This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer (raw, json) Hash identifier: 4vb6ZyYB+GUQQd97qOdMFYJyj4MOz3/2fNGDFc4tRJI= Subject key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA49C7FC90790A45AF5107D342F6A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211529 IP: 2001:67c:14ac::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:49:c7:fc:90:79:0a:45:af:51:07:d3:42:f6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9928b812e2e9f472eec7d233f604af263e850f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:7b:ea:52:e3:93:61:c2:d7:34:fd:fd:3b: f7:76:73:3c:97:7b:3d:6b:05:34:bf:b9:f4:cc:da: 27:09:74:0b:11:6a:0a:03:96:91:41:70:3b:e1:eb: 9f:38:b7:e2:c5:3f:77:e3:c1:39:f2:f4:03:72:72: 59:37:74:f8:c8:0c:1a:6e:bf:a7:18:21:b2:2c:7d: 96:90:a1:a5:c1:29:44:2e:21:02:59:37:c0:4c:1c: 3b:df:02:b2:83:07:79:ed:3a:15:dd:97:41:93:d1: 2e:7c:b7:8d:15:70:83:e2:ec:7a:19:99:6a:2c:f3: 42:ae:dc:a8:fd:e9:be:dd:4c:30:6d:8f:c2:cb:9e: e9:cc:f1:bf:05:23:73:29:0f:d7:20:de:ff:4c:db: 5b:a2:b9:8e:4b:48:91:1b:50:e6:15:b3:65:ca:ba: a0:c6:d0:3d:2e:4e:f4:4c:c8:b4:9a:be:1d:53:cd: 45:28:59:92:f6:d7:00:f0:aa:cc:5a:08:e2:b8:2c: fc:1b:3d:95:4b:5a:80:77:55:87:5c:54:79:ea:f3: 1d:a7:5f:93:3b:6a:8d:da:cb:ee:01:cf:02:c1:fe: 7d:8f:33:79:71:93:0d:6e:0e:2d:30:04:d9:85:b0: eb:43:b0:ab:cf:14:f3:61:e2:39:e8:40:c9:07:49: 8f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:14ac::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211529 Signature Algorithm: sha256WithRSAEncryption 2c:72:12:f3:cf:dd:b9:44:41:45:5f:37:a7:b2:88:66:7e:94: 7c:d5:77:a6:c3:31:20:29:79:a6:da:3a:65:da:28:7e:5a:88: 8d:e3:68:8f:18:d1:56:69:7d:6d:ab:9f:ee:a2:13:e8:5a:71: 5d:90:e8:1e:84:c1:b1:ef:5f:cd:f7:d8:a9:66:13:c7:53:5b: 97:62:58:37:8b:eb:f4:ac:02:28:5e:96:1c:34:f0:3e:ba:b7: a1:b5:b7:5f:81:c9:58:bd:96:a4:1f:17:34:c7:4e:89:41:04: df:bb:9e:ee:26:10:c5:6d:e5:23:6c:b9:fc:1d:9f:09:8c:f5: 74:6f:28:fb:84:bc:80:fc:ba:36:cb:58:f2:f9:b5:25:20:d3: 1f:64:a3:fe:0c:87:a8:8c:36:5d:52:1f:1b:68:fd:cd:f4:f5: 26:b6:33:59:6e:12:80:a4:c3:ff:ae:41:04:d0:79:19:ce:66: b2:a1:2e:82:c5:74:ea:00:54:2d:66:7c:df:d2:87:72:13:0c: a4:d1:3f:b6:ae:a6:15:c2:fb:75:1e:f8:fd:86:5a:f0:ea:07: 5d:b1:60:a1:61:98:b7:fc:cd:45:cf:f1:cb:89:25:3c:0a:8f: 50:6c:17:4b:62:02:60:7a:69:16:88:3c:db:97:55:d6:2f:50: 26:ba:da:b6 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt9yknH/JB5CkWvUQfTQvakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTI4YjgxMmUyZTlmNDcyZWVjN2QyMzNmNjA0YWYyNjNlODUwZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU176lLjk2HC1zT9/Tv3dnM8l3s9 awU0v7n0zNonCXQLEWoKA5aRQXA74eufOLfixT9348E58vQDcnJZN3T4yAwabr+n GCGyLH2WkKGlwSlELiECWTfATBw73wKygwd57ToV3ZdBk9EufLeNFXCD4ux6GZlq LPNCrtyo/em+3UwwbY/Cy57pzPG/BSNzKQ/XIN7/TNtbormOS0iRG1DmFbNlyrqg xtA9Lk70TMi0mr4dU81FKFmS9tcA8KrMWgjiuCz8Gz2VS1qAd1WHXFR56vMdp1+T O2qN2svuAc8Cwf59jzN5cZMNbg4tMATZhbDrQ7CrzxTzYeI56EDJB0mPHwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJkouBLi6fRy7sfSM/YEryY+hQ8xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzJkOTky OS00ZWZmLTQ3OTgtYTUzOC1jMDE4YmQ3ZWQ0ODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMmQ5OTI5 LTRlZmYtNDc5OC1hNTM4LWMwMThiZDdlZDQ4MC8xL21TaTRFdUxwOUhMdXg5SXo5 Z1N2Smo2RkR6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBSsMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM6STANBgkqhkiG9w0BAQsFAAOCAQEALHIS88/duURBRV83p7KIZn6UfNV3 psMxICl5pto6ZdooflqIjeNojxjRVml9bauf7qIT6FpxXZDoHoTBse9fzffYqWYT x1Nbl2JYN4vr9KwCKF6WHDTwPrq3obW3X4HJWL2WpB8XNMdOiUEE37ue7iYQxW3l I2y5/B2fCYz1dG8o+4S8gPy6NstY8vm1JSDTH2Sj/gyHqIw2XVIfG2j9zfT1JrYz WW4SgKTD/65BBNB5Gc5msqEugsV06gBULWZ839KHchMMpNE/tq6mFcL7dR74/YZa 8OoHXbFgoWGYt/zNRc/xy4klPAqPUGwXS2ICYHppFog825dV1i9QJrratg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:06 2026 by rpki-client