This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer File: mU78TONvxEPcWBYnTqwddpMCkIE.cer (raw, json) Hash identifier: k4CDetAfoqLb1COzyHBQUImQYlZiBetZn1h9q6A6BgE= Subject key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF7E06D71AFB2D3B7F6431878B84A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49142 IP: 185.139.216.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f7:e0:6d:71:af:b2:d3:b7:f6:43:18:78:b8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=994efc4ce36fc443dc5816274eac1d7693029081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:87:e8:43:9b:07:8c:54:18:1c:a0:da:99: 65:81:f5:0d:2d:03:96:50:a1:ed:2c:df:66:0a:78: 87:b3:7c:d7:1f:37:ad:b3:7e:d2:76:06:32:73:2e: 3e:82:33:83:a1:0f:64:2b:97:1e:ba:a6:5b:84:bc: f8:a6:f5:2e:86:a1:4b:bb:8e:34:94:d8:15:c2:15: 43:c3:a0:0f:5a:1a:c2:34:24:a6:95:75:77:81:f5: 45:c1:87:8c:ee:e7:b7:0c:a4:f8:f9:0b:63:0f:71: 64:9b:95:f2:27:24:22:66:54:1e:9d:61:3b:3a:82: e3:22:0d:2b:62:f2:a3:1c:a0:f1:f8:64:a9:3a:43: 4d:a6:b5:8b:7e:cd:5f:bc:63:f4:f7:0a:aa:f0:38: d1:84:7b:6e:b0:3a:fe:21:e1:0b:94:b8:e6:e2:36: 4c:ba:d5:52:51:f4:13:63:40:23:b9:e5:63:34:ca: fe:bc:80:a1:1c:ac:1b:c0:1b:23:34:81:0d:26:0f: ba:d8:41:b7:bb:16:17:95:ee:b3:8f:69:66:09:d3: b1:00:a5:cc:dc:8c:e6:e0:17:bb:f1:5b:59:6c:9a: 74:c8:c6:e0:a6:bd:1f:41:22:da:fb:b3:69:0e:d3: 5a:51:98:00:4f:c5:83:ae:d0:63:71:59:9e:35:79: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.216.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49142 Signature Algorithm: sha256WithRSAEncryption 59:28:7a:31:0c:1c:17:84:02:b0:4d:0e:ce:9e:e0:f8:e2:f4: 30:6e:b3:07:cb:92:f2:1f:e2:64:8b:7b:60:b4:6b:0b:7c:07: ca:fb:20:02:d8:fb:c1:40:02:08:95:49:e0:d6:71:d5:32:09: d2:7f:56:4d:48:1b:6a:9c:dc:64:68:c3:b1:14:a7:ce:a0:5b: 20:d4:31:24:5c:de:99:7a:4a:0d:14:42:ae:63:3e:a1:77:66: df:1d:e1:cb:b4:6f:c1:96:c9:a9:51:8b:88:26:59:9b:dc:d9: 11:51:37:3d:e2:62:c2:29:7e:0f:6d:5d:ab:22:cd:5a:4a:43: 42:fa:3f:3f:a8:05:f5:58:75:bc:37:41:af:bc:49:cc:5f:31: a1:57:a4:52:6f:8d:35:a1:4e:f9:5d:2b:e5:38:d4:86:f5:b1: f2:3e:39:65:0e:87:36:b8:e7:e9:1f:d9:9b:55:25:10:2c:54: 10:fb:40:53:2a:56:eb:09:47:f9:38:ce:3e:8c:a4:41:01:1a: f5:17:6c:fa:b2:ad:54:24:e3:94:63:d5:b1:53:27:1f:6f:f3: b7:71:91:9d:5f:8a:9e:54:47:fe:38:73:63:33:8d:f3:52:49: 5b:b4:6f:76:92:79:cf:03:81:fe:50:c3:ba:60:20:58:b4:51: 86:97:02:01 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26vfgbXGvstO39kMYeLhKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTRlZmM0Y2UzNmZjNDQzZGM1ODE2Mjc0ZWFjMWQ3NjkzMDI5MDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y6H6EObB4xUGByg2pllgfUNLQOW UKHtLN9mCniHs3zXHzets37SdgYycy4+gjODoQ9kK5ceuqZbhLz4pvUuhqFLu440 lNgVwhVDw6APWhrCNCSmlXV3gfVFwYeM7ue3DKT4+QtjD3Fkm5XyJyQiZlQenWE7 OoLjIg0rYvKjHKDx+GSpOkNNprWLfs1fvGP09wqq8DjRhHtusDr+IeELlLjm4jZM utVSUfQTY0AjueVjNMr+vIChHKwbwBsjNIENJg+62EG3uxYXle6zj2lmCdOxAKXM 3Izm4Be78VtZbJp0yMbgpr0fQSLa+7NpDtNaUZgAT8WDrtBjcVmeNXnWiwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJlO/Ezjb8RD3FgWJ06sHXaTApCBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4L2U0Mzlj YS01MTlkLTQzMmMtYjk2YS0zZDJmYjgxMGUxOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZTQzOWNh LTUxOWQtNDMyYy1iOTZhLTNkMmZiODEwZTE5MS8xL21VNzhUT052eEVQY1dCWW5U cXdkZHBNQ2tJRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBuYvYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC/9jANBgkqhkiG9w0BAQsFAAOCAQEAWSh6MQwcF4QCsE0Ozp7g+OL0MG6zB8uS 8h/iZIt7YLRrC3wHyvsgAtj7wUACCJVJ4NZx1TIJ0n9WTUgbapzcZGjDsRSnzqBb INQxJFzemXpKDRRCrmM+oXdm3x3hy7RvwZbJqVGLiCZZm9zZEVE3PeJiwil+D21d qyLNWkpDQvo/P6gF9Vh1vDdBr7xJzF8xoVekUm+NNaFO+V0r5TjUhvWx8j45ZQ6H Nrjn6R/Zm1UlECxUEPtAUypW6wlH+TjOPoykQQEa9Rds+rKtVCTjlGPVsVMnH2/z t3GRnV+KnlRH/jhzYzON81JJW7RvdpJ5zwOB/lDDumAgWLRRhpcCAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:39 2026 by rpki-client