:93:b2:05:46:f0:87:ad: 06:be:0b:5e:5a:49:40:f4:17:47:50:1e:96:b5:37:45:31:35: 53:c2:d3:a8:16:a4:c5:cf:b7:ca:e1:07:ea:c5:03:27:36:11: 06:ab:1b:a3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XHFNge7HoZHMysnuLR8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTBjNGJiMzhlMzVjZDcwMzIwZWI3OTE1MjBjNmNhZDM0YTRiMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtbHVXXfw9ayMbK66Ad/KAXr9/BH gGf8/IF0nkH4ME49ATr1twXI1/97hoPcZFPgFA1TcTh6N5qlqH/Sm3CKXyiMyNdx vfzkd+GCYTHWmZ1tAQ1FbKVQw37KERRHv+3JUzZs8hQ2K+UsDm0+D0UN0TlOSHwA HbBhQIvzf81zr0HUmgO+vLun0wnQbCZ9VcFns8DTJhFDTYe8xfCSRrapaqTlzgXP 6Pg58ZbDB4HeJ/cKOlxDeawUrSe573WLyA3PMRTlVPuzd4JK8QZiwgfodrD5mnxK /UJMT38pWGQPFzi0tWgfxDcQWtIkiE/8ubW1Lot0KLLuymGR4kzDeA2Z4QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJkMS7OONc1wMg63kVIMbK00pLJxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzQ0YzQy Yy0xZTY4LTRhYWItODM5ZC05NTkzZTNhNDM3MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNDRjNDJj LTFlNjgtNGFhYi04MzlkLTk1OTNlM2E0MzcyNS8xL21ReExzNDQxelhBeURyZVJV Z3hzclRTa3NuRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9/GMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDcuTANBgkqhkiG9w0BAQsFAAOCAQEArUl3FXH0UOziGHEC6JYesa8uIHBHgGih GSCu2Ms3PiTe++OOBdSd6Kl9vFsQnqb3GC8qIizGEXyfi9m0iAIRrJI9yL3ZZv/w sU4z81rZkMwRKa8XE5eb4cW9UsOmsQV6vzbpyIIqR9fE7YmC9PkSTFdquguk3fea f4I7T/vujeieGJVkcfKr5GXW27mmlAhriZDUiIuFNt3aVhOOw/akKXcHvSG0cumZ pNxVBkTwTBKxs5SBJmViw1o+RdsKkerM8jldJqlbUQ6o8muzl/oRS+iTsgVG8Iet Br4LXlpJQPQXR1AelrU3RTE1U8LTqBakxc+3yuEH6sUDJzYRBqsbow== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:56 2026 by rpki-client