This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer File: mTFQMIBh3NrF2EZc-ITGejuxkVk.cer (raw, json) Hash identifier: o6kHI67UIXidaRf9T3Ad0EKbIfFXySyPzrX4FP0wvJY= Subject key identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C128776DAB32112A71B194D1EB4442F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216316 IP: 2001:67c:d20::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:87:76:da:b3:21:12:a7:1b:19:4d:1e:b4:44:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993150308061dcdac5d8465cf884c67a3bb19159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:00:8d:b8:a8:08:4d:93:8e:8f:a6:53:98: 1e:bf:30:41:fc:ac:49:1f:da:21:31:37:3e:da:43: 93:57:60:1c:81:e6:3c:55:6f:40:56:d0:21:32:11: a4:f5:8a:95:88:27:2e:0e:85:42:48:db:2f:a2:98: 38:36:66:15:38:a8:f3:4c:58:e6:81:f3:9b:6b:2a: 6d:75:93:80:8a:6e:7b:57:19:97:b3:20:3f:5e:1e: 58:51:f6:6c:a2:b4:f6:f0:4d:ee:7d:2f:93:25:bd: 1a:ae:cf:60:fd:75:42:89:87:75:ff:2f:4e:0f:da: cf:64:da:bc:42:8e:0b:4a:1f:9e:75:ac:aa:8e:e6: 74:64:56:a5:87:ca:c9:1f:65:39:ad:56:29:13:47: a5:7d:26:a6:7a:32:e1:8b:1a:29:6c:88:aa:64:03: fb:8f:5c:f5:5e:13:0e:f0:f9:f9:3c:e0:40:c1:b6: 8f:0f:d8:1a:c7:8f:38:99:bf:ae:7a:5f:e8:9e:a9: 3d:f1:bf:8d:1a:90:b3:81:1f:e9:cf:6a:3f:ad:94: d4:89:cf:53:9b:8f:96:73:e6:4d:6d:e2:40:20:8e: e2:38:f4:95:30:38:a0:5a:8b:e9:cc:58:56:e6:7a: a9:04:6b:94:d9:d0:a3:04:df:68:70:6c:3f:f3:a4: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d20::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216316 Signature Algorithm: sha256WithRSAEncryption 06:dc:61:5d:d0:85:af:33:36:52:ee:54:b5:18:37:a0:17:16: 73:01:75:ce:ce:df:a7:af:d1:27:cc:c1:11:a9:4a:e2:4e:1a: f3:52:05:3c:2c:5b:b6:27:6b:3e:e9:16:d6:63:83:20:08:a5: 6b:93:65:c5:9b:39:06:20:cb:08:2b:53:a9:6d:e0:31:a6:65: ae:89:45:78:7e:ad:50:60:7f:01:05:9d:8f:b9:de:c7:56:83: a5:ae:22:2f:5c:aa:f7:b5:8a:a7:7c:17:c4:8c:2d:12:4b:cf: a0:02:95:bb:15:88:4b:18:5f:f4:1e:e8:ac:d3:9c:71:5a:79: 5c:01:2f:db:c4:96:48:82:8d:b8:23:d2:6f:55:c6:47:37:5b: 58:00:93:5f:69:3e:28:85:94:8b:2b:32:95:4f:c1:67:ba:4e: ea:b7:89:4b:83:60:fc:85:b6:bb:d4:06:5a:07:37:26:cc:5e: 72:e7:c4:31:88:46:98:57:6e:89:aa:7e:14:f3:65:78:1c:55: 7f:b6:70:57:e7:0e:e0:e6:9a:de:68:5f:d5:33:43:ab:b1:d1: 91:9f:52:8b:75:65:2c:76:32:91:86:f1:4a:79:ea:d1:92:91: 9d:ce:98:64:c8:2d:cc:33:d4:ff:39:96:7b:9e:8c:23:cd:71: 86:03:c9:8c -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8Eod22rMhEqcbGU0etEQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTMxNTAzMDgwNjFkY2RhYzVkODQ2NWNmODg0YzY3YTNiYjE5MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHAAjbioCE2Tjo+mU5gevzBB/KxJ H9ohMTc+2kOTV2AcgeY8VW9AVtAhMhGk9YqViCcuDoVCSNsvopg4NmYVOKjzTFjm gfObayptdZOAim57VxmXsyA/Xh5YUfZsorT28E3ufS+TJb0ars9g/XVCiYd1/y9O D9rPZNq8Qo4LSh+edayqjuZ0ZFalh8rJH2U5rVYpE0elfSamejLhixopbIiqZAP7 j1z1XhMO8Pn5POBAwbaPD9gax484mb+uel/onqk98b+NGpCzgR/pz2o/rZTUic9T m4+Wc+ZNbeJAII7iOPSVMDigWovpzFhW5nqpBGuU2dCjBN9ocGw/86QV2QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFJkxUDCAYdzaxdhGXPiExno7sZFZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzhhODQ1 YS0yNjY5LTQwNDUtOGQ4My01MmIyMzBlY2FjYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvOGE4NDVh LTI2NjktNDA0NS04ZDgzLTUyYjIzMGVjYWNhZS8xL21URlFNSUJoM05yRjJFWmMt SVRHZWp1eGtWay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA0gMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNM/DANBgkqhkiG9w0BAQsFAAOCAQEABtxhXdCFrzM2Uu5UtRg3oBcWcwF1 zs7fp6/RJ8zBEalK4k4a81IFPCxbtidrPukW1mODIAila5NlxZs5BiDLCCtTqW3g MaZlrolFeH6tUGB/AQWdj7nex1aDpa4iL1yq97WKp3wXxIwtEkvPoAKVuxWISxhf 9B7orNOccVp5XAEv28SWSIKNuCPSb1XGRzdbWACTX2k+KIWUiysylU/BZ7pO6reJ S4Ng/IW2u9QGWgc3JsxecufEMYhGmFduiap+FPNleBxVf7ZwV+cO4Oaa3mhf1TND q7HRkZ9Si3VlLHYykYbxSnnq0ZKRnc6YZMgtzDPU/zmWe56MI81xhgPJjA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:42 2026 by rpki-client