This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer File: mV7RKasvUQ9ou8iz_PHJoe5-3e8.cer (raw, json) Hash identifier: 61NRPT3jM7aF83XvcirIIqI0ehK049iL/9P6JitNdYg= Subject key identifier: 99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC5E007925842C8D4011DCE3445BDFC44 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 16 Jan 2026 08:15:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48111 IP: 185.142.180.0/22 IP: 2a07:2ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:e0:07:92:58:42:c8:d4:01:1d:ce:34:45:bd:fc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 16 08:15:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=995ed129ab2f510f68bbc8b3fcf1c9a1ee7eddef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:72:70:bd:42:e6:ad:2d:4e:5f:6d:00:c5: ee:e2:97:00:73:ea:92:e3:21:d1:9c:ff:d8:1a:aa: ce:53:c6:8a:1b:75:ad:a6:4f:c9:3d:81:bc:d0:f0: f9:db:c2:8a:6e:c9:bd:12:1d:88:63:f0:4d:4e:b7: e3:8f:cd:90:62:fa:42:ab:a1:34:3c:6d:b0:11:ef: 65:72:6b:97:0d:3b:5a:ad:92:fb:d4:97:ee:08:9c: e7:96:d8:03:54:9f:14:02:cb:28:a2:ab:29:a1:e8: 2c:9a:11:8c:85:cc:87:d0:21:ea:4f:9c:54:ac:84: 11:62:d7:a2:bd:cd:24:9f:c7:e8:27:7a:4a:b6:3e: 7a:f9:35:59:3e:1f:8c:c7:e7:00:75:71:3f:45:05: 73:84:79:96:bd:86:3d:da:e4:00:92:31:01:e4:38: 21:c0:78:eb:8a:3c:e5:d1:a0:73:ce:fe:f7:08:ca: 5c:26:51:f0:8b:5f:22:48:aa:c4:2c:ea:e0:57:bf: 54:3f:90:23:7f:92:ac:ec:ba:4b:2d:2d:e5:a8:cd: 07:1a:ee:6b:80:73:cc:93:27:e1:19:b7:40:8a:7a: c6:66:5e:4a:aa:77:c8:c6:7f:f8:2c:79:d2:58:b0: 0b:1a:ed:a9:33:71:c7:53:b8:0a:18:93:8e:76:16: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5E:D1:29:AB:2F:51:0F:68:BB:C8:B3:FC:F1:C9:A1:EE:7E:DD:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f3c7ba-01cd-4df4-b87a-b228345c3b6d/1/mV7RKasvUQ9ou8iz_PHJoe5-3e8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.180.0/22 IPv6: 2a07:2ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48111 Signature Algorithm: sha256WithRSAEncryption ac:58:3e:57:37:2c:47:9b:f0:3f:4f:35:d4:5d:ab:f7:5b:b0: fb:3a:34:33:ab:9b:df:b7:99:83:b5:e9:f4:85:32:0b:1d:1d: b7:00:ce:f4:75:8f:61:ce:6c:47:49:9a:84:5f:47:d1:0a:17: 04:2e:e9:2e:35:b1:31:40:c1:1e:fb:dc:1d:e4:0e:f4:24:82: 2c:e8:bf:12:be:e5:c3:e0:fb:59:e4:e3:20:1b:fb:9c:7f:5d: 9f:dc:72:fb:6e:09:dd:5d:fd:68:53:c6:d4:32:02:d1:13:20: 35:46:75:ac:85:31:81:cf:7e:51:73:50:2a:4b:29:50:7b:b9: 8b:78:af:07:54:c5:03:1c:8d:b3:eb:1f:eb:81:20:76:68:97: de:ac:d2:54:5b:8d:e6:7f:37:5c:e1:e8:3b:e5:40:11:54:71: 1a:65:59:ee:71:f5:d1:86:14:01:91:ec:13:0e:ff:27:e6:8c: 16:59:ae:70:6e:4e:ed:50:a6:4c:c6:9d:f3:b3:38:e3:10:fb: 82:07:ec:ae:ea:62:93:ee:3b:77:42:4a:6d:bb:4a:73:a6:b9: d0:fa:c1:cd:6e:7c:cc:cf:e0:40:17:d3:f9:e0:db:0f:5b:cd: 74:f6:a6:96:ae:a2:73:9c:9d:34:8a:ee:f1:50:4a:bd:94:d0: 71:8c:c1:57 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZvF4AeSWELI1AEdzjRFvfxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE2MDgxNTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTVlZDEyOWFiMmY1MTBmNjhiYmM4YjNmY2YxYzlhMWVlN2VkZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArppycL1C5q0tTl9tAMXu4pcAc+qS 4yHRnP/YGqrOU8aKG3Wtpk/JPYG80PD528KKbsm9Eh2IY/BNTrfjj82QYvpCq6E0 PG2wEe9lcmuXDTtarZL71JfuCJznltgDVJ8UAssooqspoegsmhGMhcyH0CHqT5xU rIQRYteivc0kn8foJ3pKtj56+TVZPh+Mx+cAdXE/RQVzhHmWvYY92uQAkjEB5Dgh wHjrijzl0aBzzv73CMpcJlHwi18iSKrELOrgV79UP5Ajf5Ks7LpLLS3lqM0HGu5r gHPMkyfhGbdAinrGZl5KqnfIxn/4LHnSWLALGu2pM3HHU7gKGJOOdhYQ8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJle0SmrL1EPaLvIs/zxyaHuft3vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2YzYzdi YS0wMWNkLTRkZjQtYjg3YS1iMjI4MzQ1YzNiNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZjNjN2Jh LTAxY2QtNGRmNC1iODdhLWIyMjgzNDVjM2I2ZC8xL21WN1JLYXN2VVE5b3U4aXpf UEhKb2U1LTNlOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuY60MA0EAgACMAcDBQMqBy7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC77zANBgkqhkiG9w0BAQsFAAOCAQEArFg+VzcsR5vw P0811F2r91uw+zo0M6ub37eZg7Xp9IUyCx0dtwDO9HWPYc5sR0mahF9H0QoXBC7p LjWxMUDBHvvcHeQO9CSCLOi/Er7lw+D7WeTjIBv7nH9dn9xy+24J3V39aFPG1DIC 0RMgNUZ1rIUxgc9+UXNQKkspUHu5i3ivB1TFAxyNs+sf64EgdmiX3qzSVFuN5n83 XOHoO+VAEVRxGmVZ7nH10YYUAZHsEw7/J+aMFlmucG5O7VCmTMad87M44xD7ggfs rupik+47d0JKbbtKc6a50PrBzW58zM/gQBfT+eDbD1vNdPamlq6ic5ydNIru8VBK vZTQcYzBVw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:37 2026 by rpki-client