This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer File: mSlM_9YStex7SLhCMqRdarbd_5U.cer (raw, json) Hash identifier: QWFNRHsaZ0kw/Nx7D7LUhjtYUmDYH6QgVlvm0QdQ10g= Subject key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775940B85BF2278F97B2D60CB4A36762 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.219.126.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:40:b8:5b:f2:27:8f:97:b2:d6:0c:b4:a3:67:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:11:f5:b1:31:bf:bd:5b:d1:43:c8:6b:92: 74:1c:2a:27:79:c7:90:2f:64:83:61:80:be:b7:40: af:d6:0b:93:f6:cb:a8:a3:03:f9:3b:44:e7:bd:3b: 83:b8:51:0c:1c:e6:ed:72:42:fb:c6:68:1d:5d:24: ec:b1:bd:bb:f2:9e:63:b1:2e:0e:1a:fd:aa:2f:4f: 74:5a:26:b5:f4:87:02:8e:68:07:40:1e:ff:45:6d: b8:e2:04:45:0f:35:11:f0:59:d8:48:fc:d3:51:08: 39:96:eb:bf:be:1c:53:cd:ce:e1:d5:c9:cc:7e:8a: 96:65:94:d2:d6:23:46:18:31:a8:2b:7a:1f:9f:95: b7:84:a1:b4:28:7a:15:d9:c0:5d:af:bb:8b:b9:47: 03:e3:b5:75:04:cd:b3:97:0a:41:d0:96:16:5c:a2: ca:cc:d3:33:55:d5:07:2a:1c:a1:12:4a:33:2a:a2: a3:ae:e4:e3:32:5a:92:23:07:43:8f:ff:d7:91:1a: 7a:ad:c1:49:88:47:d5:27:e5:19:5a:cd:7a:d9:62: a0:6e:0d:8a:da:8d:5a:bd:2f:19:b3:f6:84:ff:bf: d8:c1:a7:67:e1:c9:a6:61:af:cf:38:d8:da:de:6a: d3:96:a2:e7:2e:1e:89:39:44:4f:49:28:a7:ef:bf: 19:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.219.126.0/24 Signature Algorithm: sha256WithRSAEncryption 13:21:dc:f7:13:f1:75:d5:f2:1e:a7:e4:89:ae:32:31:2a:e3: 5d:d1:ba:1f:0e:f6:17:06:e5:8f:9b:6a:c5:91:d4:25:69:13: 16:4c:3c:e8:5f:5f:38:c6:e8:8b:53:03:3a:91:a0:ad:8f:79: 8a:d8:c0:92:b5:cd:d1:8d:49:c8:23:e5:db:f1:5d:a6:3e:87: e9:b4:78:f9:21:7f:d4:ce:e3:b7:bb:57:a6:e1:ec:5b:7f:39: e4:5d:bc:b4:b7:63:b7:ff:c4:c2:21:64:0b:f6:70:4d:f4:41: 74:14:19:bf:05:f1:13:05:9a:93:b8:4d:92:ed:ed:1b:86:ce: 6f:9e:3e:9f:c6:69:f7:06:28:64:c1:dd:0b:ba:5d:5a:fd:4e: ce:dc:cb:09:bd:49:c8:a3:41:96:54:8b:8f:3d:e8:8b:5c:77: c9:e1:7e:32:87:7a:63:e1:69:2b:17:95:f5:fe:4a:51:72:99: 32:1d:01:07:50:f9:61:5e:21:b1:09:1f:1d:e1:77:11:6c:cf: f6:b2:23:6e:8c:eb:83:c0:83:fd:68:ba:d8:f6:05:af:b8:40: 5d:94:1b:a9:c6:08:db:99:28:aa:38:67:d2:7a:c1:c0:3f:7f: 6f:a1:1c:33:ca:db:35:f8:00:35:63:f1:f2:29:26:0a:a3:f0: c9:0c:b8:30 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3WUC4W/Inj5ey1gy0o2diMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTI5NGNmZmQ2MTJiNWVjN2I0OGI4NDIzMmE0NWQ2YWI2ZGRmZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSIR9bExv71b0UPIa5J0HConeceQ L2SDYYC+t0Cv1guT9suoowP5O0TnvTuDuFEMHObtckL7xmgdXSTssb278p5jsS4O Gv2qL090Wia19IcCjmgHQB7/RW244gRFDzUR8FnYSPzTUQg5luu/vhxTzc7h1cnM foqWZZTS1iNGGDGoK3ofn5W3hKG0KHoV2cBdr7uLuUcD47V1BM2zlwpB0JYWXKLK zNMzVdUHKhyhEkozKqKjruTjMlqSIwdDj//XkRp6rcFJiEfVJ+UZWs162WKgbg2K 2o1avS8Zs/aE/7/Ywadn4cmmYa/PONja3mrTlqLnLh6JOURPSSin778ZqwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFJkpTP/WErXse0i4QjKkXWq23f+VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzdjYWM0 YS02Yjk5LTQ1MWQtYTY0OS01ZDkyNzJlNDhhN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvN2NhYzRh LTZiOTktNDUxZC1hNjQ5LTVkOTI3MmU0OGE3Yy8xL21TbE1fOVlTdGV4N1NMaENN cVJkYXJiZF81VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwdt+MA0GCSqGSIb3DQEBCwUAA4IBAQATIdz3 E/F11fIep+SJrjIxKuNd0bofDvYXBuWPm2rFkdQlaRMWTDzoX184xuiLUwM6kaCt j3mK2MCStc3RjUnII+Xb8V2mPofptHj5IX/UzuO3u1em4exbfznkXby0t2O3/8TC IWQL9nBN9EF0FBm/BfETBZqTuE2S7e0bhs5vnj6fxmn3Bihkwd0Lul1a/U7O3MsJ vUnIo0GWVIuPPeiLXHfJ4X4yh3pj4WkrF5X1/kpRcpkyHQEHUPlhXiGxCR8d4XcR bM/2siNujOuDwIP9aLrY9gWvuEBdlBupxgjbmSiqOGfSesHAP39voRwzyts1+AA1 Y/HyKSYKo/DJDLgw -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:14 2026 by rpki-client