This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer File: mecgmoybF2-_Yj7fPuC4IAf8LEA.cer (raw, json) Hash identifier: s27ePwUCUy2vHyk3Gcbzlhj9HGkRnNpVQf9Q9dG3FwQ= Subject key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38A520FA244FC8C4A1C6B839B4D81D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16333 AS: 43494 AS: 43612 AS: 57374 IP: 5.32.178.0 -- 5.32.180.255 IP: 5.32.182.0/24 IP: 31.3.93.0 -- 31.3.94.255 IP: 31.11.64.0/18 IP: 78.40.0.0/21 IP: 78.157.0.0/19 IP: 79.126.128.0/17 IP: 85.30.64.0/18 IP: 89.31.152.0/21 IP: 91.220.95.0/24 IP: 92.53.0.0/18 IP: 94.100.96.0/20 IP: 95.128.186.0/24 IP: 109.69.40.0/21 IP: 146.255.69.0 -- 146.255.71.255 IP: 146.255.73.0 -- 146.255.76.255 IP: 146.255.86.0/24 IP: 146.255.90.0/23 IP: 146.255.94.0/23 IP: 178.249.112.0/21 IP: 185.2.188.0/22 IP: 185.5.4.0/22 IP: 185.80.164.0/22 IP: 185.86.236.0/22 IP: 185.89.244.0/22 IP: 185.100.244.0/22 IP: 188.44.0.0/19 IP: 212.110.64.0/23 IP: 212.110.76.0 -- 212.110.93.255 IP: 212.158.176.0/20 IP: 217.16.64.0/19 IP: 217.196.192.0/20 IP: 2a00:a9c0::/32 IP: 2a01:5b8::/29 IP: 2a01:b780::/32 IP: 2a05:d800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a5:20:fa:24:4f:c8:c4:a1:c6:b8:39:b4:d8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:51:3f:03:df:7e:0c:e3:08:80:61:70:5b: 97:44:54:dc:98:bc:da:c4:2a:55:aa:37:75:36:5e: 59:8d:7b:a5:e6:64:59:79:b0:f2:1f:1e:70:b2:8c: 37:a9:a8:02:62:4e:16:a7:33:f4:72:56:ef:c2:61: 3d:97:81:1d:74:5e:7e:c7:36:81:54:5f:8f:6e:fb: 93:f3:22:6f:c8:42:7d:66:82:d5:1c:b4:20:df:9e: 8c:6e:94:28:e2:fb:75:20:6e:30:a8:73:a6:01:aa: cd:59:5e:4c:2c:e1:ea:9e:f1:51:56:af:04:dc:15: 98:92:68:3c:06:3e:13:c8:21:40:82:d9:81:86:69: 4b:d2:53:bc:12:59:37:74:b7:89:1f:f4:63:9a:bb: 50:94:30:79:12:77:14:2f:93:c9:e5:ef:fa:e1:30: 1b:e6:0a:75:d0:61:3e:5b:69:ac:16:f7:75:04:f8: 55:bb:f0:94:ef:4c:dd:37:47:2f:aa:73:52:34:51: af:84:f9:62:60:50:de:90:84:e5:1b:86:db:d6:1a: 85:1b:0e:c6:47:9a:cf:cd:25:af:94:9a:41:05:70: f5:e0:eb:83:8d:7c:1d:65:10:76:2c:26:be:9e:9c: c3:bd:56:db:89:06:9f:0d:78:99:e1:2f:56:5e:58: 63:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.32.178.0-5.32.180.255 5.32.182.0/24 31.3.93.0-31.3.94.255 31.11.64.0/18 78.40.0.0/21 78.157.0.0/19 79.126.128.0/17 85.30.64.0/18 89.31.152.0/21 91.220.95.0/24 92.53.0.0/18 94.100.96.0/20 95.128.186.0/24 109.69.40.0/21 146.255.69.0-146.255.71.255 146.255.73.0-146.255.76.255 146.255.86.0/24 146.255.90.0/23 146.255.94.0/23 178.249.112.0/21 185.2.188.0/22 185.5.4.0/22 185.80.164.0/22 185.86.236.0/22 185.89.244.0/22 185.100.244.0/22 188.44.0.0/19 212.110.64.0/23 212.110.76.0-212.110.93.255 212.158.176.0/20 217.16.64.0/19 217.196.192.0/20 IPv6: 2a00:a9c0::/32 2a01:5b8::/29 2a01:b780::/32 2a05:d800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16333 