This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer File: mTfH9VuM8OdKXeCQMprZtyjGrXc.cer (raw, json) Hash identifier: uYRNwr1QxkARolA/2Kr0wgTAVfIu8MmX99DfZf0FUKQ= Subject key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2391EFC95999FB45CAFAB586DDED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60710 AS: 206324 AS: 212265 IP: 185.1.195.0/24 IP: 185.189.144.0/22 IP: 2001:7f8:34::/48 IP: 2a0b:ed80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:23:91:ef:c9:59:99:fb:45:ca:fa:b5:86:dd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:d4:c1:07:48:08:a3:0d:76:c1:c2:02:50: c2:5f:f8:e6:a7:03:da:c2:e6:88:2b:07:b5:77:0e: b1:a5:39:48:c7:91:6f:0e:f6:80:f3:62:c9:92:b9: 50:10:87:8f:b5:e2:ff:45:3e:b0:05:a7:da:a9:95: 31:6a:b8:c9:1c:9d:ba:7c:57:6e:c6:22:72:b6:f3: f8:d9:76:0b:4d:a8:11:fc:01:fd:87:c1:4f:05:f6: 68:fa:e8:bd:e7:19:92:7a:7d:ab:d8:89:72:82:18: be:6c:26:3a:4b:e7:de:74:dc:d5:67:3a:27:1e:d3: ce:0b:b7:60:87:eb:57:eb:60:a0:20:f9:97:fa:8d: 4a:f1:92:0d:c8:b6:d7:75:c5:b2:ac:b0:fe:2c:1c: e8:8e:a9:ac:c7:56:e0:98:e0:01:1e:90:59:88:8d: d7:cf:af:9d:d4:89:e5:bc:86:cb:73:7c:48:a5:fd: 72:2f:3b:fb:d3:42:89:eb:31:2a:75:6a:f9:89:8c: 63:b2:a6:c9:cd:44:0a:3b:6e:cb:d9:ec:9e:0f:d8: f3:a5:8e:80:b4:5b:72:de:f4:2c:ee:77:73:41:94: 1e:6d:95:9a:93:06:92:d3:36:26:6c:11:16:f8:4d: 54:2d:36:f4:1b:d0:45:8d:3e:f6:14:9d:2e:61:23: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.195.0/24 185.189.144.0/22 IPv6: 2001:7f8:34::/48 2a0b:ed80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60710 206324 212265 Signature Algorithm: sha256WithRSAEncryption 1e:b0:8d:58:4c:d7:32:04:94:d4:c4:41:90:2e:c5:ff:fd:26: 7a:e9:7a:33:4a:b2:5a:98:ec:d0:af:21:39:60:a3:f2:85:5d: 9e:f1:60:f0:81:4d:ba:a8:40:5d:3b:0a:38:99:99:40:cd:6c: 1d:61:d3:7b:20:50:96:5a:11:dc:b6:62:e3:a3:fe:7f:81:f7: 2b:f3:cc:f5:78:f3:17:08:87:fe:53:77:40:f9:a6:fc:3a:30: a5:45:30:a1:84:f4:a5:00:d7:fc:3c:00:17:3e:99:de:79:5c: 0b:d6:db:f6:fa:5c:0e:19:a3:b8:9c:50:bf:b5:eb:da:7a:cc: 8c:3e:4c:d0:e6:76:43:df:12:09:26:59:44:ea:a9:f3:43:42: c5:d7:e2:e7:8f:81:37:7e:ae:03:7c:a4:16:0a:64:56:88:d0: 60:d1:db:c9:e3:f8:cd:33:32:c9:26:a4:83:9e:82:82:e5:d7: 3b:94:10:46:1c:42:df:e3:f3:0d:27:6c:24:50:e1:82:68:82: e7:29:ed:a1:9b:47:1f:82:bf:46:80:99:71:63:dd:7d:1a:f7: be:3e:dd:51:3c:12:c3:0d:b3:6a:c4:59:ad:a1:18:3e:4a:ab: 16:cd:09:b8:1d:b9:3b:e7:90:5b:05:d0:c1:9a:ef:cf:92:9d: 28:a8:9e:56 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt5fyOR78lZmftFyvq1ht3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTM3YzdmNTViOGNmMGU3NGE1ZGUwOTAzMjlhZDliNzI4YzZhZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBrUwQdICKMNdsHCAlDCX/jmpwPa wuaIKwe1dw6xpTlIx5FvDvaA82LJkrlQEIePteL/RT6wBafaqZUxarjJHJ26fFdu xiJytvP42XYLTagR/AH9h8FPBfZo+ui95xmSen2r2Ilyghi+bCY6S+fedNzVZzon HtPOC7dgh+tX62CgIPmX+o1K8ZINyLbXdcWyrLD+LBzojqmsx1bgmOABHpBZiI3X z6+d1InlvIbLc3xIpf1yLzv700KJ6zEqdWr5iYxjsqbJzUQKO27L2eyeD9jzpY6A tFty3vQs7ndzQZQebZWakwaS0zYmbBEW+E1ULTb0G9BFjT72FJ0uYSNHCwIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFJk3x/VbjPDnSl3gkDKa2bcoxq13MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzRmOGMy ZC1lYzQwLTRkM2MtODQyNi1iNzVlZjU2MzcyMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNGY4YzJk LWVjNDAtNGQzYy04NDI2LWI3NWVmNTYzNzIwYy8xL21UZkg5VnVNOE9kS1hlQ1FN cHJadHlqR3JYYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQAuQHDAwQCub2QMBYEAgACMBADBwAgAQf4ADQD BQMqC+2AMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwDtJgIDAyX0AgMDPSkwDQYJ KoZIhvcNAQELBQADggEBAB6wjVhM1zIElNTEQZAuxf/9JnrpejNKslqY7NCvITlg o/KFXZ7xYPCBTbqoQF07CjiZmUDNbB1h03sgUJZaEdy2YuOj/n+B9yvzzPV48xcI h/5Td0D5pvw6MKVFMKGE9KUA1/w8ABc+md55XAvW2/b6XA4Zo7icUL+169p6zIw+ TNDmdkPfEgkmWUTqqfNDQsXX4uePgTd+rgN8pBYKZFaI0GDR28nj+M0zMskmpIOe goLl1zuUEEYcQt/j8w0nbCRQ4YJogucp7aGbRx+Cv0aAmXFj3X0a974+3VE8EsMN s2rEWa2hGD5KqxbNCbgduTvnkFsF0MGa78+SnSionlY= -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:12 2026 by rpki-client