This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer File: mgGl7N4ueVkyWREG0II9DRVPcAI.cer (raw, json) Hash identifier: 6/EejQpFibXBRikNIlOBPrKNbRDEN8da/NzoNaBrIuA= Subject key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC1274960AB87E5DE17FB16746A8AC86E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 10:15:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15535 IP: 62.129.128.0 -- 62.129.147.255 IP: 62.129.149.0 -- 62.129.159.255 IP: 2a0c:9400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:27:49:60:ab:87:e5:de:17:fb:16:74:6a:8a:c8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 10:15:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a01a5ecde2e795932591106d0823d0d154f7002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:08:b6:b1:70:2d:81:a7:71:7b:9f:10:2f: 1c:9e:09:17:1c:e1:32:23:7b:4d:69:89:e6:89:b1: 7f:c3:da:da:0c:06:94:73:d6:a1:9e:c1:e7:a7:14: 34:80:c9:ab:bc:19:49:d6:93:6b:cb:c3:e9:be:ca: 26:d1:30:c6:9e:55:7b:c9:00:03:42:b9:a7:cd:f5: 3e:f7:63:f7:f2:af:41:bc:9b:4f:77:b8:c5:d1:c7: f8:53:10:fc:3a:d3:f7:47:ea:ff:0e:e9:a1:92:59: a5:7b:d1:17:0e:ae:a8:fc:ba:b6:3b:e2:02:a9:e2: 63:9f:d4:79:d9:c3:a4:de:f6:21:7c:d6:0a:72:d1: c5:fa:8f:a7:08:02:0a:dc:80:dd:ff:d8:c4:07:03: 4e:2c:21:55:c4:ad:45:bc:6d:90:40:9a:a7:36:35: 47:7d:ae:bd:0b:0e:47:7e:ea:65:72:68:ad:3d:19: 8a:70:11:a4:5e:1c:d1:f3:41:e3:ac:56:17:6d:61: a9:6b:1c:65:ef:c0:87:4c:ba:5a:12:17:ae:0e:c8: 5e:d5:86:0e:3e:e3:0f:a9:c1:e3:03:c0:98:86:73: b1:b2:49:d0:c3:fc:e4:2d:a2:54:0e:b8:80:93:76: 8e:d4:fa:d1:4e:9a:02:51:d0:4a:15:ec:6a:c8:0e: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.129.128.0-62.129.147.255 62.129.149.0-62.129.159.255 IPv6: 2a0c:9400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15535 Signature Algorithm: sha256WithRSAEncryption 69:f7:95:90:8e:1b:1a:a2:1e:e1:12:be:71:9d:0a:85:a5:04: 32:8f:da:36:ff:64:61:88:58:50:bc:d1:1a:20:d5:b8:f3:4f: f9:1e:a4:68:f1:5c:13:cb:bc:15:cf:23:c5:b4:04:c6:5e:b8: 4e:ad:db:67:f6:04:c9:4a:f2:0e:28:ef:8a:74:fb:ee:b5:6d: 9c:66:33:2e:6b:58:b9:70:55:48:9f:47:b4:d4:d0:73:eb:ec: 99:15:dc:41:e2:0c:17:d1:5d:c0:3e:9f:3d:6e:77:14:2c:9f: 72:e6:03:5e:8c:3d:1c:83:31:ef:e0:93:44:ef:47:4b:17:ac: f7:46:82:7a:33:dd:07:1f:2a:54:95:f9:2c:8a:03:29:2c:d5: 90:2d:7d:e6:84:0e:7a:6b:bd:1b:98:a5:3a:d6:bb:a4:e0:ca: 18:04:5a:f8:80:df:b6:83:9e:66:6f:d0:59:3e:ac:eb:05:c2: 8a:e1:62:e2:5d:6b:08:4b:2e:9d:97:7e:94:74:60:ed:5e:62: c1:67:b9:e8:1a:49:19:e0:ff:07:97:a1:0c:bd:d9:f3:97:cb: fa:36:c9:88:ac:28:5d:5e:76:3b:75:9f:3c:98:89:c7:ab:c2: be:d3:8f:1f:36:5d:d2:04:e9:55:d2:64:3a:78:f3:5b:53:24: 0c:be:df:1a -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZvBJ0lgq4fl3hf7FnRqishuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MTAxNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTAxYTVlY2RlMmU3OTU5MzI1OTExMDZkMDgyM2QwZDE1NGY3MDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7oItrFwLYGncXufEC8cngkXHOEy I3tNaYnmibF/w9raDAaUc9ahnsHnpxQ0gMmrvBlJ1pNry8Ppvsom0TDGnlV7yQAD QrmnzfU+92P38q9BvJtPd7jF0cf4UxD8OtP3R+r/Dumhklmle9EXDq6o/Lq2O+IC qeJjn9R52cOk3vYhfNYKctHF+o+nCAIK3IDd/9jEBwNOLCFVxK1FvG2QQJqnNjVH fa69Cw5HfuplcmitPRmKcBGkXhzR80HjrFYXbWGpaxxl78CHTLpaEheuDshe1YYO PuMPqcHjA8CYhnOxsknQw/zkLaJUDriAk3aO1PrRTpoCUdBKFexqyA5GHwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFJoBpezeLnlZMlkRBtCCPQ0VT3ACMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3Lzg2M2Mw NC1iMDdlLTRjM2EtOWY0NS1mZTI0NzRkMmYwN2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvODYzYzA0 LWIwN2UtNGMzYS05ZjQ1LWZlMjQ3NGQyZjA3Yy8xL21nR2w3TjR1ZVZreVdSRUcw SUk5RFJWUGNBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEQGCCsGAQUF BwEHAQH/BDUwMzAiBAIAATAcMAwDBAc+gYADBAI+gZAwDAMEAD6BlQMEBT6BgDAN BAIAAjAHAwUDKgyUADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI8rzANBgkqhkiG 9w0BAQsFAAOCAQEAafeVkI4bGqIe4RK+cZ0KhaUEMo/aNv9kYYhYULzRGiDVuPNP +R6kaPFcE8u8Fc8jxbQExl64Tq3bZ/YEyUryDijvinT77rVtnGYzLmtYuXBVSJ9H tNTQc+vsmRXcQeIMF9FdwD6fPW53FCyfcuYDXow9HIMx7+CTRO9HSxes90aCejPd Bx8qVJX5LIoDKSzVkC195oQOemu9G5ilOta7pODKGARa+IDftoOeZm/QWT6s6wXC iuFi4l1rCEsunZd+lHRg7V5iwWe56BpJGeD/B5ehDL3Z85fL+jbJiKwoXV52O3Wf PJiJx6vCvtOPHzZd0gTpVdJkOnjzW1MkDL7fGg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:18 2026 by rpki-client