This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer File: mWchgxr7izgwe0n1ue5ikq0eWFA.cer (raw, json) Hash identifier: G19TK6xDPwuHRfdFCmXYMyqb6qguUCwGpNKcwYZq/0o= Subject key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D35263E6ED0363892CF5688B4AE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41291 AS: 44407 AS: 47293 IP: 37.140.224.0/21 IP: 37.157.56.0/22 IP: 45.81.80.0/22 IP: 45.87.56.0/22 IP: 45.132.248.0/22 IP: 45.148.108.0/22 IP: 45.156.228.0/22 IP: 46.247.224.0/19 IP: 62.244.76.0/22 IP: 62.244.94.0/23 IP: 62.244.108.0/22 IP: 62.244.116.0/24 IP: 62.244.118.0/24 IP: 62.244.120.0/21 IP: 79.132.144.0/20 IP: 80.240.160.0/20 IP: 85.112.192.0/19 IP: 86.105.88.0/21 IP: 86.107.248.0/21 IP: 89.35.208.0/21 IP: 89.43.152.0/21 IP: 93.190.208.0/21 IP: 185.16.48.0/22 IP: 185.102.176.0/22 IP: 185.176.176.0/22 IP: 185.181.152.0/22 IP: 185.183.60.0 -- 185.183.67.255 IP: 185.183.252.0/22 IP: 185.184.4.0/22 IP: 185.198.224.0/22 IP: 185.204.252.0/22 IP: 185.209.140.0/22 IP: 185.223.148.0/22 IP: 185.243.120.0/22 IP: 194.36.192.0/22 IP: 195.123.7.0/24 IP: 195.177.108.0/22 IP: 217.26.192.0/20 IP: 2001:4000::/32 IP: 2a02:488::/32 IP: 2a06:2740::/29 IP: 2a0a:1c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d3:52:63:e6:ed:03:63:89:2c:f5:68:8b:4a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:81:f5:b9:ef:0a:4e:c8:d1:2a:a9:78:b8: f4:53:d5:69:97:85:bd:92:b6:58:b4:08:c2:55:64: 89:38:e4:82:b5:be:48:d3:6f:19:ac:a1:b9:0d:06: 38:75:b1:31:97:d1:3e:bc:8f:13:5b:ba:80:77:92: ba:95:c3:27:4c:57:7b:f2:4e:47:2a:9e:87:f8:4c: d4:06:94:f8:b5:d5:cd:09:3f:b2:01:91:3e:00:b2: c9:3e:3f:91:22:f9:ae:fe:ef:98:58:94:91:6d:54: b6:c5:ae:0a:f6:78:93:0c:8d:90:83:2e:ec:38:df: d8:38:cb:ad:d2:4a:0b:18:c2:80:28:a9:84:aa:23: 5c:61:25:bd:d4:94:0f:56:69:ae:a1:2a:f1:9e:08: b5:4a:a0:41:6b:23:f1:20:1a:c8:fc:a5:1c:ec:21: a5:c9:c5:9e:e6:50:f0:d4:59:ea:f9:7b:ed:d1:ac: 91:0b:4f:8b:31:05:be:f2:9c:d8:39:15:58:69:a1: 31:05:22:bd:0a:14:d1:e3:d0:52:e1:b9:0e:6e:e2: be:41:26:70:ed:69:99:74:91:bf:dc:ea:15:a0:84: 3f:a9:24:01:26:6b:70:13:f8:f3:a6:74:67:cc:a3: 49:c2:ae:f2:54:2d:50:32:d7:19:e7:4e:67:47:6a: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.224.0/21 37.157.56.0/22 45.81.80.0/22 45.87.56.0/22 45.132.248.0/22 45.148.108.0/22 45.156.228.0/22 46.247.224.0/19 62.244.76.0/22 62.244.94.0/23 62.244.108.0/22 62.244.116.0/24 62.244.118.0/24 62.244.120.0/21 79.132.144.0/20 80.240.160.0/20 85.112.192.0/19 86.105.88.0/21 86.107.248.0/21 89.35.208.0/21 89.43.152.0/21 93.190.208.0/21 185.16.48.0/22 185.102.176.0/22 185.176.176.0/22 185.181.152.0/22 185.183.60.0-185.183.67.255 185.183.252.0/22 185.184.4.0/22 185.198.224.0/22 185.204.252.0/22 185.209.140.0/22 185.223.148.0/22 185.243.120.0/22 194.36.192.0/22 195.123.7.0/24 195.177.108.0/22 217.26.192.0/20 IPv6: 2001:4000::/32 