This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer File: mfa_Doxu_Er_r3JiiEacr_QX3mY.cer (raw, json) Hash identifier: JhcpFlMGl3pg9ksuKUoXPkjqxC3RA0pUeuFi0oEZeyQ= Subject key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EFBCC56A3C4E3EA9D6894E2B9A58E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203662 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fb:cc:56:a3:c4:e3:ea:9d:68:94:e2:b9:a5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99f6bf0e8c6efc4affaf726288469caff417de66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:04:63:53:8a:41:9f:00:f3:82:04:b7:fa:db: 63:24:db:1f:a4:ba:cb:5a:a4:17:a6:67:13:50:a9: 6a:fe:f9:35:d8:b9:e0:58:cc:9c:9b:ea:f7:c0:c6: fc:7f:63:39:57:57:96:1e:8c:55:1d:31:66:d9:12: 70:42:27:fc:44:17:97:39:b9:e7:9d:cc:aa:e2:e8: fa:48:fc:94:6b:a8:a0:0d:cc:17:2b:e5:a7:fe:ce: f7:ed:a9:d3:ea:24:4c:36:af:88:39:85:98:37:e2: 78:d4:9e:73:62:a5:52:f4:9a:62:0b:c3:e4:81:1b: 5e:db:6a:03:fd:bf:f7:00:1f:ef:dd:bd:b1:0a:14: c5:cf:10:cd:d6:c5:95:e9:6a:ee:08:a1:c8:f8:34: 2e:67:a1:3b:41:b9:76:6d:c3:db:92:54:5c:d5:0f: cf:cf:d0:b8:9d:aa:c0:2f:ed:36:e2:15:dd:cc:d7: 26:d2:27:1e:6d:1e:b0:79:4e:b2:90:9c:b0:36:c9: 4f:5a:e8:ae:14:26:25:7a:57:d3:19:a5:e5:a0:13: bd:2f:9a:cf:51:33:28:6f:8f:c5:12:40:83:25:dd: 6c:0d:3d:9b:5f:53:21:ec:46:18:bc:df:6f:0c:60: fe:88:40:28:cb:ae:2a:fb:1b:2e:a6:7f:c4:1b:5b: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203662 Signature Algorithm: sha256WithRSAEncryption 23:0f:0d:77:ba:18:b0:ff:52:88:d0:26:85:d4:2e:18:aa:12: dd:bb:0a:ef:75:ee:99:3b:ab:9d:64:17:ef:74:c5:2f:78:58: aa:e2:b8:a3:83:2c:6b:e0:6d:d2:b6:de:ec:46:0e:6b:47:30: 57:0a:10:92:f6:16:97:de:53:8d:5a:5d:6c:1c:a3:df:5c:44: 96:6d:89:aa:d2:f6:a2:5b:16:bc:d4:02:1b:96:f1:2e:8f:ee: 23:52:6d:f9:c2:53:a1:eb:0c:e8:31:c0:4a:82:f4:c2:7b:45: 29:8b:54:07:50:c3:3a:c7:87:04:29:03:22:dd:4a:f7:db:47: 02:5e:28:17:03:72:c8:ad:e1:82:08:f5:48:8d:71:dc:8b:d9: 4a:c6:73:31:dc:47:3f:87:58:f7:31:fc:ac:40:92:84:34:a4: 7e:c9:c2:88:a4:95:74:24:44:ce:f2:68:c1:6f:63:4a:d2:40: b3:0a:c8:e4:62:b9:6e:5a:64:f1:f5:a6:6b:e3:fd:23:5b:4b: 6d:bc:3f:0c:d3:30:77:8c:a5:68:fa:3f:9a:ec:ce:4f:f6:30: 5c:f9:0e:1f:be:03:b6:f9:44:17:5e:d6:6f:6c:eb:e2:87:df: 40:2c:48:1b:e6:73:43:b0:46:ee:93:51:98:81:cc:11:dd:d6: 18:76:b1:c9 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fvvMVqPE4+qdaJTiuaWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWY2YmYwZThjNmVmYzRhZmZhZjcyNjI4ODQ2OWNhZmY0MTdkZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wRjU4pBnwDzggS3+ttjJNsfpLrL WqQXpmcTUKlq/vk12LngWMycm+r3wMb8f2M5V1eWHoxVHTFm2RJwQif8RBeXObnn ncyq4uj6SPyUa6igDcwXK+Wn/s737anT6iRMNq+IOYWYN+J41J5zYqVS9JpiC8Pk gRte22oD/b/3AB/v3b2xChTFzxDN1sWV6WruCKHI+DQuZ6E7Qbl2bcPbklRc1Q/P z9C4narAL+024hXdzNcm0icebR6weU6ykJywNslPWuiuFCYlelfTGaXloBO9L5rP UTMob4/FEkCDJd1sDT2bX1Mh7EYYvN9vDGD+iEAoy64q+xsupn/EG1uuOwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJn2vw6MbvxK/69yYohGnK/0F95mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2MzMjUx NC0zOWMzLTRiNmMtYTBlMS1lODg2OTU5NTQ3MGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYzMyNTE0 LTM5YzMtNGI2Yy1hMGUxLWU4ODY5NTk1NDcwZC8xL21mYV9Eb3h1X0VyX3IzSmlp RWFjcl9RWDNtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbjjANBgkqhkiG9w0BAQsFAAOCAQEAIw8Nd7oYsP9S iNAmhdQuGKoS3bsK73XumTurnWQX73TFL3hYquK4o4Msa+Bt0rbe7EYOa0cwVwoQ kvYWl95TjVpdbByj31xElm2JqtL2olsWvNQCG5bxLo/uI1Jt+cJToesM6DHASoL0 wntFKYtUB1DDOseHBCkDIt1K99tHAl4oFwNyyK3hggj1SI1x3IvZSsZzMdxHP4dY 9zH8rECShDSkfsnCiKSVdCREzvJowW9jStJAswrI5GK5blpk8fWma+P9I1tLbbw/ DNMwd4ylaPo/muzOT/YwXPkOH74DtvlEF17Wb2zr4offQCxIG+ZzQ7BG7pNRmIHM Ed3WGHaxyQ== -----END CERTIFICATE-----Generated at Wed Jan 21 18:47:38 2026 by rpki-client