This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer File: mfCyyNezyhPFnFM3LyXiAsharcU.cer (raw, json) Hash identifier: NXujdByS9q7b6yXqUflLimko0TVmXr8uPxpBxR0Vl1s= Subject key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1264A301769DC434E3D4F6ED14E966 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209325 IP: 45.66.192.0/22 IP: 2a09:6ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:64:a3:01:76:9d:c4:34:e3:d4:f6:ed:14:e9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:26:0f:cb:e9:30:52:1e:77:69:ae:ce:ab: f5:a1:07:c2:19:44:14:cd:57:a7:79:63:0e:0c:ec: b8:ba:fe:56:83:40:ea:d5:c5:1c:58:e8:cc:59:ab: 31:3c:4b:c4:84:db:82:fb:19:cb:88:7f:ec:fc:01: be:b4:71:cc:fe:40:07:56:b2:6c:cb:6f:9e:76:54: b1:ef:3c:e2:64:96:c9:ff:a0:a0:f7:68:5a:e0:6e: 5a:24:d5:03:cb:f0:fe:be:57:90:3c:32:6c:11:0b: d3:7f:55:09:af:1a:a4:b7:9b:bb:a6:57:b8:dd:17: 7e:1c:9d:c8:35:7d:fe:a8:ef:a8:48:51:bd:ad:3a: 1d:28:1b:3e:bd:80:79:55:90:5c:3f:79:7e:f2:3d: 94:2d:4e:ac:ae:47:44:fe:d1:f4:9e:f7:6a:10:49: 5f:75:6b:2a:0f:56:e5:b7:88:93:f3:68:12:f3:f5: 77:34:c9:4e:02:8d:3b:23:81:04:c4:b6:44:c5:7d: 87:68:2e:13:d1:a2:17:34:a9:ed:72:2e:07:2a:b1: 3e:7c:5b:3d:72:58:12:5f:2d:f0:79:f6:bc:63:7a: 83:48:cf:e6:ef:5f:28:67:91:98:20:97:4f:3d:b0: 54:0b:3d:0a:ac:b5:fb:dc:bd:5b:bd:52:ff:db:b7: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.192.0/22 IPv6: 2a09:6ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209325 Signature Algorithm: sha256WithRSAEncryption 34:fa:f1:b1:0e:a5:1a:19:af:96:0c:3a:a0:c0:79:f4:4f:9b: 04:25:c2:62:20:0a:79:ad:a9:e2:03:ef:c9:ca:31:63:15:d5: b3:42:ba:62:4c:6d:27:6d:3a:33:ed:de:15:a2:a3:8c:d8:cc: 66:b2:55:0e:85:4e:8b:d6:27:f8:f8:cc:b0:ef:d9:a5:fc:2c: 01:f0:ee:51:6f:47:b8:ca:a8:ae:43:86:d6:89:99:77:8f:56: 46:ee:ca:c5:51:e7:d0:16:ec:5c:b6:58:53:67:62:f3:8c:78: e4:26:75:da:8f:fc:a3:a6:6e:8c:26:bf:f4:6a:48:25:be:14: 26:9b:06:78:06:c3:5a:32:98:cd:be:b4:ca:31:c2:94:5b:bf: 3f:ce:ee:6c:78:05:1e:6e:d1:a8:cf:fe:31:f9:c3:be:24:e5: c9:55:fd:1f:e5:38:f1:7f:3b:1c:00:84:fb:10:d4:78:9c:74: a7:e6:b6:ec:2a:ec:c7:a7:d1:20:8f:3e:86:0f:06:a5:f4:27: 6e:61:e9:92:db:ea:af:3f:48:33:83:ad:81:d0:bf:fd:c8:43: 5f:c1:4f:fb:1f:21:e1:b5:f6:d4:8a:7c:a4:60:2f:a1:9a:a6: 70:47:95:da:98:ea:96:dc:42:84:4b:4b:fb:a3:1f:2b:b7:2f: 9b:f6:2f:7e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EmSjAXadxDTj1PbtFOlmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWYwYjJjOGQ3YjNjYTEzYzU5YzUzMzcyZjI1ZTIwMmM4NWFhZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmicmD8vpMFIed2muzqv1oQfCGUQU zVeneWMODOy4uv5Wg0Dq1cUcWOjMWasxPEvEhNuC+xnLiH/s/AG+tHHM/kAHVrJs y2+edlSx7zziZJbJ/6Cg92ha4G5aJNUDy/D+vleQPDJsEQvTf1UJrxqkt5u7ple4 3Rd+HJ3INX3+qO+oSFG9rTodKBs+vYB5VZBcP3l+8j2ULU6srkdE/tH0nvdqEElf dWsqD1blt4iT82gS8/V3NMlOAo07I4EExLZExX2HaC4T0aIXNKntci4HKrE+fFs9 clgSXy3wefa8Y3qDSM/m718oZ5GYIJdPPbBUCz0KrLX73L1bvVL/27dJswIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJnwssjXs8oTxZxTNy8l4gLIWq3FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzU0ZmY5 Mi0yMjFlLTRhMTYtOGFlZi0xOTRlMGM2NTFkNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNTRmZjky LTIyMWUtNGExNi04YWVmLTE5NGUwYzY1MWQ3My8xL21mQ3l5TmV6eWhQRm5GTTNM eVhpQXNoYXJjVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLULAMA0EAgACMAcDBQMqCWrAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMxrTANBgkqhkiG9w0BAQsFAAOCAQEANPrxsQ6lGhmv lgw6oMB59E+bBCXCYiAKea2p4gPvycoxYxXVs0K6YkxtJ206M+3eFaKjjNjMZrJV DoVOi9Yn+PjMsO/ZpfwsAfDuUW9HuMqorkOG1omZd49WRu7KxVHn0BbsXLZYU2di 84x45CZ12o/8o6ZujCa/9GpIJb4UJpsGeAbDWjKYzb60yjHClFu/P87ubHgFHm7R qM/+MfnDviTlyVX9H+U48X87HACE+xDUeJx0p+a27Crsx6fRII8+hg8GpfQnbmHp ktvqrz9IM4OtgdC//chDX8FP+x8h4bX21Ip8pGAvoZqmcEeV2pjqltxChEtL+6Mf K7cvm/Yvfg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:48 2026 by rpki-client