2a02:488::/32 2a06:2740::/29 2a0a:1c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41291 44407 47293 Signature Algorithm: sha256WithRSAEncryption 91:52:64:9e:1a:6c:45:42:c0:42:58:4f:af:04:a5:67:9a:c1: 98:b2:7c:e9:8e:1a:06:2d:bb:b5:fa:25:55:7f:0f:f1:8c:92: 6e:2f:18:3c:ac:82:c1:53:d6:dc:2d:94:3f:3c:59:66:b8:dc: 62:cc:56:ca:ba:45:e1:dc:e5:c3:84:12:1b:27:e0:07:3f:89: 6e:2e:5d:be:b0:42:06:7b:74:04:e8:c0:7d:7b:ad:73:9d:98: be:7c:b8:d0:3c:46:4a:a2:d1:56:21:a8:a3:01:b6:a9:39:e4: 7c:d0:a9:fa:80:ed:d9:36:92:25:56:15:4b:56:db:91:32:2f: 72:95:ad:cb:59:df:27:63:43:3b:73:58:38:62:f8:4f:b2:1c: 85:73:21:c4:b6:03:66:87:bd:08:72:e5:1d:c3:f0:9a:13:8e: 61:09:f9:e2:e0:6c:6b:30:c2:c5:bc:a5:a7:e8:52:c4:79:37: 9c:14:35:10:29:04:20:3d:3a:af:03:5e:bf:47:9c:c8:ae:0f: d3:59:c1:42:d0:ae:84:86:58:f4:18:4f:3f:04:9b:bd:dc:bb: 6d:e1:a4:e5:0f:d7:cf:c8:81:8a:86:79:6d:19:0f:35:69:f3: fa:e9:9d:e8:78:05:b7:6d:a7:96:cd:78:90:96:27:b9:d4:13: 7f:3f:3d:2a -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgISAZt/FdNSY+btA2OJLPVoi0rlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTY3MjE4MzFhZmI4YjM4MzA3YjQ5ZjViOWVlNjI5MmFkMWU1ODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF+B9bnvCk7I0SqpeLj0U9Vpl4W9 krZYtAjCVWSJOOSCtb5I028ZrKG5DQY4dbExl9E+vI8TW7qAd5K6lcMnTFd78k5H Kp6H+EzUBpT4tdXNCT+yAZE+ALLJPj+RIvmu/u+YWJSRbVS2xa4K9niTDI2Qgy7s ON/YOMut0koLGMKAKKmEqiNcYSW91JQPVmmuoSrxngi1SqBBayPxIBrI/KUc7CGl ycWe5lDw1Fnq+Xvt0ayRC0+LMQW+8pzYORVYaaExBSK9ChTR49BS4bkObuK+QSZw 7WmZdJG/3OoVoIQ/qSQBJmtwE/jzpnRnzKNJwq7yVC1QMtcZ505nR2rXDQIDAQAB o4IDvDCCA7gwHQYDVR0OBBYEFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzFjMWVi Mi0xZjY1LTRmNzEtOGIzMi1iNGJmZTQ1NmRkZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvMWMxZWIy LTFmNjUtNGY3MS04YjMyLWI0YmZlNDU2ZGRlMC8xL21XY2hneHI3aXpnd2UwbjF1 ZTVpa3EwZVdGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBLwYIKwYB BQUHAQcBAf8EggEeMIIBGjCB8wQCAAEwgewDBAMljOADBAIlnTgDBAItUVADBAIt VzgDBAIthPgDBAItlGwDBAItnOQDBAUu9+ADBAI+9EwDBAE+9F4DBAI+9GwDBAA+ 9HQDBAA+9HYDBAM+9HgDBARPhJADBARQ8KADBAVVcMADBANWaVgDBANWa/gDBANZ I9ADBANZK5gDBANdvtADBAK5EDADBAK5ZrADBAK5sLADBAK5tZgwDAMEArm3PAME Arm3QAMEArm3/AMEArm4BAMEArnG4AMEArnM/AMEArnRjAMEArnflAMEArnzeAME AsIkwAMEAMN7BwMEAsOxbAMEBNkawDAiBAIAAjAcAwUAIAFAAAMFACoCBIgDBQMq BidAAwUDKgocgDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMAoUsCAwCtdwIDALi9 MA0GCSqGSIb3DQEBCwUAA4IBAQCRUmSeGmxFQsBCWE+vBKVnmsGYsnzpjhoGLbu1 +iVVfw/xjJJuLxg8rILBU9bcLZQ/PFlmuNxizFbKukXh3OXDhBIbJ+AHP4luLl2+ sEIGe3QE6MB9e61znZi+fLjQPEZKotFWIaijAbapOeR80Kn6gO3ZNpIlVhVLVtuR Mi9yla3LWd8nY0M7c1g4YvhPshyFcyHEtgNmh70IcuUdw/CaE45hCfni4GxrMMLF vKWn6FLEeTecFDUQKQQgPTqvA16/R5zIrg/TWcFC0K6Ehlj0GE8/BJu93Ltt4aTl D9fPyIGKhnltGQ81afP66Z3oeAW3baeWzXiQlie51BN/Pz0q -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:23 2026 by rpki-client