43494 43612 57374 Signature Algorithm: sha256WithRSAEncryption 92:94:b1:b5:64:72:c3:12:09:f4:d9:5e:be:eb:0e:46:0f:ba: 16:8c:a0:34:a5:10:d2:c5:a2:1b:f2:19:88:a0:e5:2d:d1:a9: a2:51:77:e4:22:36:cb:2c:40:42:a7:b8:89:f8:99:30:d2:c0: 90:a0:36:fe:4f:08:8e:a6:0f:fe:e6:45:d6:27:d9:e7:c5:64: 39:42:28:2f:d2:77:98:de:b0:59:b7:09:6b:c8:90:7b:c2:8f: d2:60:f2:31:bc:88:c7:a9:4b:cf:00:98:88:e3:6f:13:60:e9: 67:a5:e1:d1:52:80:72:48:cd:d3:1b:70:64:40:79:12:16:85: a0:03:b6:26:47:69:28:e4:c3:d9:a9:76:7c:9c:c6:fc:b0:f6: 7f:32:02:b7:38:88:3d:a6:65:5e:13:2e:c0:55:b2:b3:91:5e: 49:cc:39:05:89:14:06:3d:68:1e:8e:23:a1:f5:ea:dc:41:15: ac:92:6e:e1:8a:e7:57:31:e2:f6:84:0e:8e:26:f1:fc:79:43: 67:79:27:c5:dd:c3:38:ca:6f:60:33:e3:eb:c5:51:4d:83:f7: 7e:85:97:55:36:37:1d:87:73:2b:4f:68:80:4e:b7:d4:5e:a0: 80:f7:34:be:22:4f:22:47:0d:21:57:9b:86:71:ab:d0:4e:b8: 6d:d4:5e:86 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgISAZt+OKUg+iRPyMShxrg5tNgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWU3MjA5YThjOWIxNzZmYmY2MjNlZGYzZWUwYjgyMDA3ZmMyYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBVRPwPffgzjCIBhcFuXRFTcmLza xCpVqjd1Nl5ZjXul5mRZebDyHx5wsow3qagCYk4WpzP0clbvwmE9l4EddF5+xzaB VF+PbvuT8yJvyEJ9ZoLVHLQg356MbpQo4vt1IG4wqHOmAarNWV5MLOHqnvFRVq8E 3BWYkmg8Bj4TyCFAgtmBhmlL0lO8Elk3dLeJH/RjmrtQlDB5EncUL5PJ5e/64TAb 5gp10GE+W2msFvd1BPhVu/CU70zdN0cvqnNSNFGvhPliYFDekITlG4bb1hqFGw7G R5rPzSWvlJpBBXD14OuDjXwdZRB2LCa+npzDvVbbiQafDXiZ4S9WXlhj7QIDAQAB o4IDvDCCA7gwHQYDVR0OBBYEFJnnIJqMmxdvv2I+3z7guCAH/CxAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2VmNTg1 Ni1iYmMwLTQ1YTQtODkxZS1iMmRjYzE4NjNlOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZWY1ODU2 LWJiYzAtNDVhNC04OTFlLWIyZGNjMTg2M2U4Yi8xL21lY2dtb3liRjItX1lqN2ZQ dUM0SUFmOExFQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBKwYIKwYB BQUHAQcBAf8EggEaMIIBFjCB7wQCAAEwgegwDAMEAQUgsgMEAAUgtAMEAAUgtjAM AwQAHwNdAwQAHwNeAwQGHwtAAwQDTigAAwQFTp0AAwQHT36AAwQGVR5AAwQDWR+Y AwQAW9xfAwQGXDUAAwQEXmRgAwQAX4C6AwQDbUUoMAwDBACS/0UDBAOS/0AwDAME AJL/SQMEAJL/TAMEAJL/VgMEAZL/WgMEAZL/XgMEA7L5cAMEArkCvAMEArkFBAME ArlQpAMEArlW7AMEArlZ9AMEArlk9AMEBbwsAAMEAdRuQDAMAwQC1G5MAwQB1G5c AwQE1J6wAwQF2RBAAwQE2cTAMCIEAgACMBwDBQAqAKnAAwUDKgEFuAMFACoBt4AD BQMqBdgAMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAj/NAgMAqeYCAwCqXAIDAOAe MA0GCSqGSIb3DQEBCwUAA4IBAQCSlLG1ZHLDEgn02V6+6w5GD7oWjKA0pRDSxaIb 8hmIoOUt0amiUXfkIjbLLEBCp7iJ+Jkw0sCQoDb+TwiOpg/+5kXWJ9nnxWQ5Qigv 0neY3rBZtwlryJB7wo/SYPIxvIjHqUvPAJiI428TYOlnpeHRUoBySM3TG3BkQHkS FoWgA7YmR2ko5MPZqXZ8nMb8sPZ/MgK3OIg9pmVeEy7AVbKzkV5JzDkFiRQGPWge jiOh9ercQRWskm7hiudXMeL2hA6OJvH8eUNneSfF3cM4ym9gM+PrxVFNg/d+hZdV Njcdh3MrT2iATrfUXqCA9zS+Ik8iRw0hV5uGcavQTrht1F6G -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:53 2026 by rpki-client