This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer File: mfseX91w4MDmCIWjBYH-DAJBDX0.cer (raw, json) Hash identifier: j067EBwB7Ndg2U4AOpHyKtdYo0vKbKaNhA6ous1s5Qo= Subject key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED1AFC7A9C03A606837ACD16CFE8AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34967 IP: 83.137.176.0/21 IP: 185.16.152.0/22 IP: 2a01:7740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:1a:fc:7a:9c:03:a6:06:83:7a:cd:16:cf:e8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:d2:31:15:30:10:d7:0e:25:d2:9b:22:23: b7:d2:f6:66:b0:96:54:66:08:4c:e5:eb:bb:28:02: 04:e6:0c:ce:b0:6b:bc:26:2d:2a:e8:7c:c3:a8:c2: 04:c8:02:0c:79:cb:3c:ba:3b:90:61:0b:94:1a:4a: 5b:05:14:1f:af:1c:38:1a:f3:4c:32:ea:c1:81:ab: 15:65:b3:0e:9a:fb:1a:76:97:f9:71:d7:d2:2b:b7: 2f:c1:a4:00:14:0b:4f:01:27:b3:50:6b:73:58:ac: 54:21:79:43:18:e0:24:a3:6e:2d:d3:51:e7:1b:38: 54:ae:52:69:66:70:23:9a:f3:b1:e9:c3:d7:db:a4: 64:75:0a:89:f2:66:42:3a:01:d5:93:dd:10:74:d1: ff:b9:72:81:5f:02:cb:37:23:88:af:90:23:d2:cb: c5:7c:38:35:fa:b2:e9:dc:8a:2a:49:af:41:81:7c: f2:57:e3:2c:a3:a3:93:62:32:62:81:c8:b4:47:b4: 28:fc:b5:1a:8f:26:d5:0c:4a:13:d5:f1:6d:4a:2b: d8:84:0b:d6:b8:c8:42:46:49:7f:49:46:2c:d5:d4: 25:53:9c:6b:47:48:ee:ee:1e:76:5c:6a:63:d5:a5: 61:ba:49:a8:17:33:e0:e9:8a:c9:43:31:c1:d4:ac: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.176.0/21 185.16.152.0/22 IPv6: 2a01:7740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34967 Signature Algorithm: sha256WithRSAEncryption 13:87:db:6f:75:d0:b0:15:14:ff:a9:ae:16:bf:44:59:96:b1: 70:62:24:94:62:d3:37:81:a3:3f:95:9d:1f:f0:79:43:a7:ab: 07:37:6e:12:b9:77:d4:42:ee:74:d4:16:bb:1d:f7:1b:4a:65: 78:ff:d3:eb:6f:45:0a:ec:36:c5:92:42:5e:56:c5:b4:75:ea: ba:03:6d:97:38:e7:b5:30:d9:d3:5e:b8:20:56:e2:7c:73:96: 42:c2:31:56:a0:d5:71:15:6b:99:e3:e2:41:c1:37:80:9a:0b: 7b:f1:f2:b2:61:c5:4f:ad:78:1b:ac:c5:5d:5c:b9:dd:e6:43: a8:31:1e:79:1a:ef:07:e3:c1:ab:18:c1:33:e2:22:92:7b:2d: d4:10:ec:96:9c:90:07:bd:c6:c3:54:12:a2:29:1a:f7:4d:15: f5:63:48:a1:11:b8:d1:45:7d:b2:54:cf:60:bc:d8:87:53:a2: fa:cd:de:cb:c0:c7:a0:c4:41:33:42:c6:e1:51:4f:5d:04:12: a8:df:24:16:65:6c:b7:58:e9:92:99:ae:a9:13:c6:7b:98:73: dc:20:39:4d:9f:8d:ce:5b:f8:05:16:5c:7c:00:82:1d:6c:e8: 50:8b:27:ec:e0:b2:a4:0b:05:89:8d:aa:f1:6a:d5:53:77:1e: 80:99:08:80 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87Rr8epwDpgaDes0Wz+isMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWZiMWU1ZmRkNzBlMGMwZTYwODg1YTMwNTgxZmUwYzAyNDEwZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZPSMRUwENcOJdKbIiO30vZmsJZU ZghM5eu7KAIE5gzOsGu8Ji0q6HzDqMIEyAIMecs8ujuQYQuUGkpbBRQfrxw4GvNM MurBgasVZbMOmvsadpf5cdfSK7cvwaQAFAtPASezUGtzWKxUIXlDGOAko24t01Hn GzhUrlJpZnAjmvOx6cPX26RkdQqJ8mZCOgHVk90QdNH/uXKBXwLLNyOIr5Aj0svF fDg1+rLp3IoqSa9BgXzyV+Mso6OTYjJigci0R7Qo/LUajybVDEoT1fFtSivYhAvW uMhCRkl/SUYs1dQlU5xrR0ju7h52XGpj1aVhukmoFzPg6YrJQzHB1KxSjQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFJn7Hl/dcODA5giFowWB/gwCQQ19MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2QyYTNi NS05N2RlLTRkNDctYjFkYi00NWVlNTg0MDY4MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZDJhM2I1 LTk3ZGUtNGQ0Ny1iMWRiLTQ1ZWU1ODQwNjgyYy8xL21mc2VYOTF3NE1EbUNJV2pC WUgtREFKQkRYMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDU4mwAwQCuRCYMA0EAgACMAcDBQMqAXdAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCIlzANBgkqhkiG9w0BAQsFAAOCAQEAE4fb b3XQsBUU/6muFr9EWZaxcGIklGLTN4GjP5WdH/B5Q6erBzduErl31ELudNQWux33 G0pleP/T629FCuw2xZJCXlbFtHXqugNtlzjntTDZ0164IFbifHOWQsIxVqDVcRVr mePiQcE3gJoLe/HysmHFT614G6zFXVy53eZDqDEeeRrvB+PBqxjBM+Iiknst1BDs lpyQB73Gw1QSoika900V9WNIoRG40UV9slTPYLzYh1Oi+s3ey8DHoMRBM0LG4VFP XQQSqN8kFmVst1jpkpmuqRPGe5hz3CA5TZ+Nzlv4BRZcfACCHWzoUIsn7OCypAsF iY2q8WrVU3cegJkIgA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:09 2026 by rpki-client