This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer File: mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer (raw, json) Hash identifier: f7mkyF3Po5BOjUbbNIGt/6jlIbGN2Y83+JsftKC8f2Y= Subject key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC89009253EA9D6A3B4121181682FD4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34718 AS: 39032 AS: 47452 IP: 62.209.128.0/19 IP: 80.80.208.0/20 IP: 87.237.232.0/21 IP: 89.236.192.0/18 IP: 94.141.64.0/19 IP: 185.6.40.0/22 IP: 185.248.44.0/22 IP: 194.55.92.0/22 IP: 217.30.160.0/20 IP: 2a02:f10::/29 IP: 2a03:540::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:90:09:25:3e:a9:d6:a3:b4:12:11:81:68:2f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993900f66e70b2fffd9c0ce92602f2f45c659961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:b1:13:e7:aa:ae:87:01:03:f4:70:4d:fe: 8b:7a:82:2d:8b:dd:81:cb:c0:ac:ca:98:60:93:36: 22:21:0e:99:f3:54:50:5a:ca:8a:8d:d3:cb:a9:c4: 08:26:2a:23:3b:4f:9f:d1:b3:5a:0e:e9:65:c7:53: 45:af:cf:b1:d6:a7:c0:e5:b4:d0:8b:0c:19:70:bc: e7:cb:4c:cb:4e:b1:2e:33:b4:a4:df:37:c9:86:2d: 67:77:d5:24:bb:11:bf:18:12:cc:3e:98:b0:58:99: 8b:15:8c:6d:4e:97:89:43:88:77:73:24:f9:b8:6a: a6:8a:2a:05:49:1c:3b:de:ba:f0:7b:ed:3e:9f:48: e0:09:18:ed:20:df:23:1e:33:c0:c5:e9:fe:e5:b1: 3f:b0:ce:8f:14:17:6d:fc:e7:a6:5f:18:db:7c:2d: 86:e4:6f:ca:8e:83:c5:e2:41:b4:81:b2:0d:dc:4d: 6e:e7:a0:57:d9:5b:e6:96:cc:72:3c:9c:4a:52:6d: 76:8e:af:83:42:14:11:da:40:80:ba:6d:50:d4:c9: a0:e7:dc:95:a3:64:c8:6f:41:a3:14:4f:6e:4e:f6: 57:a7:22:f3:e9:08:e8:07:fc:e9:07:49:92:00:b3: bf:49:93:43:50:fe:6c:47:ff:90:ab:5e:a9:a4:b9: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.209.128.0/19 80.80.208.0/20 87.237.232.0/21 89.236.192.0/18 94.141.64.0/19 185.6.40.0/22 185.248.44.0/22 194.55.92.0/22 217.30.160.0/20 IPv6: 2a02:f10::/29 2a03:540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34718 39032 47452 Signature Algorithm: sha256WithRSAEncryption a4:83:13:84:40:b2:22:a2:df:d2:58:37:a0:99:d0:71:e6:de: 76:01:b3:61:db:49:ec:ea:76:e0:ee:50:2a:3a:37:f5:b0:41: 97:1b:15:44:9c:27:86:db:5a:dd:2f:9e:57:8e:d2:89:9c:5c: a6:c1:66:f7:af:ea:e6:65:9b:9f:ad:61:ef:87:d0:f9:2e:f9: 85:03:63:29:7a:26:57:75:08:3e:cd:fb:1a:a2:0c:c6:f3:d4: d8:7b:4f:fb:17:4e:fb:b6:e9:f7:36:c8:b3:8e:22:2f:0a:f5: 11:35:a4:ee:18:52:c5:6e:8c:6c:c5:20:88:42:67:ef:6e:fa: 88:ab:ec:d8:5f:2d:95:0c:22:8b:7a:81:65:fa:9f:b9:29:fa: 3c:ab:fb:bd:ab:d8:fa:7f:53:71:dd:b2:b7:99:06:c9:bc:03: aa:84:48:11:65:40:f2:e2:42:ab:b9:53:71:43:de:76:c9:ac: 66:ad:60:be:41:ae:72:f1:f3:23:5b:b9:bf:c0:86:fc:aa:12: b1:f9:8c:45:08:b7:81:92:4c:08:50:f0:de:9e:2c:03:20:40: 18:b9:99:3d:97:fa:d1:44:6a:e1:32:6f:b1:e9:32:e9:b0:f7: 1e:2a:da:ff:9e:8c:3d:3e:2b:94:04:f8:db:43:f1:55:9f:8e: 7c:de:0e:a4 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt6yJAJJT6p1qO0EhGBaC/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTM5MDBmNjZlNzBiMmZmZmQ5YzBjZTkyNjAyZjJmNDVjNjU5OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSuxE+eqrocBA/RwTf6LeoIti92B y8CsyphgkzYiIQ6Z81RQWsqKjdPLqcQIJiojO0+f0bNaDullx1NFr8+x1qfA5bTQ iwwZcLzny0zLTrEuM7Sk3zfJhi1nd9UkuxG/GBLMPpiwWJmLFYxtTpeJQ4h3cyT5 uGqmiioFSRw73rrwe+0+n0jgCRjtIN8jHjPAxen+5bE/sM6PFBdt/OemXxjbfC2G 5G/KjoPF4kG0gbIN3E1u56BX2VvmlsxyPJxKUm12jq+DQhQR2kCAum1Q1Mmg59yV o2TIb0GjFE9uTvZXpyLz6QjoB/zpB0mSALO/SZNDUP5sR/+Qq16ppLkP3QIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFJk5APZucLL//ZwM6SYC8vRcZZlhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2MxY2Y2 Zi01NGNkLTQzNGEtODM3ZC1kZWY2ZWZiNDQzMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvYzFjZjZm LTU0Y2QtNDM0YS04MzdkLWRlZjZlZmI0NDMxOS8xL21Ua0E5bTV3c3ZfOW5BenBK Z0x5OUZ4bG1XRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGCCsGAQUF BwEHAQH/BFYwVDA8BAIAATA2AwQFPtGAAwQEUFDQAwQDV+3oAwQGWezAAwQFXo1A AwQCuQYoAwQCufgsAwQCwjdcAwQE2R6gMBQEAgACMA4DBQMqAg8QAwUAKgMFQDAk BggrBgEFBQcBCAEB/wQVMBOgETAPAgMAh54CAwCYeAIDALlcMA0GCSqGSIb3DQEB CwUAA4IBAQCkgxOEQLIiot/SWDegmdBx5t52AbNh20ns6nbg7lAqOjf1sEGXGxVE nCeG21rdL55XjtKJnFymwWb3r+rmZZufrWHvh9D5LvmFA2MpeiZXdQg+zfsaogzG 89TYe0/7F077tun3NsizjiIvCvURNaTuGFLFboxsxSCIQmfvbvqIq+zYXy2VDCKL eoFl+p+5Kfo8q/u9q9j6f1Nx3bK3mQbJvAOqhEgRZUDy4kKruVNxQ952yaxmrWC+ Qa5y8fMjW7m/wIb8qhKx+YxFCLeBkkwIUPDeniwDIEAYuZk9l/rRRGrhMm+x6TLp sPceKtr/now9PiuUBPjbQ/FVn4583g6k -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:22 2026 by rpki-client